_test.yml

# Licensed to the Apache Software Foundation (ASF) under one
# or more contributor license agreements.  See the NOTICE file
# distributed with this work for additional information
# regarding copyright ownership.  The ASF licenses this file
# to you under the Apache License, Version 2.0 (the
# "License"); you may not use this file except in compliance
# with the License.  You may obtain a copy of the License at
#
#   http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing,
# software distributed under the License is distributed on an
# "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
# KIND, either express or implied.  See the License for the
# specific language governing permissions and limitations
# under the License.

name: _test
on:
  workflow_call:
    inputs:
      matrix:
        type: string
        required: true
        description: "Selected component/task entries"
      fail-fast:
        type: boolean
        default: true
    secrets:
      CODECOV_TOKEN:
        required: false

permissions:
  contents: read
  security-events: write
  pull-requests: write

jobs:
  run:
    name: ${{ matrix.name || matrix.task }}
    strategy:
      fail-fast: ${{ inputs.fail-fast }}
      matrix: ${{ fromJSON(inputs.matrix) }}
    # Select runner based on build target
    runs-on: ${{
      matrix.task == 'build-macos' && 'macos-15' ||
      'ubuntu-26.04'
      }}
    timeout-minutes: 60
    steps:
      - name: Checkout code
        uses: actions/checkout@v7.0.1

      # Python SDK
      - name: Set up Docker Buildx for Python
        if: matrix.component == 'sdk-python' && matrix.task == 'test'
        uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069 # v4.4.1

      - name: Run Python SDK task
        if: matrix.component == 'sdk-python'
        uses: ./.github/actions/python-maturin/pre-merge
        with:
          task: ${{ matrix.task }}

      - name: Upload Python coverage to Codecov
        if: matrix.component == 'sdk-python' && matrix.task == 'test'
        uses: codecov/codecov-action@v7.1.1
        with:
          token: ${{ secrets.CODECOV_TOKEN }}
          files: reports/python-coverage.lcov
          disable_search: true
          flags: python
          fail_ci_if_error: false
          verbose: true
          override_pr: ${{ github.event.pull_request.number }}

      # PHP SDK
      - name: Run PHP SDK task
        if: matrix.component == 'sdk-php'
        uses: ./.github/actions/php/pre-merge
        with:
          task: ${{ matrix.task }}

      - name: Upload PHP coverage to Codecov
        if: matrix.component == 'sdk-php' && matrix.task == 'test'
        uses: codecov/codecov-action@v7.1.1
        with:
          token: ${{ secrets.CODECOV_TOKEN }}
          files: reports/php-coverage.lcov
          disable_search: true
          flags: php
          fail_ci_if_error: false
          verbose: true
          override_pr: ${{ github.event.pull_request.number }}

      # Node SDK
      - name: Run Node SDK task
        if: matrix.component == 'sdk-node'
        uses: ./.github/actions/node-npm/pre-merge
        with:
          task: ${{ matrix.task }}

      - name: Upload Node coverage to Codecov
        if: >-
          matrix.component == 'sdk-node' &&
          (matrix.task == 'test' ||
          matrix.task == 'e2e')
        uses: codecov/codecov-action@v7.1.1
        with:
          token: ${{ secrets.CODECOV_TOKEN }}
          files: >-
            reports/node-coverage/${{
            matrix.task == 'test' && 'unit' || matrix.task
            }}/lcov.info
          disable_search: true
          flags: >-
            ${{ matrix.task == 'test' && 'node' ||
            format('node-{0}', matrix.task) }}
          fail_ci_if_error: false
          verbose: true
          override_pr: ${{ github.event.pull_request.number }}

      # Go SDK
      - name: Run Go SDK task
        if: matrix.component == 'sdk-go'
        uses: ./.github/actions/go/pre-merge
        with:
          task: ${{ matrix.task }}

      - name: Upload Go coverage to Codecov
        if: matrix.component == 'sdk-go' && (matrix.task == 'test' || matrix.task == 'e2e')
        uses: codecov/codecov-action@v7.1.1
        with:
          token: ${{ secrets.CODECOV_TOKEN }}
          files: reports/${{ matrix.task == 'test' && 'go-coverage.out' || 'go-coverage-e2e.out' }}
          disable_search: true
          flags: go
          fail_ci_if_error: false
          verbose: true
          override_pr: ${{ github.event.pull_request.number }}

      # Java SDK
      - name: Run Java SDK task
        if: matrix.component == 'sdk-java'
        uses: ./.github/actions/java-gradle/pre-merge
        with:
          task: ${{ matrix.task }}

