From ce9fd1feb679894cffd6819f387c341851122a58 Mon Sep 17 00:00:00 2001
From: Eason WaveKat <eason@wavekat.com>
Date: Mon, 18 May 2026 22:44:40 +1200
Subject: [PATCH] ci: move Linux workflows to self-hosted runners (wavekat-ci)

Routes static `runs-on: ubuntu-latest` jobs to the org's self-hosted
runner pool via the `wavekat-ci` role label. Matrix-driven and
parameterized `runs-on` values are left untouched so multi-OS jobs
continue to use GitHub-hosted runners.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
---
 .github/workflows/ci.yml                  | 8 ++++----
 .github/workflows/cv-deploy.yml           | 2 +-
 .github/workflows/cv-runner-provision.yml | 2 +-
 .github/workflows/cv-sync.yml             | 2 +-
 .github/workflows/publish-smart-turn.yml  | 2 +-
 .github/workflows/release-please.yml      | 2 +-
 6 files changed, 9 insertions(+), 9 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index caa4c81..caf3320 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -11,7 +11,7 @@ env:
 
 jobs:
   changes:
-    runs-on: ubuntu-latest
+    runs-on: [self-hosted, wavekat-ci]
     outputs:
       audio-lab-backend: ${{ steps.filter.outputs.audio-lab-backend }}
       audio-lab-frontend: ${{ steps.filter.outputs.audio-lab-frontend }}
@@ -43,7 +43,7 @@ jobs:
   audio-lab-backend:
     needs: changes
     if: ${{ needs.changes.outputs.audio-lab-backend == 'true' }}
-    runs-on: ubuntu-latest
+    runs-on: [self-hosted, wavekat-ci]
     steps:
       - uses: actions/checkout@v6
       - uses: dtolnay/rust-toolchain@stable
@@ -72,7 +72,7 @@ jobs:
   audio-lab-frontend:
     needs: changes
     if: ${{ needs.changes.outputs.audio-lab-frontend == 'true' }}
-    runs-on: ubuntu-latest
+    runs-on: [self-hosted, wavekat-ci]
     steps:
       - uses: actions/checkout@v6
       - uses: actions/setup-node@v4
@@ -95,7 +95,7 @@ jobs:
   cv-explorer:
     needs: changes
     if: ${{ needs.changes.outputs.cv-explorer == 'true' }}
-    runs-on: ubuntu-latest
+    runs-on: [self-hosted, wavekat-ci]
     steps:
       - uses: actions/checkout@v6
       - uses: actions/setup-node@v4
diff --git a/.github/workflows/cv-deploy.yml b/.github/workflows/cv-deploy.yml
index e99e602..7ed0347 100644
--- a/.github/workflows/cv-deploy.yml
+++ b/.github/workflows/cv-deploy.yml
@@ -10,7 +10,7 @@ on:
 
 jobs:
   deploy:
-    runs-on: ubuntu-latest
+    runs-on: [self-hosted, wavekat-ci]
     steps:
       - uses: actions/checkout@v6
 
diff --git a/.github/workflows/cv-runner-provision.yml b/.github/workflows/cv-runner-provision.yml
index 10fc9f6..b645d27 100644
--- a/.github/workflows/cv-runner-provision.yml
+++ b/.github/workflows/cv-runner-provision.yml
@@ -32,7 +32,7 @@ env:
 
 jobs:
   provision:
-    runs-on: ubuntu-latest
+    runs-on: [self-hosted, wavekat-ci]
     steps:
       - name: Azure Login
         uses: azure/login@v3
diff --git a/.github/workflows/cv-sync.yml b/.github/workflows/cv-sync.yml
index c5d3ea0..bc749d0 100644
--- a/.github/workflows/cv-sync.yml
+++ b/.github/workflows/cv-sync.yml
@@ -79,7 +79,7 @@ jobs:
           R2_BUCKET_NAME: ${{ vars.CV_EXPLORER_R2_BUCKET }}
 
   cleanup:
-    runs-on: ubuntu-latest
+    runs-on: [self-hosted, wavekat-ci]
     needs: sync
     if: false # Disabled during debugging — re-enable when stable
     steps:
diff --git a/.github/workflows/publish-smart-turn.yml b/.github/workflows/publish-smart-turn.yml
index 0a4cb40..8af6b6c 100644
--- a/.github/workflows/publish-smart-turn.yml
+++ b/.github/workflows/publish-smart-turn.yml
@@ -39,7 +39,7 @@ permissions:
 
 jobs:
   stage-and-publish:
-    runs-on: ubuntu-latest
+    runs-on: [self-hosted, wavekat-ci]
     timeout-minutes: 20
 
     steps:
diff --git a/.github/workflows/release-please.yml b/.github/workflows/release-please.yml
index 381fd20..369e786 100644
--- a/.github/workflows/release-please.yml
+++ b/.github/workflows/release-please.yml
@@ -10,7 +10,7 @@ permissions:
 
 jobs:
   release-please:
-    runs-on: ubuntu-latest
+    runs-on: [self-hosted, wavekat-ci]
     steps:
       - uses: googleapis/release-please-action@v4
         id: release