ci.yml

name: CI

on:
  push:
    branches: [main]
  pull_request:
    branches: [main]

jobs:
  build:
    name: Build & Test (Windows)
    runs-on: windows-latest
    strategy:
      matrix:
        node-version: [20]

    steps:
      - name: Checkout repository
        uses: actions/checkout@v4

      - name: Setup Node.js ${{ matrix.node-version }}
        uses: actions/setup-node@v4
        with:
          node-version: ${{ matrix.node-version }}
          cache: 'npm'

      - name: Install dependencies
        run: npm ci

      - name: Build TypeScript
        run: npm run build

      - name: Verify dist files exist
        run: |
          node -e "
            const fs = require('fs');
            const files = ['dist/cli.js', 'dist/mcp-server.js', 'dist/memoryStore.js', 'dist/deepseek.js'];
            for (const f of files) {
              if (!fs.existsSync(f)) {
                console.error('Missing:', f);
                process.exit(1);
              }
              console.log('Found:', f);
            }
          "

      - name: Smoke test - CLI help
        run: |
          echo "help" | node dist/cli.js
        env:
          MEMORY_PATH: test-memory.json

      - name: Smoke test - CLI add and search
        run: |
          node -e "
            const { execSync } = require('child_process');
            const opts = { encoding: 'utf8', env: { ...process.env, MEMORY_PATH: 'test-memory.json' } };

            // Add a memory
            const add = execSync('echo add --tags test,ci Test memory from CI | node dist/cli.js', opts);
            console.log('Add result:', add);

            // Search for it
            const search = execSync('echo search test | node dist/cli.js', opts);
            console.log('Search result:', search);

            if (!search.includes('Test memory')) {
              console.error('Search did not find the added memory');
              process.exit(1);
            }

            console.log('CLI smoke tests passed');
          "

      - name: Smoke test - MCP server initialization
        run: |
          node -e "
            const { spawn } = require('child_process');
            const server = spawn('node', ['dist/mcp-server.js'], {
              env: { ...process.env, MEMORY_PATH: 'test-memory.json' },
              stdio: ['pipe', 'pipe', 'pipe']
            });

            let stdout = '';
            let stderr = '';

            server.stdout.on('data', (d) => stdout += d);
            server.stderr.on('data', (d) => stderr += d);

            const initRequest = JSON.stringify({
              jsonrpc: '2.0',
              id: 1,
              method: 'initialize',
              params: {
                protocolVersion: '2024-11-05',
                capabilities: {},
                clientInfo: { name: 'ci-test', version: '1.0.0' }
              }
            }) + '\n\n';

            server.stdin.write(initRequest);

            const timeout = setTimeout(() => {
              console.error('Timed out waiting for MCP server response');
              process.exit(1);
            }, 5000);

            server.stdout.on('data', () => {
              clearTimeout(timeout);
              console.log('stdout:', stdout);
              console.log('stderr:', stderr);
              process.exit(0);
            });

            server.stderr.on('data', () => {
              clearTimeout(timeout);
              console.log('stdout:', stdout);
              console.log('stderr:', stderr);
              process.exit(0);
            });
          "
        shell: pwsh

      - name: Cleanup test files
        if: always()
        run: |
          node -e "
            const fs = require('fs');
            ['test-memory.json', 'test-memory.json.lock'].forEach(f => {
              if (fs.existsSync(f)) fs.unlinkSync(f);
            });
          "

  typecheck:
    name: Type Check
    runs-on: ubuntu-latest
    steps:
      - name: Checkout repository
        uses: actions/checkout@v4

      - name: Setup Node.js
        uses: actions/setup-node@v4
        with:
          node-version: 20
          cache: 'npm'

      - name: Install dependencies
        run: npm ci

      - name: Run TypeScript compiler (strict)
        run: npx tsc --noEmit

  lint:
    name: Lint
    runs-on: ubuntu-latest
    steps:
      - name: Checkout repository
        uses: actions/checkout@v4

      - name: Setup Node.js
        uses: actions/setup-node@v4
        with:
          node-version: 20
          cache: 'npm'

      - name: Install dependencies
        run: npm ci

      - name: Run ESLint
        run: npm run lint

  security:
    name: Security Audit
    runs-on: ubuntu-latest
    steps:
      - name: Checkout repository
        uses: actions/checkout@v4

      - name: Setup Node.js
        uses: actions/setup-node@v4
        with:
          node-version: 20
          cache: 'npm'

      - name: Install dependencies
        run: npm ci

      - name: Run npm audit
        run: npm audit --audit-level=moderate

      - name: Check for known vulnerabilities
        uses: actions/dependency-review-action@v4
        if: github.event_name == 'pull_request'