      # C# SDK
      - name: Run C# SDK task
        if: matrix.component == 'sdk-csharp'
        uses: ./.github/actions/csharp-dotnet/pre-merge
        with:
          task: ${{ matrix.task }}

      # C++ SDK
      - name: Run C++ SDK Task
        if: matrix.component == 'sdk-cpp'
        uses: ./.github/actions/cpp-bazel/pre-merge
        with:
          task: ${{ matrix.task }}

      # Swift SDK
      - name: Run Swift SDK task
        if: matrix.component == 'sdk-swift'
        uses: ./.github/actions/swift/pre-merge
        with:
          task: ${{ matrix.task }}

      - name: Upload C++ coverage to Codecov
        if: matrix.component == 'sdk-cpp' && matrix.task == 'test'
        uses: codecov/codecov-action@v7.1.1
        with:
          token: ${{ secrets.CODECOV_TOKEN }}
          files: reports/cpp-coverage.lcov
          disable_search: true
          flags: cpp
          fail_ci_if_error: false
          verbose: true
          override_pr: ${{ github.event.pull_request.number }}

      - name: Upload Java coverage to Codecov
        if: matrix.component == 'sdk-java' && matrix.task == 'test'
        uses: codecov/codecov-action@v7.1.1
        with:
          token: ${{ secrets.CODECOV_TOKEN }}
          files: reports/java-coverage/jacocoAggregated.xml
          disable_search: true
          flags: java
          fail_ci_if_error: false
          verbose: true
          override_pr: ${{ github.event.pull_request.number }}

      - name: Upload C# coverage to Codecov
        if: matrix.component == 'sdk-csharp' && (matrix.task == 'test' || startsWith(matrix.task, 'e2e'))
        uses: codecov/codecov-action@v7.1.1
        with:
          token: ${{ secrets.CODECOV_TOKEN }}
          files: foreign/csharp/reports/coverage.cobertura.xml
          disable_search: true
          flags: csharp
          fail_ci_if_error: false
          verbose: true
          override_pr: ${{ github.event.pull_request.number }}

      # Web UI
      - name: Setup Node.js for Web UI
        if: matrix.component == 'web-ui'
        uses: actions/setup-node@v7
        with:
          node-version: "24"
          package-manager-cache: false

      - name: Run Web UI task
        if: matrix.component == 'web-ui'
        run: |
          cd web
          npm ci
          if [ "${{ matrix.task }}" = "lint" ]; then
            npm run lint
          elif [ "${{ matrix.task }}" = "test" ]; then
            npm test
          elif [ "${{ matrix.task }}" = "build" ]; then
            npm run build
          fi

      # Helm chart testing
      - name: Setup Helm test tools
        if: matrix.component == 'helm' && (matrix.task == 'validate' || matrix.task == 'smoke')
        uses: ./.github/actions/utils/setup-helm-tools
        with:
          install-kind: ${{ matrix.task == 'smoke' }}
          install-helm-docs: ${{ matrix.task == 'validate' }}
          install-yamllint: ${{ matrix.task == 'validate' }}
          install-helmfmt: ${{ matrix.task == 'validate' }}

      - name: Setup Helm smoke cluster
        if: matrix.component == 'helm' && matrix.task == 'smoke'
        run: scripts/ci/setup-helm-smoke-cluster.sh

      - name: Validate Helm chart
        if: matrix.component == 'helm' && matrix.task == 'validate'
        run: scripts/ci/test-helm.sh validate

      - name: Smoke test Helm chart runtime
        if: matrix.component == 'helm' && matrix.task == 'smoke'
        run: scripts/ci/test-helm.sh smoke --cleanup

      - name: Collect Helm smoke diagnostics
        if: failure() && matrix.component == 'helm' && matrix.task == 'smoke'
        run: scripts/ci/test-helm.sh collect-smoke-diagnostics

      # CI workflow validation
      - name: Validate CI workflows
        if: matrix.component == 'ci-workflows' && matrix.task == 'validate'
        run: |
          echo "Validating GitHub Actions workflows..."
          # Basic YAML validation
          for workflow in .github/workflows/*.yml; do
            echo "Checking $workflow"
            python -c "import yaml; yaml.safe_load(open('$workflow'))" || exit 1
          done
          echo "All workflows are valid YAML"
          python3 scripts/ci/test-runtime-artifacts.py

      # Upload reports
      - name: Upload reports
        if: always()
        uses: actions/upload-artifact@v7
        with:
          name: ${{ matrix.component }}-${{ matrix.task }}-reports-${{ github.run_id }}-${{ github.run_attempt }}
          path: |
            reports/**
            target/llvm-cov/**
            coverage.lcov
            codecov.json
          if-no-files-found: ignore
          retention-days: 7