ci.yml

name: CI

on:
  push:
    branches: [main]
  pull_request:
    branches: [main]

concurrency:
  group: ci-${{ github.ref }}
  cancel-in-progress: true

jobs:
  test:
    name: node ${{ matrix.node }} / ${{ matrix.os }}
    runs-on: ${{ matrix.os }}
    strategy:
      fail-fast: false
      matrix:
        os: [ubuntu-latest]
        node: ['20', '22']
    steps:
      - uses: actions/checkout@v4

      - uses: actions/setup-node@v4
        with:
          node-version: ${{ matrix.node }}

      # No lockfile in-repo (package-lock.json is gitignored so consumers
      # resolve their own deps). `npm install` is intentional.
      - name: Install dependencies
        run: npm install --no-audit --no-fund

      - name: Syntax check
        run: |
          find . -type f -name '*.mjs' -not -path './node_modules/*' -print0 \
            | xargs -0 -n1 node --check

      - name: Unit tests (meta-gate)
        run: node meta-gate.test.mjs

      - name: Unit tests (series detection — keeps timelines out of the supersede band)
        run: node series-detection.test.mjs

      - name: Unit tests (tag-leak repair — sibling fields leaked into content)
        run: node tag-leak-repair.test.mjs

      - name: Integration test (tag-leak repair through store_memory)
        env:
          TOKENMEM_DB_PATH: ${{ runner.temp }}/mneme-ci-tag-leak.db
        run: node tag-leak.integration.test.mjs

      - name: Integration test (meta-gate write-gate)
        env:
          TOKENMEM_DB_PATH: ${{ runner.temp }}/mneme-ci-meta-gate.db
        run: node meta-gate.integration.test.mjs

      - name: Integration test (anchor/pinned quota)
        env:
          TOKENMEM_DB_PATH: ${{ runner.temp }}/mneme-ci-anchor-pinned.db
        run: node anchor-pinned.integration.test.mjs

      - name: Integration test (provenance + quarantine)
        env:
          TOKENMEM_DB_PATH: ${{ runner.temp }}/mneme-ci-provenance.db
        run: node provenance-quarantine.integration.test.mjs
      - name: Integration test (recall injection hygiene — frame escaping)
        env:
          TOKENMEM_DB_PATH: ${{ runner.temp }}/mneme-ci-injection-hygiene.db
        run: node injection-hygiene.integration.test.mjs

      - name: Integration test (ranking — importance filters, does not rank)
        env:
          TOKENMEM_DB_PATH: ${{ runner.temp }}/mneme-ci-ranking-importance.db
        run: node ranking-importance.integration.test.mjs

      - name: Integration test (access bump — only returned rows, not the candidate pool)
        env:
          TOKENMEM_DB_PATH: ${{ runner.temp }}/mneme-ci-access-bump.db
        run: node access-bump-scope.integration.test.mjs

      - name: Integration test (DB path read at open time, not import time)
        env:
          TOKENMEM_DB_PATH: ${{ runner.temp }}/mneme-ci-late-db.db
        run: node db-path-late-env.integration.test.mjs

      - name: Integration test (encoding-damage detection, both write paths)
        env:
          TOKENMEM_DB_PATH: ${{ runner.temp }}/mneme-ci-encoding-damage.db
        run: node encoding-damage.integration.test.mjs

      - name: Integration test (level migration ladder + pin exemption)
        env:
          TOKENMEM_DB_PATH: ${{ runner.temp }}/mneme-ci-level-migration.db
        run: node level-migration-stages.integration.test.mjs

      - name: Integration test (supersede shrink guard)
        env:
          TOKENMEM_DB_PATH: ${{ runner.temp }}/mneme-ci-supersede-shrink.db
        run: node supersede-shrink.integration.test.mjs

      - name: Integration test (HTTP /recall endpoint + hook fallback)
        env:
          TOKENMEM_DB_PATH: ${{ runner.temp }}/mneme-ci-recall-endpoint.db
        run: node recall-endpoint.integration.test.mjs

      - name: End-to-end test (hooks)
        env:
          TOKENMEM_DB_PATH: ${{ runner.temp }}/mneme-ci-hooks.db
          MNEME_DB_PATH: ${{ runner.temp }}/mneme-ci-hooks.db
          MNEME_STATE_DIR: ${{ runner.temp }}/mneme-hook-state
        run: node hooks/hooks.test.mjs

      - name: End-to-end test (memory-health + consolidation CLIs)
        env:
          TOKENMEM_DB_PATH: ${{ runner.temp }}/mneme-ci-memhealth.db
        run: node memory-health.test.mjs

      - name: End-to-end test (locations alias layer)
        env:
          TOKENMEM_DB_PATH: ${{ runner.temp }}/mneme-ci-locations.db
        run: node locations.test.mjs

      - name: Unit tests (recall contract — budget, trace, allowlist)
        env:
          TOKENMEM_DB_PATH: ${{ runner.temp }}/mneme-ci-recall-contract.db
        run: node recall-contract.test.mjs

      - name: Unit tests (query rewrite hook)
        env:
          TOKENMEM_DB_PATH: ${{ runner.temp }}/mneme-ci-query-rewrite.db
        run: node query-rewrite.test.mjs

      - name: Integration test (cold pool selects by reuse, not self-rated importance)
        env:
          TOKENMEM_DB_PATH: ${{ runner.temp }}/mneme-ci-cold-pool.db
        run: node cold-pool-gate.test.mjs

      - name: Integration test (embedding timeout — hot path degrades instead of hanging)
        env:
          TOKENMEM_DB_PATH: ${{ runner.temp }}/mneme-ci-embedding-timeout.db
        run: node embedding-timeout.integration.test.mjs

      - name: Integration test (vector storage — Float32 BLOB codec + Migration 013)
        env:
          TOKENMEM_DB_PATH: ${{ runner.temp }}/mneme-ci-vector-blob.db
        run: node vector-blob.integration.test.mjs

      - name: Adapter test (codex-recovery-proxy fault injection)
        run: node adapters/codex-recovery-proxy/proxy.test.mjs