name: web-advanced-nightly

# Every web Advanced capability is off in production unless a deployment names it, which means none
# of them is exercised by the ordinary PR gate. That is exactly why they need their own nightly: a
# capability nobody runs is a capability nobody notices breaking, and the first person to find out
# is whoever enabled it.
#
# The lane is tagged rather than module-scoped because Advanced lives in the same leaf as Stable.

on:
  workflow_dispatch:
  schedule:
    # 03:30 UTC, after web-nightly. They contend for the same machine when streaming holds
    # connections, and a load lane that shares a runner measures the runner.
    - cron: '30 3 * * *'

permissions:
  contents: read

concurrency:
  group: ${{ github.workflow }}
  cancel-in-progress: false

jobs:
  web-advanced-capabilities:
    runs-on: ubuntu-latest
    timeout-minutes: 60
    steps:
      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # actions/checkout@v4.2.2
      - name: Validate Gradle wrapper
        id: gradle-wrapper-validation
        uses: gradle/actions/wrapper-validation@3f131e8634966bd73d06cc69884922b02e6faf92 # gradle/actions@v6
      - uses: actions/setup-java@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 # actions/setup-java@v4.7.1
        with:
          distribution: temurin
          java-version: "21.0.11+10"
          cache: gradle
          cache-dependency-path: |
            src/**/*.gradle
            src/**/gradle-wrapper.properties
            src/**/gradle.lockfile
      - name: Run the Advanced capability lane
        working-directory: src
        run: >-
          ./gradlew
          :adapter:inbound:web:webAdvancedTest
          --no-daemon
          --stacktrace
      - name: Prove Stable behaviour is unchanged with every flag off
        # The rollback assertion, run as its own step so a failure names itself. Two of the twelve
        # capabilities change requests that do not use them, and this is what catches a third
        # acquiring that property by accident.
        working-directory: src
        run: >-
          ./gradlew
          :adapter:inbound:web:test
          --tests '*WebAdvancedReleaseTest*'
          --no-daemon
          --stacktrace
      - name: Publish the test reports
        if: always()
        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # actions/upload-artifact@v4.6.2
        with:
          name: web-advanced-nightly-reports
          path: src/adapter/inbound/web/build/reports/tests/
          if-no-files-found: warn