ci.yml

name: CI

on:
  push:
    branches: [main]
  pull_request:
    branches: [main]

# Cancel in-progress runs when a new commit is pushed to the same PR.
concurrency:
  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.sha }}
  cancel-in-progress: ${{ github.event_name == 'pull_request' }}

# Permissions needed for test reporting and PR comments
permissions:
  contents: read
  actions: read
  checks: write
  pull-requests: write

env:
  CARGO_TERM_COLOR: always
  RUST_BACKTRACE: 1
  # Cache keys for better hit rates
  RUST_CACHE_KEY: v1
  PLAYWRIGHT_BROWSERS_PATH: ${{ github.workspace }}/.cache/ms-playwright
  # Linux: pkg-config must find glib-2.0.pc (set before any cargo step; only used on Linux)
  PKG_CONFIG_PATH: /usr/lib/x86_64-linux-gnu/pkgconfig:/usr/lib/pkgconfig:/usr/share/pkgconfig

jobs:
  # ─────────────────────────────────────────────────────────────
  # Rust Checks (fast, single platform)
  # ─────────────────────────────────────────────────────────────
  rust-check:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4

      - name: Install Linux deps
        uses: ./.github/actions/install-linux-deps

      - uses: dtolnay/rust-toolchain@stable
        with:
          components: rustfmt, clippy
        env:
          PKG_CONFIG_PATH: /usr/lib/x86_64-linux-gnu/pkgconfig:/usr/lib/pkgconfig:/usr/share/pkgconfig

      - uses: Swatinem/rust-cache@v2
        env:
          PKG_CONFIG_PATH: /usr/lib/x86_64-linux-gnu/pkgconfig:/usr/lib/pkgconfig:/usr/share/pkgconfig

      - name: Format check
        run: cargo fmt --all --check

      - name: Clippy
        run: cargo clippy --workspace -- -D warnings
        env:
          PKG_CONFIG_PATH: /usr/lib/x86_64-linux-gnu/pkgconfig:/usr/lib/pkgconfig:/usr/share/pkgconfig

      - name: Check (no features)
        run: cargo check --workspace
        env:
          PKG_CONFIG_PATH: /usr/lib/x86_64-linux-gnu/pkgconfig:/usr/lib/pkgconfig:/usr/share/pkgconfig

  # ─────────────────────────────────────────────────────────────
  # TypeScript Checks (fast)
  # ─────────────────────────────────────────────────────────────
  ts-check:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4

      - name: Install Linux deps
        uses: ./.github/actions/install-linux-deps
        with:
          verify_glib: 'false'

      - uses: pnpm/action-setup@v4
      - uses: actions/setup-node@v4
        with:
          node-version: 20
          cache: 'pnpm'

      - run: pnpm install --frozen-lockfile
      - run: pnpm typecheck
      - run: pnpm lint

      - name: TypeScript tests with coverage
        run: pnpm exec vitest run -c tests/ts/vitest.config.ts --coverage

      - name: Upload TS test results
        uses: actions/upload-artifact@v4
        if: always()
        with:
          name: test-results-typescript
          path: tests/ts/test-results/
          retention-days: 7

      - name: Upload TS coverage
        uses: actions/upload-artifact@v4
        if: always()
        with:
          name: coverage-typescript
          path: tests/ts/coverage/
          retention-days: 7

  # ─────────────────────────────────────────────────────────────
  # Rust Tests (cross-platform matrix)
  # ─────────────────────────────────────────────────────────────
  rust-test:
    needs: rust-check
    strategy:
      fail-fast: false
      matrix:
        include:
          - os: ubuntu-latest
            target: x86_64-unknown-linux-gnu
          - os: windows-latest
            target: x86_64-pc-windows-msvc
          - os: macos-latest
            target: aarch64-apple-darwin

    runs-on: ${{ matrix.os }}
    steps:
      - uses: actions/checkout@v4

      - name: Install Linux deps
        if: matrix.os == 'ubuntu-latest'
        uses: ./.github/actions/install-linux-deps

      - uses: dtolnay/rust-toolchain@stable
        with:
          targets: ${{ matrix.target }}

      - uses: Swatinem/rust-cache@v2
        with:
          key: ${{ matrix.target }}

      # Install cargo-nextest
      - name: Install nextest
        uses: taiki-e/install-action@nextest

      # Run unit tests (fast, no external deps)
      - name: Unit tests
        run: cargo nextest run --workspace --lib --profile ci-unit

