types-drift.yml

name: Backend types drift check

on:
  # All PRs, not path-filtered: the release/version-bump PR does not touch
  # backend/, so a path filter would skip exactly the PR that ships. Running
  # on every PR guarantees main is drift-free at each merge.
  pull_request:
  workflow_dispatch:

jobs:
  drift-check:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout shard_core
        uses: actions/checkout@v4

      - name: Checkout freeshard-controller (source of truth)
        uses: actions/checkout@v4
        with:
          repository: FreeshardBase/freeshard-controller
          ref: main
          token: ${{ secrets.CONTROLLER_RO_TOKEN }}
          path: freeshard-controller

      - name: Install just
        uses: extractions/setup-just@v2

      - name: Resync vendored models from controller main
        run: |
          just --set SOURCE_DIR \
            "freeshard-controller/freeshard-controller-backend/freeshard_controller/data_model" \
            get-types

      - name: Fail on drift
        run: |
          if ! git diff --exit-code shard_core/data_model/backend; then
            echo "::error::shard_core/data_model/backend is out of sync with freeshard-controller main. Run 'just get-types' (with ../freeshard-controller checked out) and commit the result."
            exit 1
          fi