Cursor/youtube selection actions 4181

.github/workflows/build-app.yml

@@ -0,0 +1,41 @@
+name: Build app
+
+# Compiles a debug APK on every push so broken builds fail before release.
+on:
+  push:
+
+permissions:
+  contents: read
+
+concurrency:
+  group: build-app-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  build:
+    if: github.actor != 'dependabot[bot]'
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v6
+
+      - name: Set up JDK 21
+        uses: actions/setup-java@v5
+        with:
+          distribution: temurin
+          java-version: '21'
+
+      - name: Setup Gradle
+        uses: gradle/actions/setup-gradle@v6
+
+      - name: Build debug APK
+        run: gradle :app:assembleDebug -Ppixelplay.enableAbiSplits=true
+
+      - name: Upload debug APKs
+        uses: actions/upload-artifact@v7
+        with:
+          name: PixelPlay-debug-${{ github.sha }}
+          path: app/build/outputs/apk/debug/*.apk
+          if-no-files-found: error
+          compression-level: 0

.github/workflows/codeql.yml

@@ -1,10 +1,7 @@
 name: "CodeQL Advanced"
 
+# Weekly + manual only — avoid a full Gradle rebuild on every master push.
 on:
-  push:
-    branches: [ master ]
-  pull_request:
-    branches: [ master ]
   workflow_dispatch:
   schedule:
     - cron: '25 15 * * 0'
@@ -49,7 +46,7 @@ jobs:
           build-mode: manual
 
       - name: Build with Gradle
-        run: ${{ github.workspace }}/gradlew :app:assembleDebug :wear:assembleDebug --no-daemon
+        run: ${{ github.workspace }}/gradlew :app:assembleDebug --no-daemon
 
       - name: Perform CodeQL Analysis
         uses: github/codeql-action/analyze@v4

.github/workflows/commitlint.yml

@@ -0,0 +1,68 @@
+name: Commit Lint (Semantic)
+
+# Keep this — cheap and useful. Runs on push/PR; not an APK build.
+on:
+  push:
+    branches: [master, 'feat/**', 'fix/**', 'chore/**', 'ci/**']
+  pull_request:
+    types: [opened, synchronize, reopened, edited]
+    branches: [master]
+
+permissions:
+  contents: read
+  pull-requests: read
+
+concurrency:
+  group: commitlint-${{ github.workflow }}-${{ github.event.pull_request.number || github.sha }}
+  cancel-in-progress: true
+
+jobs:
+  commitlint:
+    name: Enforce conventional commits
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v6
+        with:
+          fetch-depth: 0
+
+      - name: Setup Node
+        uses: actions/setup-node@v6
+        with:
+          node-version: '22'
+
+      - name: Install commitlint
+        run: npm install --no-save @commitlint/cli@19 @commitlint/config-conventional@19
+
+      - name: Lint PR commits
+        if: github.event_name == 'pull_request'
+        run: |
+          npx commitlint \
+            --from "${{ github.event.pull_request.base.sha }}" \
+            --to "${{ github.event.pull_request.head.sha }}" \
+            --verbose
+
+      - name: Lint push commits
+        if: github.event_name == 'push'
+        run: |
+          # Validate every new commit on the push (range from before → after).
+          # Force-pushes rewrite `before` so that SHA may no longer exist — fall back
+          # to linting only HEAD instead of failing with "Invalid revision range".
+          BEFORE="${{ github.event.before }}"
+          ZERO="0000000000000000000000000000000000000000"
+          if [ -z "$BEFORE" ] || [ "$BEFORE" = "$ZERO" ]; then
+            echo "No previous SHA (new branch); linting HEAD only."
+            npx commitlint --last --verbose
+          elif ! git cat-file -e "${BEFORE}^{commit}" 2>/dev/null; then
+            echo "Previous SHA $BEFORE is unreachable (likely force-push); linting HEAD only."
+            npx commitlint --last --verbose
+          else
+            npx commitlint --from "$BEFORE" --to "${{ github.sha }}" --verbose
+          fi
+
+      - name: Lint PR title
+        if: github.event_name == 'pull_request'
+        env:
+          PR_TITLE: ${{ github.event.pull_request.title }}
+        run: |
+          echo "$PR_TITLE" | npx commitlint --verbose

.github/workflows/nightly-apk.yml

@@ -1,9 +1,7 @@
 name: Build Nightly APK
 
+# Manual only — continuous Release APK on master replaces scheduled nightlies.
 on:
-  schedule:
-    # Runs at 02:17 America/Buenos_Aires.
-    - cron: '17 5 * * *'
   workflow_dispatch:
 
 permissions:

.github/workflows/phone-debug.yml

@@ -1,8 +1,7 @@
 name: Build Phone APK (Debug)
 
+# PR / manual only — master publishes via Release APK instead.
 on:
-  push:
-    branches: [ master ]
   pull_request:
     types: [opened, synchronize, reopened]
     branches: [ master ]

.github/workflows/phone-release.yml

@@ -1,8 +1,7 @@
 name: Build Phone APK (Release)
 
+# PR / manual only — master publishes via Release APK instead.
 on:
-  push:
-    branches: [ master ]
   pull_request:
     types: [opened, synchronize, reopened]
     branches: [ master ]