      # Run doc tests (nextest doesn't support)
      - name: Doc tests
        run: cargo test --workspace --doc

      # Run integration tests (outputs JUnit XML)
      - name: Integration tests
        run: cargo nextest run -p tests --profile ci-integration

      # Upload test results for reporting (separate artifacts per type)
      - name: Upload unit test results
        uses: actions/upload-artifact@v4
        if: always()
        with:
          name: test-results-rust-unit-${{ matrix.os }}
          path: target/nextest/ci-unit/junit-unit.xml
          retention-days: 7

      - name: Upload integration test results
        uses: actions/upload-artifact@v4
        if: always()
        with:
          name: test-results-rust-integration-${{ matrix.os }}
          path: target/nextest/ci-integration/junit-integration.xml
          retention-days: 7

  # ─────────────────────────────────────────────────────────────
  # Build Verification (ensures app compiles on all platforms)
  # ─────────────────────────────────────────────────────────────
  build:
    needs: [rust-check, ts-check]
    strategy:
      fail-fast: false
      matrix:
        include:
          - os: ubuntu-latest
            target: x86_64-unknown-linux-gnu
          - os: windows-latest
            target: x86_64-pc-windows-msvc
          - os: macos-latest
            target: aarch64-apple-darwin

    runs-on: ${{ matrix.os }}
    steps:
      - uses: actions/checkout@v4

      - name: Install Linux deps
        if: matrix.os == 'ubuntu-latest'
        uses: ./.github/actions/install-linux-deps

      - uses: dtolnay/rust-toolchain@stable
        with:
          targets: ${{ matrix.target }}
        env:
          PKG_CONFIG_PATH: /usr/lib/x86_64-linux-gnu/pkgconfig:/usr/lib/pkgconfig:/usr/share/pkgconfig

      - uses: Swatinem/rust-cache@v2
        with:
          key: ${{ matrix.target }}-build
        env:
          PKG_CONFIG_PATH: /usr/lib/x86_64-linux-gnu/pkgconfig:/usr/lib/pkgconfig:/usr/share/pkgconfig
      - uses: pnpm/action-setup@v4
      - uses: actions/setup-node@v4
        with:
          node-version: 20
          cache: 'pnpm'

      - run: pnpm install --frozen-lockfile
      - run: pnpm build
        env:
          PKG_CONFIG_PATH: /usr/lib/x86_64-linux-gnu/pkgconfig:/usr/lib/pkgconfig:/usr/share/pkgconfig
          TAURI_SIGNING_PRIVATE_KEY: ${{ secrets.TAURI_SIGNING_PRIVATE_KEY }}

  # ─────────────────────────────────────────────────────────────
  # Test Results Report (separate checks per test type and OS)
  # Uses dorny/test-reporter for granular GitHub Check Runs
  # ─────────────────────────────────────────────────────────────
  test-report:
    needs: [rust-test, ts-check]
    if: always()
    runs-on: ubuntu-latest
    steps:
      - name: Download all test results
        uses: actions/download-artifact@v4
        with:
          pattern: test-results-*
          path: test-results

      # Rust Unit Tests - Per OS
      - name: 'Report: Rust Unit Tests (Linux)'
        uses: dorny/test-reporter@v2
        if: always()
        with:
          name: '🦀 Rust Unit Tests (Linux)'
          path: test-results/test-results-rust-unit-ubuntu-latest/*.xml
          reporter: java-junit
          fail-on-error: false

      - name: 'Report: Rust Unit Tests (Windows)'
        uses: dorny/test-reporter@v2
        if: always()
        with:
          name: '🦀 Rust Unit Tests (Windows)'
          path: test-results/test-results-rust-unit-windows-latest/*.xml
          reporter: java-junit
          fail-on-error: false

      - name: 'Report: Rust Unit Tests (macOS)'
        uses: dorny/test-reporter@v2
        if: always()
        with:
          name: '🦀 Rust Unit Tests (macOS)'
          path: test-results/test-results-rust-unit-macos-latest/*.xml
          reporter: java-junit
          fail-on-error: false

      # Rust Integration Tests - Per OS
      - name: 'Report: Rust Integration Tests (Linux)'
        uses: dorny/test-reporter@v2
        if: always()
        with:
          name: '🔗 Rust Integration Tests (Linux)'
          path: test-results/test-results-rust-integration-ubuntu-latest/*.xml
          reporter: java-junit
          fail-on-error: false

