ci.yml

name: ci

on:
  push:
    branches:
      - main
  pull_request:

permissions:
  contents: read

jobs:
  test:
    runs-on: ubuntu-latest
    steps:
      - name: checkout
        uses: actions/checkout@v4

      - name: setup go
        uses: actions/setup-go@v5
        with:
          go-version-file: go.mod

      - name: dependency boundary guard
        run: |
          go mod tidy
          git diff --exit-code go.mod go.sum

      - name: unit tests with coverage
        run: go test ./... -coverprofile=coverage.out -covermode=atomic

      - name: integration tests (mocked runner)
        run: go test -tags=integration ./... -run Integration -count=1

      - name: end-to-end tests (built binary + fake osascript)
        run: go test -tags=e2e ./... -run E2E -count=1

      - name: race tests
        run: go test -race ./... -count=1

      - name: upload coverage to codecov
        uses: codecov/codecov-action@v5
        with:
          files: ./coverage.out
          fail_ci_if_error: false