# Diagnostic branch only: this workflow cannot publish or deploy. Cache writes
# are scoped to this probe branch; master cannot restore branch-only caches.
name: Release
run-name: Runner dependency cache probe ${{ github.run_number }}
on:
  workflow_dispatch:
permissions:
  contents: read
jobs:
  verify_paperclip_runner:
    name: Verify Paperclip Runner
    runs-on: ubuntu-latest
    timeout-minutes: 20
    permissions:
      contents: read

    steps:
      - name: Checkout repository
        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
        with:
          ref: ${{ github.sha }}

      - name: Setup pnpm
        uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v6
        with:
          version: 9.15.4

      - name: Setup Node.js
        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7
        with:
          node-version: 24
          cache: pnpm

      - name: Select the pinned Runner Rust toolchain
        working-directory: packages/paperclip-runner
        run: |
          set -euo pipefail
          rustup show
          toolchain="$(rustup show active-toolchain | awk '{print $1}')"
          echo "RUSTUP_TOOLCHAIN=$toolchain" >> "$GITHUB_ENV"

      - name: Cache Runner Rust dependencies
        uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2.9.2
        with:
          workspaces: packages/paperclip-runner/runner -> target
          shared-key: release-runner-v1
          # Rebuild workspace code and rerun every check. Cache only compiled
          # dependencies; never restore installed executables from cargo/bin.
          cache-workspace-crates: false
          cache-bin: false
          # Manual candidate refs may read the cache, but only a successful
          # master push verifying its own commit can populate the shared cache.
          save-if: ${{ github.ref == 'refs/heads/ci/probe-release-runner-cache' && github.event_name == 'workflow_dispatch' }}

      - name: Install dependencies
        run: pnpm install --no-frozen-lockfile

      - name: Verify Paperclip Runner
        run: pnpm --filter @paperclipai/paperclip-runner check:all