      - name: 'Report: Rust Integration Tests (Windows)'
        uses: dorny/test-reporter@v2
        if: always()
        with:
          name: '🔗 Rust Integration Tests (Windows)'
          path: test-results/test-results-rust-integration-windows-latest/*.xml
          reporter: java-junit
          fail-on-error: false

      - name: 'Report: Rust Integration Tests (macOS)'
        uses: dorny/test-reporter@v2
        if: always()
        with:
          name: '🔗 Rust Integration Tests (macOS)'
          path: test-results/test-results-rust-integration-macos-latest/*.xml
          reporter: java-junit
          fail-on-error: false

      # TypeScript Tests
      - name: 'Report: TypeScript Tests'
        uses: dorny/test-reporter@v2
        if: always()
        with:
          name: '📘 TypeScript Tests'
          path: test-results/test-results-typescript/*.xml
          reporter: jest-junit
          fail-on-error: false

  # ─────────────────────────────────────────────────────────────
  # Coverage Report (uploads to Codecov)
  # ─────────────────────────────────────────────────────────────
  coverage-report:
    needs: [ts-check]
    if: always() && needs.ts-check.result == 'success'
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4

      - name: Download coverage artifacts
        uses: actions/download-artifact@v4
        with:
          pattern: coverage-*
          path: coverage
          merge-multiple: true

      - name: Upload to Codecov
        uses: codecov/codecov-action@v5
        with:
          files: coverage/lcov.info
          flags: typescript
          name: mcpmux-ts-coverage
          fail_ci_if_error: false
          verbose: true
        env:
          CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}

  # ─────────────────────────────────────────────────────────────
  # E2E Tests (Web-only Playwright for UI smoke tests)
  # Skip with [skip e2e] in commit message for faster PR iteration
  # ─────────────────────────────────────────────────────────────
  e2e-web:
    needs: [ts-check]
    if: "!contains(github.event.head_commit.message, '[skip e2e]')"
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: pnpm/action-setup@v4
      - uses: actions/setup-node@v4
        with:
          node-version: 20
          cache: 'pnpm'

      - run: pnpm install --frozen-lockfile

      # Cache Playwright browsers
      - name: Cache Playwright browsers
        uses: actions/cache@v4
        id: playwright-cache
        with:
          path: ${{ env.PLAYWRIGHT_BROWSERS_PATH }}
          key: playwright-${{ runner.os }}-${{ hashFiles('**/pnpm-lock.yaml') }}

      - name: Install Playwright browsers
        if: steps.playwright-cache.outputs.cache-hit != 'true'
        run: pnpm exec playwright install --with-deps chromium

      - name: Run web-only E2E tests
        run: pnpm test:e2e:web --project=chromium

      - name: Upload E2E web test results
        uses: actions/upload-artifact@v4
        if: always()
        with:
          name: test-results-e2e-web
          path: tests/e2e/reports/
          retention-days: 7

      - name: 'Report: E2E Web Tests'
        uses: dorny/test-reporter@v2
        if: always()
        with:
          name: '🌐 E2E Web Tests'
          path: tests/e2e/reports/junit.xml
          reporter: java-junit
          fail-on-error: false

  # ─────────────────────────────────────────────────────────────
  # E2E Desktop trigger check: main, [e2e] in commit, or /e2e-desktop comment on PR
  # ─────────────────────────────────────────────────────────────
  e2e-trigger-check:
    runs-on: ubuntu-latest
    outputs:
      run_e2e: ${{ steps.check.outputs.should_run }}
    steps:
      - uses: actions/checkout@v4
      - name: Check if e2e-desktop should run
        id: check
        uses: ./.github/actions/check-comment-trigger
        with:
          trigger: '/e2e-desktop'
          check_main: 'true'
          check_commit: 'true'

  # ─────────────────────────────────────────────────────────────
  # E2E Tests (Desktop app with WebDriver - Linux/Windows only)
  # Runs when: main branch, [e2e] in commit, or /e2e-desktop comment on PR
  # ─────────────────────────────────────────────────────────────
  e2e-desktop:
    needs: [e2e-trigger-check]
    if: needs.e2e-trigger-check.outputs.run_e2e == 'true'
    uses: ./.github/workflows/e2e-desktop.yml
    with:
      ref: ${{ github.event.pull_request.head.sha || github.sha }}
    secrets: inherit