🤖 ci: migrate integration tests to self-hosted runner (#545)

## Summary

Consolidates integration test workflows and migrates them to use the
self-hosted runner (mux-ci-1) for faster, more reliable execution.

## Changes

### Merged Integration Test Jobs
- **Before**: Separate `integration-test` and `ollama-test` jobs
- **After**: Single `integration-test` job that runs all tests including
Ollama

### Self-Hosted Runner Migration
- Changed `runs-on` from `depot-ubuntu-24.04-32` to conditional:
  - `self-hosted` for coder org
  - `ubuntu-latest` fallback for forks
- Runner details: mux-ci-1 (62GB RAM, Ubuntu 24.04.3)
- All required dependencies pre-installed: Node.js, Bun, Make, Git,
Xvfb, Ollama, Docker

### Dynamic Ollama Detection (Fixed Brittle Check)
- **Before**: Hardcoded runner name check (`runner.name != 'mux-ci-1'`)
❌
- **After**: Dynamic detection via systemctl + API check ✅
- Checks if Ollama is already running before attempting installation
- Works with any self-hosted runner that has Ollama pre-installed

### Unified Test Execution
- All integration tests now run with `TEST_OLLAMA=1` by default
- Single coverage report instead of separate reports
- Simpler workflow configuration (28 lines removed)

## Benefits

1. **⚡ Faster execution**: Dedicated hardware with no cold starts
2. **📦 Cached models**: Ollama models (13GB gpt-oss:20b) persisted on
runner
3. **🔧 Simplified config**: One job instead of two duplicate
configurations
4. **💪 More resources**: 62GB RAM vs shared CI resources
5. **🎯 Better reliability**: No throttling or resource contention
6. **🔄 Fork compatible**: Automatically falls back to ubuntu-latest for
non-coder repos

## Runner Configuration

The self-hosted runner has been fully configured with:

| Component | Version | Status |
|-----------|---------|--------|
| GitHub Actions Runner | 2.329.0 | ✅ Running |
| Docker | 28.5.2 | ✅ Configured (runner in docker group) |
| Ollama | 0.12.10 | ✅ Running (systemd service) |
| Node.js | v20.19.5 | ✅ Installed |
| Bun | 1.3.2 | ✅ Installed |
| Xvfb | - | ✅ Installed (headless X11) |

### Ollama Model Cache
- Model: `gpt-oss:20b` (13 GB)
- Status: Fully downloaded and cached
- API: http://localhost:11434

## Review Feedback Addressed

- ✅ Removed brittle hardcoded runner name check
- ✅ Implemented dynamic Ollama detection via systemctl and API
- ✅ Installed Docker on runner
- ✅ Configured runner user with docker group access
- ✅ Restarted runner service to apply group changes

_Generated with `cmux`_

Author: ammar-agent

.github/workflows/ci.yml

@@ -13,6 +13,10 @@ on:
         # This filter is passed to unit tests, integration tests, e2e tests, and storybook tests
         # to enable faster iteration when debugging specific test failures in CI
 
+concurrency:
+  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
+  cancel-in-progress: true
+
 jobs:
   static-check:
     name: Static Checks (lint + typecheck + fmt)
@@ -90,7 +94,7 @@ jobs:
 
   integration-test:
     name: Integration Tests
-    runs-on: ${{ github.repository_owner == 'coder' && 'depot-ubuntu-24.04-32' || 'ubuntu-latest' }}
+    runs-on: ${{ github.repository_owner == 'coder' && 'self-hosted' || 'ubuntu-latest' }}
     steps:
       - name: Checkout code
         uses: actions/checkout@v4
@@ -99,40 +103,23 @@ jobs:
 
       - uses: ./.github/actions/setup-cmux
 
-      - name: Build worker files
-        run: make build-main
-
-      - name: Run integration tests with coverage
-        # --silent suppresses per-test output (17 test files × 32 workers = overwhelming logs)
-        # Ollama tests are skipped automatically (require TEST_OLLAMA=1)
-        run: TEST_INTEGRATION=1 bun x jest --coverage --maxWorkers=100% --silent ${{ github.event.inputs.test_filter || 'tests' }}
-        env:
-          OPENAI_API_KEY: ${{ secrets.OPENAI_API_KEY }}
-          ANTHROPIC_API_KEY: ${{ secrets.ANTHROPIC_API_KEY }}
-
-      - name: Upload coverage to Codecov
-        uses: codecov/codecov-action@v5
-        with:
-          token: ${{ secrets.CODECOV_TOKEN }}
-          files: ./coverage/lcov.info
-          flags: integration-tests
-          fail_ci_if_error: false
-
-  ollama-test:
-    name: Ollama Integration Tests
-    runs-on: ${{ github.repository_owner == 'coder' && 'depot-ubuntu-24.04-32' || 'ubuntu-latest' }}
-    steps:
-      - name: Checkout code
-        uses: actions/checkout@v4
-        with:
-          fetch-depth: 0 # Required for git describe to find tags
-
-      - uses: ./.github/actions/setup-cmux
+      - name: Check if Ollama is pre-installed
+        id: check-ollama
+        run: |
+          if systemctl is-active --quiet ollama 2>/dev/null && curl -sf http://localhost:11434/api/tags > /dev/null 2>&1; then
+            echo "installed=true" >> $GITHUB_OUTPUT
+            echo "✅ Ollama already running (self-hosted runner)"
+          else
+            echo "installed=false" >> $GITHUB_OUTPUT
+            echo "⚙️ Ollama not found, will install"
+          fi
 
       - name: Setup Ollama
+        # Only install Ollama if not already running (self-hosted runners have it pre-installed)
+        if: steps.check-ollama.outputs.installed != 'true'
         uses: ./.github/actions/setup-ollama
 
-      # Ollama server started by setup-ollama action
+      # Ollama server started by setup-ollama action or pre-installed on self-hosted
       # Tests will pull models idempotently
       - name: Verify Ollama server
         run: |
@@ -143,19 +130,21 @@ jobs:
       - name: Build worker files
         run: make build-main
 
-      - name: Run Ollama integration tests with coverage
-        # TEST_OLLAMA=1 enables Ollama-specific tests
-        # --silent suppresses verbose test output
-        run: TEST_INTEGRATION=1 TEST_OLLAMA=1 bun x jest --coverage --maxWorkers=100% --silent tests/ipcMain/ollama.test.ts
+      - name: Run all integration tests with coverage
+        # TEST_OLLAMA=1 enables Ollama-specific tests (now included with all integration tests)
+        # --silent suppresses per-test output (17+ test files × workers = overwhelming logs)
+        run: TEST_INTEGRATION=1 TEST_OLLAMA=1 bun x jest --coverage --maxWorkers=100% --silent ${{ github.event.inputs.test_filter || 'tests' }}
         env:
+          OPENAI_API_KEY: ${{ secrets.OPENAI_API_KEY }}
+          ANTHROPIC_API_KEY: ${{ secrets.ANTHROPIC_API_KEY }}
           OLLAMA_BASE_URL: http://localhost:11434/api
 
       - name: Upload coverage to Codecov
         uses: codecov/codecov-action@v5
         with:
           token: ${{ secrets.CODECOV_TOKEN }}
           files: ./coverage/lcov.info
-          flags: ollama-tests
+          flags: integration-tests
           fail_ci_if_error: false
 
   storybook-test: