GitHub Actions Integration

<!-- .github/pull_request_template.md -->
## Summary
<!-- What changed and why -->
 
## Ticket
<!-- SHIP-___ -->
 
## Device test evidence (required for UI / native / navigation)
| Platform | Device / OS        | Build source     | Result |
|----------|--------------------|------------------|--------|
| iOS      | e.g. iPhone 14 / 17| EAS preview QR   | PASS   |
| Android  | e.g. Pixel 7 / 14  | EAS preview QR   | PASS   |
 
## Test paths exercised
- [ ] Cold start / login
- [ ] Changed screen(s): ___
- [ ] Deep link / push (if applicable)
 
## Screenshots / recordings
<!-- Drag Maestro cloud link, screen recording, or screenshot -->
 
## CI
- [ ] `quality` check green
- [ ] Preview build ID noted: ___

# .github/workflows/pr-evidence.yml
name: PR Evidence
on:
  pull_request:
    types: [opened, edited, synchronize, reopened]
 
jobs:
  evidence:
    runs-on: ubuntu-latest
    steps:
      - name: Validate PR template
        uses: actions/github-script@v7
        with:
          script: |
            const body = context.payload.pull_request.body ?? '';
            const needsDevice = /native|navigation|gesture|camera|ui/i.test(body)
              || context.payload.pull_request.labels.some(l => l.name === 'needs-device-qa');
            if (!needsDevice) {
              core.info('No device-heavy paths detected - evidence check skipped');
              return;
            }
            const required = ['Device test evidence', 'Test paths exercised', 'iOS', 'Android', 'PASS'];
            const missing = required.filter(r => !body.includes(r));
            if (missing.length) {
              core.setFailed(`PR body missing: ${missing.join(', ')}`);
            }

# .github/workflows/pr-checks.yml (excerpt - pair with evidence)
name: PR Checks
on:
  pull_request:
    branches: [main]
jobs:
  quality:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: actions/setup-node@v4
        with: { node-version: 20, cache: npm }
      - run: npm ci
      - run: npx expo customize tsconfig.json
      - run: npm run format:check && npm run lint && npm run typecheck
      - run: npm run test -- --ci

mkdir -p .github

<!-- .github/pull_request_template.md -->
## Summary
 
## Ticket
SHIP-
 
## Change type
- [ ] JS / copy only (OTA-safe)
- [ ] UI layout / styling
- [ ] Navigation / gestures
- [ ] Native module / config plugin
- [ ] SDK upgrade
 
## Device test evidence
> Required when any box above except "JS / copy only" is checked.
 
| Platform | Device / OS | Build (`build_id` or preview link) | Result |
|----------|-------------|-----------------------------------|--------|
| iOS      |             |                                   | PASS / FAIL |
| Android  |             |                                   | PASS / FAIL |
 
## Test paths exercised
- [ ] Cold start
- [ ] Auth / session restore
- [ ] Feature under change: ___
 
## Automation
- [ ] Maestro flow: `flows/smoke.yaml` (link or CI artifact)
- [ ] Screenshot / screen recording attached
 
## Rollback notes (if production-impacting)
<!-- OTA channel, feature flag, or hotfix branch plan -->

# Create GitHub labels (gh CLI)
gh label create "needs-device-qa" --color B60205 --description "Requires device evidence in PR"
gh label create "skip-device-qa" --color C5DEF5 --description "Docs or CI-only - no device matrix"

# .github/workflows/pr-labeler.yml
name: PR Labeler
on:
  pull_request:
    types: [opened, synchronize]
 
jobs:
  label:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/labeler@v5
        with:
          repo-token: ${{ secrets.GITHUB_TOKEN }}

# .github/labeler.yml
needs-device-qa:
  - changed-files:
      - any-glob-to-any-file:
          - 'app/**'
          - 'src/**/*.tsx'
          - 'ios/**'
          - 'android/**'
          - 'app.json'
          - 'eas.json'

# .github/workflows/pr-evidence.yml
name: PR Evidence
on:
  pull_request:
    types: [opened, edited, synchronize, reopened]
 
permissions:
  pull-requests: read
 
jobs:
  evidence:
    if: >-
      !contains(github.event.pull_request.labels.*.name, 'skip-device-qa')
    runs-on: ubuntu-latest
    steps:
      - uses: actions/github-script@v7
        with:
          script: |
            const pr = context.payload.pull_request;
            const body = pr.body ?? '';
            const title = pr.title ?? '';
 
            const uiPaths = /(src\/|app\/|\.tsx|navigation|gesture|native|plugin)/i;
            const needsEvidence =
              pr.labels.some(l => l.name === 'needs-device-qa') ||
              uiPaths.test(body) ||
              uiPaths.test(title);
 
            if (!needsEvidence) {
              core.info('Skipping device evidence - JS/docs-only change');
              return;
            }
 
            const fail = (msg) => core.setFailed(msg);
 
            if (!/\| iOS \|.*\|.*\|.*PASS/i.test(body.replace(/\n/g, ' '))) {
              fail('iOS row with PASS missing in device table');
            }
            if (!/\| Android \|.*\|.*\|.*PASS/i.test(body.replace(/\n/g, ' '))) {
              fail('Android row with PASS missing in device table');
            }
            if (!body.includes('Test paths exercised')) {
              fail('Test paths exercised section missing');
            }
            const buildRef = /build_id|eas\.dev|expo\.dev\/accounts/i;
            if (!buildRef.test(body)) {
              fail('No EAS preview build_id or install link in PR body');
            }

GitHub → Settings → Branches → main:
  Require status checks:
    - quality          (pr-checks.yml)
    - evidence         (pr-evidence.yml)
  Require pull request reviews: 1

# Author adds label after opening PR (or labeler adds automatically)
gh pr create --fill
gh pr edit --add-label needs-device-qa

gh pr edit 42 --add-label needs-preview
# CI posts QR - author installs on physical devices

# Run Maestro locally against preview binary
maestro test flows/checkout-smoke.yaml
# Attach recording; paste build_id into PR table

| Platform | Device / OS        | Build source                          | Result |
|----------|----------------------|---------------------------------------|--------|
| iOS      | iPhone 14 / iOS 17.4 | build_id 8f3a2c (PR #42 preview)      | PASS   |
| Android  | Pixel 7 / API 34     | build_id 8f3a2c (PR #42 preview)      | PASS   |

# .github/workflows/preview-maestro.yml (excerpt)
- name: Maestro smoke on preview artifact
  if: success()
  run: |
    maestro test flows/smoke.yaml --format junit --output maestro.xml
- uses: actions/upload-artifact@v4
  with:
    name: maestro-${{ github.event.pull_request.number }}
    path: maestro.xml

# Robot token for preview workflows - never personal account
# GitHub Secret: EXPO_TOKEN (see GitHub Actions + EAS)