feat(slides): automated homepage highlights refresh

.github/workflows/pr-test.yml

@@ -26,6 +26,12 @@ jobs:
       - name: Check slug naming conventions
         run: node scripts/check-slugs.mjs
 
+      - name: Validate homepage slides
+        run: node scripts/slides/slides.js validate
+
+      - name: Slides pipeline unit tests
+        run: node --test scripts/slides/slides.test.js
+
       - name: Build (static output)
         run: pnpm build
         env:

.github/workflows/refresh-highlights.yml

@@ -0,0 +1,143 @@
+name: Refresh Highlights
+
+on:
+  schedule:
+    - cron: '0 7 * * 1'   # Mon ~08:00 Europe/Oslo (UTC; ±1h DST drift)
+    - cron: '0 15 * * 5'  # Fri ~16:00 Europe/Oslo
+  workflow_dispatch:
+
+concurrency:
+  group: refresh-highlights
+  cancel-in-progress: false
+
+permissions:
+  contents: write
+  pull-requests: write
+  issues: write
+
+jobs:
+  refresh:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v6
+
+      - name: Setup pnpm
+        uses: pnpm/action-setup@v4
+
+      - name: Setup Node
+        uses: actions/setup-node@v6
+        with:
+          node-version-file: .nvmrc
+          cache: pnpm
+
+      - name: Install dependencies
+        run: pnpm install
+
+      - name: Install OpenCode (pinned; agent is optional)
+        continue-on-error: true
+        run: npm install -g opencode-ai@0.5.29
+
+      - name: Run refresh pipeline
+        id: refresh
+        continue-on-error: true
+        env:
+          # Optional: set repo secrets to enable the caption agent. Absent → the
+          # pipeline uses summary-derived captions (fully functional).
+          SLIDES_AGENT_MODEL: ${{ vars.SLIDES_AGENT_MODEL }}
+          OPENROUTER_API_KEY: ${{ secrets.OPENROUTER_API_KEY }}
+        run: node scripts/slides/slides.js refresh --diff-scope
+
+      - name: Build sanity gate
+        id: build
+        if: steps.refresh.outcome == 'success' && steps.refresh.outputs.result == 'changed'
+        continue-on-error: true
+        run: pnpm build
+        env:
+          GITHUB_PAGES: true
+
+      - name: Open PR
+        id: pr
+        if: steps.refresh.outputs.result == 'changed' && steps.build.outcome == 'success'
+        continue-on-error: true
+        env:
+          # A PAT makes pr-test.yml run on the PR; PRs opened with the default
+          # GITHUB_TOKEN get no checks. Validation and pnpm build above already
+          # gated this branch either way.
+          GH_TOKEN: ${{ secrets.SLIDES_BOT_TOKEN || github.token }}
+        run: |
+          set -euo pipefail
+          BRANCH="bot/slides-refresh-${{ github.run_id }}"
+          git config user.name "elixir-no-bot"
+          git config user.email "actions@github.com"
+          git checkout -b "$BRANCH"
+          git add src/data/slides.json src/data/slides
+          git commit -m "chore(slides): refresh homepage highlights"
+
+          # Read before creating, or the new PR supersedes itself. This runs
+          # before the push because a bare assignment from a command
+          # substitution carries its exit status: if the list call fails,
+          # set -e ends the step here, and there is no pushed branch to orphan.
+          SUPERSEDED=$(gh pr list --state open --base main --limit 100 --json number,headRefName \
+            --jq '.[] | select(.headRefName | startswith("bot/slides-refresh-")) | .number')
+
+          git push origin "$BRANCH"
+
+          cat > "$RUNNER_TEMP/pr-body.md" <<'EOF'
+          Automated highlights refresh, open for review.
+
+          Slide selection and captions were regenerated from recent content. The
+          pipeline validated the result after writing it, and `pnpm build` passed,
+          both in the workflow run that opened this.
+
+          Merge it or close it, but do not leave it sitting. The branch holds a
+          whole `slides.json` written against main as of this run, so the next
+          run replaces this PR rather than rebasing it.
+          EOF
+
+          if ! PR_URL=$(gh pr create --base main --head "$BRANCH" \
+            --title "chore(slides): refresh homepage highlights" \
+            --body-file "$RUNNER_TEMP/pr-body.md"); then
+            git push origin --delete "$BRANCH" || true
+            exit 1
+          fi
+
+          # One open refresh at a time. Each run recomputes the carousel from
+          # main as it stands now, so an older PR is not a smaller change, it is
+          # a different answer to the same question; merging both can put back a
+          # slide the newer run deliberately dropped. Closed PRs keep a Restore
+          # branch button, so nothing is lost.
+          # A close that fails must not turn this run red: the new PR is already
+          # open and mergeable, and someone merging the old one by hand in the
+          # seconds since the list above is a normal way to get here.
+          for N in $SUPERSEDED; do
+            gh pr close "$N" --delete-branch \
+              --comment "Superseded by ${PR_URL}, computed from the current main." \
+              || echo "::warning::could not close superseded PR #${N}; close it by hand"
+          done
+
+      - name: Report failure
+        # failure() catches the steps above these three: a broken `pnpm install`
+        # stops the carousel refreshing just as effectively as a broken pipeline,
+        # and would otherwise only show up as a red run nobody is watching.
+        if: failure() || steps.refresh.outcome == 'failure' || steps.build.outcome == 'failure' || steps.pr.outcome == 'failure'
+        env:
+          GH_TOKEN: ${{ github.token }}
+          # gh reads the repo from the git remote, and a failure before checkout
+          # leaves no remote to read.
+          GH_REPO: ${{ github.repository }}
+        run: |
+          set -euo pipefail
+          TITLE="Highlights refresh failed"
+          BODY="The scheduled highlights refresh failed on run ${{ github.run_id }}. See the [workflow logs](${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }})."
+          EXISTING=$(gh issue list --label slides-bot --state open --json number --jq '.[0].number // empty' || echo "")
+          if [ -n "$EXISTING" ]; then
+            gh issue comment "$EXISTING" --body "$BODY"
+          else
+            gh label create slides-bot --color BFD4F2 --description "Automated highlights refresh" 2>/dev/null || true
+            gh issue create --title "$TITLE" --label slides-bot --body "$BODY"
+          fi
+
+      - name: Fail job if pipeline, build, or PR failed
+        if: steps.refresh.outcome == 'failure' || steps.build.outcome == 'failure' || steps.pr.outcome == 'failure'
+        run: exit 1

package.json

@@ -15,7 +15,11 @@
     "astro": "astro",
     "postbuild": "pagefind --site dist",
     "test:slugs": "node scripts/check-slugs.mjs",
-    "test:pages": "node scripts/test-pages.mjs"
+    "test:pages": "node scripts/test-pages.mjs",
+    "slides:collect": "node scripts/slides/slides.js collect",
+    "slides:refresh": "node scripts/slides/slides.js refresh",
+    "slides:validate": "node scripts/slides/slides.js validate",
+    "slides:test": "node --test scripts/slides/slides.test.js"
   },
   "dependencies": {
     "@astrojs/check": "^0.9.0",
@@ -46,6 +50,7 @@
     "@types/dompurify": "^3.2.0",
     "@types/react": "^18.2.37",
     "@types/react-dom": "^18.2.15",
+    "gray-matter": "^4.0.3",
     "npm-run-all2": "^9.0.2",
     "pagefind": "^1.5.0"
   },