ci-plugins.yml

name: macOS Plugin CI

on:
  pull_request:
  push:
    branches:
      - main
  workflow_dispatch:

permissions:
  contents: read

concurrency:
  group: macos-plugin-ci-${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

jobs:
  changes:
    name: Classify changes
    runs-on: ubuntu-latest
    outputs:
      plugins: ${{ steps.classify.outputs.plugins }}

    steps:
      - name: Check out source
        uses: actions/checkout@v7
        with:
          fetch-depth: 0

      - name: Resolve comparison base
        id: base
        env:
          EVENT_NAME: ${{ github.event_name }}
          PR_BASE_SHA: ${{ github.event.pull_request.base.sha }}
          PUSH_BASE_SHA: ${{ github.event.before }}
        shell: bash
        run: |
          if [[ "$EVENT_NAME" == "workflow_dispatch" ]]; then
            echo "manual=true" >> "$GITHUB_OUTPUT"
            exit 0
          fi

          base_sha="$PUSH_BASE_SHA"
          if [[ "$EVENT_NAME" == "pull_request" ]]; then
            base_sha="$PR_BASE_SHA"
          fi
          {
            echo "manual=false"
            echo "base_sha=$base_sha"
          } >> "$GITHUB_OUTPUT"

      - name: Classify changed paths
        id: classify
        env:
          MANUAL: ${{ steps.base.outputs.manual }}
          BASE_SHA: ${{ steps.base.outputs.base_sha }}
        shell: bash
        run: |
          if [[ "$MANUAL" == "true" ]]; then
            echo "plugins=true" >> "$GITHUB_OUTPUT"
            exit 0
          fi

          ./scripts/classify-ci-changes.sh "$BASE_SHA" "$GITHUB_SHA" >> "$GITHUB_OUTPUT"

      - name: Summarize selected lanes
        shell: bash
        env:
          PLUGINS: ${{ steps.classify.outputs.plugins }}
        run: |
          {
            echo "### Plugin CI lanes"
            echo "| Lane | Run |"
            echo "| --- | --- |"
            echo "| Plugin tests and package verification | $PLUGINS |"
          } >> "$GITHUB_STEP_SUMMARY"

  plugin-tests:
    name: Plugin tests and package verification
    needs: changes
    if: needs.changes.outputs.plugins == 'true'
    runs-on: macos-26
    timeout-minutes: 35

    steps:
      - name: Check out source
        uses: actions/checkout@v7

      - name: Set up Swift 6.3.3 and Xcode
        uses: ./.github/actions/setup-macos-toolchain

      - name: Prepare verified SwiftPM cache
        uses: ./.github/actions/prepare-macos-dependency-cache
        with:
          swiftpm: "true"

      - name: Run plugin-focused Swift tests
        timeout-minutes: 12
        run: ./.agents/skills/write-stable-tests/scripts/test-stability-macos.sh --report .artifacts/test-stability/macos-plugins.json --suite-timeout-seconds 660 -- --filter '([Pp]lugin|LitheGoSupportModuleTests|LinuxDo)'

      - name: Build and verify official plugin packages
        timeout-minutes: 10
        run: ./scripts/verify-official-plugins.sh

      - name: Generate combined plugin test report
        if: always()
        run: node .agents/skills/write-stable-tests/scripts/generate-test-report.mjs

      - name: Upload plugin test reports
        if: always()
        uses: actions/upload-artifact@v4
        with:
          name: test-stability-plugins
          path: .artifacts/test-stability/
          if-no-files-found: ignore
          retention-days: 14

  gate:
    name: Plugin CI gate
    needs:
      - changes
      - plugin-tests
    if: always()
    runs-on: ubuntu-latest

    steps:
      - name: Verify required jobs
        env:
          CHANGES_RESULT: ${{ needs.changes.result }}
          PLUGIN_SELECTED: ${{ needs.changes.outputs.plugins }}
          PLUGIN_RESULT: ${{ needs.plugin-tests.result }}
        shell: bash
        run: |
          [[ "$CHANGES_RESULT" == "success" ]]
          if [[ "$PLUGIN_SELECTED" == "true" ]]; then
            [[ "$PLUGIN_RESULT" == "success" ]]
          else
            [[ "$PLUGIN_RESULT" == "skipped" ]]
          fi