test.yml

# Cross-platform CI for pi-agenticoding
#
# Runs the full unit suite on Linux, macOS, and Windows
# on the minimum Node.js version required by pi coding agent. Snapshot
# tests verify TUI render output against golden files.

name: test

permissions:
  contents: read

concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

on:
  push:
    branches: [main]
    paths-ignore: ['*.md', '**/docs/**']
  pull_request:
    branches: [main]
    paths-ignore: ['*.md', '**/docs/**']
  workflow_dispatch:

jobs:
  # ── Cross-platform test matrix ──────────────────────────────────────
  # Node 22 (minimum) is tested only on Linux — the primary platform and the only one
  # guaranteed to have the oldest toolchain. macOS and Windows test Node 24 (latest)
  # to catch regressions in the newest runtime. This asymmetry is intentional: it
  # balances CI cost with meaningful coverage while ensuring the minimum version works
  # correctly on the platform most likely to encounter toolchain edge cases.
  test:
    runs-on: ${{ matrix.os }}
    strategy:
      fail-fast: false          # report every combination, don't cancel
      matrix:
        include:
          - os: ubuntu-latest
            node-version: "22.19.0" # exact supported floor on primary platform
          - os: ubuntu-latest
            node-version: "24"    # latest on primary platform
          - os: macos-latest
            node-version: "24"    # latest on macOS
          - os: windows-latest
            node-version: "24"    # latest on Windows
    steps:
      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2

      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
        with:
          node-version: ${{ matrix.node-version }}
          cache: "npm"

      - run: npm ci

      # Uniform pre-flight checks — type errors and security issues on every platform.
      # audit-ci fails on moderate-or-higher advisories; reviewed exceptions, if ever
      # needed, must be explicit and expiry-tracked in audit-ci.jsonc.
      - name: Type check
        run: npx tsc --noEmit

      - name: Security audit
        run: npx audit-ci --config audit-ci.jsonc

      # Unit suite (unit tests + snapshot tests + property-based tests)
      - name: Unit tests
        run: npm test

      # E2E tests — process-isolated child-process harness (stdin/stdout, no PTY).
      # Verified cross-platform: runs on Linux, macOS, and Windows.
      # See https://github.com/agenticoding/pi-agenticoding/issues/12
      - name: E2E tests
        run: npm run test:e2e

      # The packed extension is exercised from a foreign cwd with the latest host.
      - name: Packed latest Pi host contract
        if: (matrix.os == 'ubuntu-latest' && matrix.node-version == '22.19.0') || matrix.os == 'windows-latest'
        working-directory: ${{ runner.temp }}
        env:
          COMPAT_ARTIFACT_DIR: ${{ runner.temp }}/packed-host-diagnostics-${{ matrix.os }}-node-${{ matrix.node-version }}
        run: node "${{ github.workspace }}/scripts/test-package-host.mjs"

      - name: Upload packed host diagnostics
        if: always() && ((matrix.os == 'ubuntu-latest' && matrix.node-version == '22.19.0') || matrix.os == 'windows-latest')
        uses: actions/upload-artifact@v4
        with:
          name: packed-host-diagnostics-${{ matrix.os }}-node-${{ matrix.node-version }}-attempt-${{ github.run_attempt }}
          path: ${{ runner.temp }}/packed-host-diagnostics-${{ matrix.os }}-node-${{ matrix.node-version }}
          if-no-files-found: warn
          overwrite: true
          retention-days: 30

      # Runs even when the packed-host contract step fails on Windows, so compat
      # diagnostics are captured for both the packed and current-Pi paths. !cancelled()
      # (not always()) avoids running on explicit workflow cancellation.
      - name: Synchronized current Pi compatibility on Windows
        if: matrix.os == 'windows-latest' && !cancelled()
        working-directory: ${{ runner.temp }}
        env:
          COMPAT_ARTIFACT_DIR: ${{ runner.temp }}/current-pi-diagnostics-windows-node-24
        run: node "${{ github.workspace }}/scripts/test-compat-current.mjs"

      - name: Upload current Pi diagnostics on Windows
        if: always() && matrix.os == 'windows-latest'
        uses: actions/upload-artifact@v4
        with:
          name: current-pi-diagnostics-windows-node-24-attempt-${{ github.run_attempt }}
          path: ${{ runner.temp }}/current-pi-diagnostics-windows-node-24
          if-no-files-found: warn
          overwrite: true
          retention-days: 30

      # Upload test results for debugging — artifacts available for 30 days.
      - name: Upload test results
        if: always()
        uses: actions/upload-artifact@v4
        with:
          name: test-results-${{ matrix.os }}-node-${{ matrix.node-version }}
          path: |
            tests/snapshots/
          retention-days: 30

  current-pi:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
        with:
          node-version: "24"
          cache: "npm"
      - run: npm ci
      - name: Synchronized current Pi compatibility
        working-directory: ${{ runner.temp }}
        env:
          COMPAT_ARTIFACT_DIR: ${{ runner.temp }}/current-pi-diagnostics-ubuntu-node-24
        run: node "${{ github.workspace }}/scripts/test-compat-current.mjs"
      - name: Upload current Pi diagnostics
        if: always()
        uses: actions/upload-artifact@v4
        with:
          name: current-pi-diagnostics-ubuntu-node-24-attempt-${{ github.run_attempt }}
          path: ${{ runner.temp }}/current-pi-diagnostics-ubuntu-node-24
          if-no-files-found: warn
          overwrite: true
          retention-days: 30