feat: Add combined build (#5895)

* Add combined build

* Link script location update

* Security and validation fixes

* Allow specifying target path in PR description

* fix: Version match

* Fix build detection issue

* fix: Playwright deploy

* Separate out the branch merge guard

* Update docs and link info

* test: Update the layout change to wait for network idle

* Move audit late so the rest of the build can be worked on

* Add text with network check to ensure we see this change is updated

* Attempt to fix the mpr loading on ohif-downstream

* PR review comments

* Update docs

* Update to CS3D 4.20.0

* PR comments

* Add log on ohif-integration builds

* Update build test

* Removed unused space to kickoff build

.scripts/ci/cs3d-branch-merge-guard.sh

@@ -0,0 +1,42 @@
+#!/usr/bin/env bash
+# CS3D branch merge guard: blocks merge when tests ran against a CS3D branch (not a version).
+# Exits 0 when merge is allowed or guard is skipped; exits 1 when merge must be blocked.
+#
+# Required env: GH_TOKEN, EVENT_NAME, REPO, PR_NUMBER
+# Optional env: CS3D_REF_INPUT (for workflow_dispatch, default 4.19+)
+
+set -e
+
+if [[ "$EVENT_NAME" == "workflow_dispatch" ]]; then
+  echo "::notice::workflow_dispatch — no merge to block, skipping guard."
+  exit 0
+elif [[ "$EVENT_NAME" == "pull_request" ]]; then
+  LABELS=$(gh api "repos/${REPO}/issues/${PR_NUMBER}/labels" --jq '.[].name')
+  if echo "$LABELS" | grep -q "ohif-integration"; then
+    ENABLED=true
+    CS3D_REF=$(gh api "repos/${REPO}/pulls/${PR_NUMBER}" --jq '.body' \
+      | sed -n 's/^[[:space:]]*CS3D_REF:[[:space:]]*\([^[:space:]]*\).*/\1/p' | head -1)
+    if [[ -z "$CS3D_REF" ]]; then
+      CS3D_REF="4.19+"
+    fi
+  else
+    ENABLED=false
+  fi
+else
+  ENABLED=false
+fi
+
+if [[ "$ENABLED" != "true" ]]; then
+  echo "::notice::No ohif-integration label — skipping merge guard."
+  exit 0
+fi
+
+# Check if the ref is a branch (not a version)
+if [[ "$CS3D_REF" =~ ^[0-9]+\.[0-9x]+\+?(\.[0-9x]+)?(-[a-zA-Z0-9._]+)?$ ]]; then
+  echo "::notice::CS3D ref '$CS3D_REF' is a version — merge allowed."
+  exit 0
+fi
+
+echo "::error::Tests ran against CS3D branch '${CS3D_REF}' — this build cannot be merged."
+echo "::error::Re-run with a published CS3D version (e.g. 4.19+) before merging."
+exit 1

.scripts/ci/cs3d-check-integration.sh

@@ -0,0 +1,29 @@
+#!/usr/bin/env bash
+# CS3D integration check: detects ohif-integration label and parses CS3D_REF.
+# Writes to GITHUB_OUTPUT: enabled (true|false), cs3d_ref (when enabled).
+#
+# Required env: GH_TOKEN, EVENT_NAME, REPO, PR_NUMBER, GITHUB_OUTPUT
+# Optional env: CS3D_REF_INPUT (for workflow_dispatch, default 4.19+)
+
+set -e
+
+if [[ "$EVENT_NAME" == "workflow_dispatch" ]]; then
+  echo "enabled=true" >> "$GITHUB_OUTPUT"
+  echo "cs3d_ref=${CS3D_REF_INPUT:-4.19+}" >> "$GITHUB_OUTPUT"
+elif [[ "$EVENT_NAME" == "pull_request" ]]; then
+  LABELS=$(gh api "repos/${REPO}/issues/${PR_NUMBER}/labels" --jq '.[].name')
+  if echo "$LABELS" | grep -q "ohif-integration"; then
+    echo "enabled=true" >> "$GITHUB_OUTPUT"
+    REF=$(gh api "repos/${REPO}/pulls/${PR_NUMBER}" --jq '.body' \
+      | sed -n 's/^[[:space:]]*CS3D_REF:[[:space:]]*\([^[:space:]]*\).*/\1/p' | head -1)
+    if [[ -z "$REF" ]]; then
+      REF="4.19+"
+    fi
+    echo "cs3d_ref=${REF}" >> "$GITHUB_OUTPUT"
+    echo "::notice::CS3D ref from PR body: ${REF}"
+  else
+    echo "enabled=false" >> "$GITHUB_OUTPUT"
+  fi
+else
+  echo "enabled=false" >> "$GITHUB_OUTPUT"
+fi