chore: report action status as GH status checks

Author: bitnimble

.github/actions/commit-status/action.yml

@@ -0,0 +1,27 @@
+name: Commit status
+description: Report a commit status on the PR head commit via the GitHub Statuses API.
+
+inputs:
+  context:
+    description: Status context (the check name shown on the PR).
+    required: true
+  state:
+    description: One of pending, success, failure, error.
+    required: true
+  description:
+    description: Short human-readable status description.
+    required: false
+    default: ''
+
+runs:
+  using: composite
+  steps:
+    - shell: bash
+      env:
+        GH_TOKEN: ${{ github.token }}
+      run: |
+        gh api "repos/${{ github.repository }}/statuses/${{ github.event.pull_request.head.sha }}" \
+          -f state="${{ inputs.state }}" \
+          -f context="${{ inputs.context }}" \
+          -f description="${{ inputs.description }}" \
+          -f target_url="${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}"

.github/workflows/e2e.yml

@@ -9,6 +9,10 @@ concurrency:
   group: e2e-${{ github.ref }}
   cancel-in-progress: true
 
+permissions:
+  contents: read
+  statuses: write
+
 jobs:
   e2e:
     runs-on: ubuntu-latest
@@ -19,6 +23,14 @@ jobs:
         with:
           fetch-depth: 1
 
+      - name: Report pending status
+        if: github.event_name == 'pull_request'
+        uses: ./.github/actions/commit-status
+        with:
+          context: e2e
+          state: pending
+          description: Running E2E tests
+
       - name: Setup Bun
         uses: oven-sh/setup-bun@v2
 
@@ -58,3 +70,11 @@ jobs:
           name: playwright-report
           path: playwright-report/
           retention-days: 7
+
+      - name: Report final status
+        if: ${{ !cancelled() && github.event_name == 'pull_request' }}
+        uses: ./.github/actions/commit-status
+        with:
+          context: e2e
+          state: ${{ job.status == 'success' && 'success' || 'failure' }}
+          description: ${{ job.status == 'success' && 'E2E tests passed' || 'E2E tests failed' }}

.github/workflows/schema.yml

@@ -7,6 +7,10 @@ on:
       - 'supabase/migrations/**'
   workflow_dispatch:
 
+permissions:
+  contents: read
+  statuses: write
+
 jobs:
   schema:
     runs-on: ubuntu-latest
@@ -15,6 +19,14 @@ jobs:
       - name: Checkout repository
         uses: actions/checkout@v5
 
+      - name: Report pending status
+        if: github.event_name == 'pull_request'
+        uses: ./.github/actions/commit-status
+        with:
+          context: schema
+          state: pending
+          description: Checking schema and generated types
+
       - name: Setup Bun
         uses: oven-sh/setup-bun@v2
 
@@ -60,3 +72,11 @@ jobs:
             echo "::error::Generated DB types are out of date. Run 'bun schema' locally and commit the result."
             exit 1
           fi
+
+      - name: Report final status
+        if: ${{ !cancelled() && github.event_name == 'pull_request' }}
+        uses: ./.github/actions/commit-status
+        with:
+          context: schema
+          state: ${{ job.status == 'success' && 'success' || 'failure' }}
+          description: ${{ job.status == 'success' && 'Schema in sync' || 'Schema out of sync' }}

.github/workflows/test.yml

@@ -5,8 +5,12 @@ on:
     branches: [main]
   pull_request:
 
+permissions:
+  contents: read
+  statuses: write
+
 jobs:
-  test:
+  unit:
     runs-on: ubuntu-latest
     timeout-minutes: 15
     steps:
@@ -15,6 +19,14 @@ jobs:
         with:
           fetch-depth: 1
 
+      - name: Report pending status
+        if: github.event_name == 'pull_request'
+        uses: ./.github/actions/commit-status
+        with:
+          context: unit
+          state: pending
+          description: Running unit tests
+
       - name: Setup Bun
         uses: oven-sh/setup-bun@v2
 
@@ -28,10 +40,56 @@ jobs:
       - name: Install dependencies
         run: bun install --frozen-lockfile
 
-      # No Postgres/Supabase/S3 services needed: the DB is an ephemeral in-memory PGlite started by
-      # the test script, and S3/Supabase are faked (see .env.test).
       - name: Unit tests
         run: bun run test:unit
 
+      - name: Report final status
+        if: ${{ !cancelled() && github.event_name == 'pull_request' }}
+        uses: ./.github/actions/commit-status
+        with:
+          context: unit
+          state: ${{ job.status == 'success' && 'success' || 'failure' }}
+          description: ${{ job.status == 'success' && 'Unit tests passed' || 'Unit tests failed' }}
+
+  integration:
+    runs-on: ubuntu-latest
+    timeout-minutes: 15
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v5
+        with:
+          fetch-depth: 1
+
+      - name: Report pending status
+        if: github.event_name == 'pull_request'
+        uses: ./.github/actions/commit-status
+        with:
+          context: integration
+          state: pending
+          description: Running integration tests
+
+      - name: Setup Bun
+        uses: oven-sh/setup-bun@v2
+
+      - name: Cache bun install cache
+        uses: actions/cache@v4
+        with:
+          path: ~/.bun/install/cache
+          key: bun-${{ runner.os }}-${{ hashFiles('bun.lock') }}
+          restore-keys: bun-${{ runner.os }}-
+
+      - name: Install dependencies
+        run: bun install --frozen-lockfile
+
+      # No Postgres/Supabase/S3 services needed: the DB is an ephemeral in-memory PGlite started by
+      # the test script, and S3/Supabase are faked (see .env.test).
       - name: Integration tests
         run: bun run test:integration
+
+      - name: Report final status
+        if: ${{ !cancelled() && github.event_name == 'pull_request' }}
+        uses: ./.github/actions/commit-status
+        with:
+          context: integration
+          state: ${{ job.status == 'success' && 'success' || 'failure' }}
+          description: ${{ job.status == 'success' && 'Integration tests passed' || 'Integration tests failed' }}