test.yml

# SPDX-License-Identifier: Apache-2.0
name: Test

# Reusable test suite. Called by ci.yml and Release Prepare so both run the same gates.
on:
  workflow_call:
    inputs:
      skip_bindings:
        description: "Skip binding compilation when an equivalent release matrix runs it"
        required: false
        default: false
        type: boolean
      source_ref:
        description: "Immutable source commit for release callers"
        required: false
        default: ""
        type: string

permissions:
  contents: read

env:
  CARGO_TERM_COLOR: always

jobs:
  lint:
    name: Lint, format & docs
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v6
        with:
          ref: ${{ inputs.source_ref || github.sha }}
      - name: Install Rust
        uses: dtolnay/rust-toolchain@stable
        with:
          components: rustfmt, clippy
      - uses: Swatinem/rust-cache@v2
        with:
          prefix-key: lint
      - uses: actions/setup-python@v6
        with:
          python-version: "3.12"
      - name: Test release helper and workflow contracts
        run: |
          python -m pip install PyYAML
          python scripts/release/tests/test_contracts.py
      - name: Lint GitHub Actions workflows
        uses: docker://rhysd/actionlint:1.7.7
      - name: Check formatting
        run: cargo fmt --all --check
      - name: Clippy
        run: cargo clippy --workspace --all-targets --all-features -- -D warnings
      - name: Build docs
        env:
          RUSTDOCFLAGS: -D warnings
        run: cargo doc --no-deps --all-features
      - name: Doctests
        run: cargo test --doc --all-features

  test:
    name: Test (${{ matrix.os }})
    runs-on: ${{ matrix.os }}
    strategy:
      fail-fast: false
      matrix:
        os: [ubuntu-latest, macos-latest, windows-latest]
    steps:
      - uses: actions/checkout@v6
        with:
          ref: ${{ inputs.source_ref || github.sha }}
      - name: Install Rust
        uses: dtolnay/rust-toolchain@stable
      - uses: Swatinem/rust-cache@v2
        with:
          prefix-key: test
      # The pyo3/napi cdylib crates are extension modules that cannot be linked
      # as cargo test binaries; they are built via maturin/napi in the `bindings`
      # job below. Everything else is tested across all three OSes.
      - name: Run tests
        run: cargo test --workspace --all-features --exclude code2graph-py --exclude code2graph-node

  packaging:
    name: Install CLI from source
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v6
        with:
          ref: ${{ inputs.source_ref || github.sha }}
      - name: Install Rust
        uses: dtolnay/rust-toolchain@stable
      - uses: Swatinem/rust-cache@v2
        with:
          prefix-key: packaging
      # Dependent package verification runs in release after its exact core
      # version is available from crates.io. PRs still prove the install surface.
      - name: Install and run CLI from source
        shell: bash
        run: |
          set -euo pipefail
          INSTALL_ROOT="$(mktemp -d)"
          cargo install --path cli --root "$INSTALL_ROOT"
          "$INSTALL_ROOT/bin/code2graph" --help

  bindings:
    if: ${{ !inputs.skip_bindings }}
    name: Build bindings (${{ matrix.os }})
    runs-on: ${{ matrix.os }}
    strategy:
      fail-fast: false
      matrix:
        os: [ubuntu-latest, macos-latest, windows-latest]
    steps:
      - uses: actions/checkout@v6
        with:
          ref: ${{ inputs.source_ref || github.sha }}
      - name: Install Rust
        uses: dtolnay/rust-toolchain@stable
      - uses: Swatinem/rust-cache@v2
        with:
          prefix-key: bindings
      - name: Set up Python
        if: matrix.os == 'ubuntu-latest'
        uses: actions/setup-python@v6
        with:
          python-version: "3.12"
      - name: Build Python wheel (maturin)
        if: matrix.os == 'ubuntu-latest'
        run: |
          pip install maturin
          maturin build --release -m bindings/python/Cargo.toml
      - name: Set up Node
        uses: actions/setup-node@v5
        with:
          node-version: "22"
      - name: Build Node addon (napi)
        working-directory: bindings/node
        run: |
          npm ci
          npm run build
      # `napi build` regenerates index.js / index.d.ts from the #[napi] API.
      # They are committed (so the published package ships its loader), so a
      # change to the Rust binding API that wasn't regenerated leaves them stale.
      # Fail the gate if the just-built files differ from what's committed.
      - name: Verify committed napi bindings are in sync
        shell: bash
        working-directory: bindings/node
        run: |
          if ! git diff --exit-code -- index.js index.d.ts; then
            echo "::error::bindings/node/index.js or index.d.ts is out of date — run 'npm run build' in bindings/node and commit the regenerated files."
            exit 1
          fi
      - name: Verify host native addon loads
        working-directory: bindings/node
        run: node -e "const addon=require('./'); if (!addon.languageOf('sample.rs')) process.exit(1)"
      - name: Install Pi package test dependencies against this built addon
        if: matrix.os == 'ubuntu-latest'
        shell: bash
        run: |
          set -euo pipefail
          STAGE="$(mktemp -d)"
          mkdir -p "$STAGE/core"
          (cd bindings/node && npm pack --pack-destination "$STAGE/core")
          CORE_TGZ="$(find "$STAGE/core" -name '*.tgz' -print -quit)"
          cd bindings/pi
          npm install --no-save --package-lock=false "$CORE_TGZ" ignore tsx typescript @types/node @earendil-works/pi-ai @earendil-works/pi-coding-agent @earendil-works/pi-tui
          npm install --global @earendil-works/pi-coding-agent@latest
      - name: Validate packed Pi package through Pi loader and worker scan
        if: matrix.os == 'ubuntu-latest'
        working-directory: bindings/pi
        run: npm run test:all