ci.yml

name: CI

on:
  push:
    branches: [ main, develop ]
  pull_request:
    branches: [ main ]

permissions:
  contents: read

jobs:
  build-and-test:
    name: Build and Test
    runs-on: ${{ matrix.os }}
    
    strategy:
      matrix:
        os: [ubuntu-latest, windows-latest]
        node-version: [22.x]
        python-version: ['3.11']
    
    steps:
    - name: Checkout code
      uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10  # v6.0.3
    
    - name: Setup pnpm
      uses: pnpm/action-setup@0e279bb959325dab635dd2c09392533439d90093  # v6.0.8
      with:
        version: 10
    
    - name: Setup Node.js ${{ matrix.node-version }}
      uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e  # v6.4.0
      with:
        node-version: ${{ matrix.node-version }}
        cache: 'pnpm'
    
    - name: Setup Python ${{ matrix.python-version }}
      uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405  # v6.2.0
      with:
        python-version: ${{ matrix.python-version }}
    
    - name: Install Python dependencies
      run: |
        python -m pip install "pip==25.0.1"
        python -m pip install "debugpy==1.8.14"

    - name: Setup Go
      uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c  # v6.4.0
      with:
        go-version: '1.21'

    - name: Install Delve debugger
      run: go install github.com/go-delve/delve/cmd/dlv@v1.24.2

    - name: Setup Java 21
      uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654  # v5.2.0
      with:
        distribution: 'temurin'
        java-version: '21'

    - name: Setup Ruby
      uses: ruby/setup-ruby@89f90524b88a01fe6e0b732220432cc6142926af  # v1.313.0
      with:
        ruby-version: '3.3'

    - name: Verify rdbg (bundled debug gem)
      run: rdbg --version

    - name: Install Node dependencies
      run: pnpm install --frozen-lockfile
      env:
        SKIP_ADAPTER_VENDOR: 'true'

    - name: Audit dependencies
      run: pnpm audit --prod --audit-level=high
      continue-on-error: true

    - name: Vendor adapter binaries
      run: pnpm run vendor:adapters
      continue-on-error: true
      env:
        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

    - name: Build project
      run: pnpm run build:ci

    - name: Run linting
      run: pnpm run lint

    # Use test:ci-coverage which includes Python tests but excludes e2e tests
    - name: Run tests with coverage
      run: pnpm run test:ci-coverage
      env:
        CI: true
    
    - name: Upload Windows test diagnostics
      if: failure() && matrix.os == 'windows-latest'
      uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a  # v7.0.1
      with:
        name: windows-test-diagnostics
        path: |
          tests/**/*.log
          dist/**/*.log
          logs/tests/**/*.log
          logs/tests/adapters/failures/**/*.json
        if-no-files-found: warn
    
    - name: Upload coverage reports
      uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a  # v7.0.1
      if: matrix.os == 'ubuntu-latest'
      with:
        name: coverage-report
        path: coverage/
    
    - name: Upload coverage to Codecov
      uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f  # v7.0.0
      if: matrix.os == 'ubuntu-latest'
      with:
        token: ${{ secrets.CODECOV_TOKEN }}
        files: ./coverage/coverage-final.json
        flags: unittests
        name: codecov-umbrella
        fail_ci_if_error: false

  windows-python-integration:
    name: Windows Python Integration Focus
    runs-on: windows-latest
    steps:
    - name: Checkout code
      uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10  # v6.0.3

    - name: Setup pnpm
      uses: pnpm/action-setup@0e279bb959325dab635dd2c09392533439d90093  # v6.0.8
      with:
        version: 10

    - name: Setup Node.js
      uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e  # v6.4.0
      with:
        node-version: 22.x
        cache: 'pnpm'

    - name: Setup Python 3.11
      uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405  # v6.2.0
      with:
        python-version: '3.11'

    - name: Install Python dependencies
      run: |
        python -m pip install "pip==25.0.1"
        python -m pip install "debugpy==1.8.14"

    - name: Setup Java 21
      uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654  # v5.2.0
      with:
        distribution: 'temurin'
        java-version: '21'

    - name: Install Node dependencies
      run: pnpm install --frozen-lockfile
      env:
        SKIP_ADAPTER_VENDOR: 'true'

    - name: Build project (CI)
      run: pnpm run build:ci

    - name: Run targeted Python integration tests
      env:
        CI: true
      run: pnpm vitest run tests/adapters/python/integration/python-discovery.test.ts tests/adapters/python/integration/python_debug_workflow.test.ts

    - name: Upload targeted test diagnostics
      if: failure()
      uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a  # v7.0.1
      with:
        name: windows-python-integration-logs
        path: |
          logs/tests/**/*.log
          logs/tests/adapters/failures/**/*.json
          tests/**/*.log
        if-no-files-found: warn

  lint:
    name: Lint Code
    runs-on: ubuntu-latest
    
    steps:
    - name: Checkout code
      uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10  # v6.0.3
    
    - name: Setup pnpm
      uses: pnpm/action-setup@0e279bb959325dab635dd2c09392533439d90093  # v6.0.8
      with:
        version: 10
    
    - name: Setup Node.js
      uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e  # v6.4.0
      with:
        node-version: '22.x'
        cache: 'pnpm'

    - name: Setup Java 21
      uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654  # v5.2.0
      with:
        distribution: 'temurin'
        java-version: '21'

    - name: Install dependencies
      run: pnpm install --frozen-lockfile
      env:
        SKIP_ADAPTER_VENDOR: 'true'

    - name: Run ESLint
      run: pnpm run lint
    
    - name: Check for personal information
      run: pnpm run check:all-personal-paths

  # Separate job for container tests on Linux only
  container-tests:
    name: Container Tests
    runs-on: ubuntu-latest
    
    steps:
    - name: Checkout code
      uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10  # v6.0.3
    
    - name: Setup pnpm
      uses: pnpm/action-setup@0e279bb959325dab635dd2c09392533439d90093  # v6.0.8
      with:
        version: 10
    
    - name: Setup Node.js
      uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e  # v6.4.0
      with:
        node-version: '22.x'
        cache: 'pnpm'
    
    - name: Setup Java 21
      uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654  # v5.2.0
      with:
        distribution: 'temurin'
        java-version: '21'

    - name: Install dependencies
      run: pnpm install --frozen-lockfile
      env:
        SKIP_ADAPTER_VENDOR: 'true'

    - name: Vendor adapter binaries
      run: pnpm run vendor:adapters
      continue-on-error: true
      env:
        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

    - name: Run linting
      run: pnpm run lint

    - name: Build project
      run: pnpm run build
      env:
        SKIP_ADAPTER_VENDOR: 'true'

    - name: Build Docker image
      run: docker build -t mcp-debugger:local .
    
    - name: Run container tests
      run: pnpm run test:e2e:container

  test-summary:
    name: Test Summary
    needs: [build-and-test, container-tests]
    runs-on: ubuntu-latest
    if: always()
    
    steps:
    - name: Check test results
      run: |
        echo "✅ CI pipeline completed"
        echo "Check the test results in the build-and-test job"