job "ci" {
  image "mcr.microsoft.com/playwright:v1.61.0-noble"
  trigger {
    push {
      branch "trunk"
      tag "v*"
    }
  }
  cache "home" {
    path ".home"
    key {
      file "mise.lock"
      file "package-lock.json"
    }
  }
  run "export HOME=/work/.home && mkdir -p \"$HOME\""
  run "command -v mise >/dev/null 2>&1 || curl -fsSL https://mise.run | sh"
  run "export PATH=\"$HOME/.local/bin:$PATH\""
  run "mise trust"
  run "mise install"
  // Luci's capability-free container replaces Firefox's incompatible content sandbox.
  run "CI=true MOZ_DISABLE_CONTENT_SANDBOX=1 mise run //:ci"
  artifact "release" {
    path ".pi/tmp/release-artifacts/manifest.json"
    required true
  }
  publish "pkg" {
    from ".pi/tmp/release-artifacts"
    to "pi-ext/${rev}"
  }
}