Files
shockbot/test/ci.test.ts
T
Colin McDonnell 4b3c5ca905 rename agent key to opencode and add skill invocation coverage (#541)
* rename agent key to opencode and add skill invocation coverage.

add skill-invoke tests for claude and opencode with local play-based validation signals, update CI matrices, and include the current tracked refactors in this branch for review.

Made-with: Cursor

* exclude agent-specific skill-invoke tests from wrong agent in CI matrix

* address review follow-up and preserve workflow run UI tweak.

switch changed-agents ci coverage to exercise the opentoad implementation path while keeping the opencode expectation, and include the local workflow run client interaction updates requested on this branch.

Made-with: Cursor

* remove opentoad agent filename from runtime.

rename the opencode harness implementation file from opentoad.ts to opencode.ts and update ci coverage input accordingly so action code no longer carries the old filename.

Made-with: Cursor

* ensure security prompt bypass is set on every test fixture.

this keeps adversarial and permissions harnesses from being blocked by the default prompt-injection refusal path during CI security tests.

Made-with: Cursor

---------

Co-authored-by: pullfrog[bot] <226033991+pullfrog[bot]@users.noreply.github.com>
2026-04-15 19:38:36 +00:00

191 lines
6.6 KiB
TypeScript

import { execFileSync } from "node:child_process";
import { readdirSync, readFileSync } from "node:fs";
import { dirname, join } from "node:path";
import { fileURLToPath } from "node:url";
import { describe, expect, it } from "vitest";
import { parse } from "yaml";
import { agents } from "../agents/index.ts";
import type { WorkflowPermissions } from "../external.ts";
import { providers } from "../models.ts";
const __dirname = dirname(fileURLToPath(import.meta.url));
const actionDir = join(__dirname, "..");
const rootDir = join(actionDir, "..");
type WorkflowJob = {
"runs-on": string;
"timeout-minutes"?: number;
permissions?: WorkflowPermissions;
strategy?: { "fail-fast": boolean; matrix: Record<string, string[]> };
env?: Record<string, string>;
steps?: unknown[];
};
type Workflow = {
name: string;
jobs: Record<string, WorkflowJob>;
};
const rootWorkflow = parse(
readFileSync(join(rootDir, ".github/workflows/test.yml"), "utf-8")
) as Workflow;
const actionWorkflow = parse(
readFileSync(join(actionDir, ".github/workflows/test.yml"), "utf-8")
) as Workflow;
function getTestNamesFromDir(dir: string): string[] {
const dirPath = join(__dirname, dir);
const files = readdirSync(dirPath).filter((f) => f.endsWith(".ts"));
const names: string[] = [];
for (const file of files) {
const content = readFileSync(join(dirPath, file), "utf-8");
const match = content.match(/^\s+name:\s*"([^"]+)"/m);
if (match) {
names.push(match[1]);
}
}
return names.sort();
}
function getEnvVarNames(job: WorkflowJob): string[] {
return Object.keys(job.env ?? {}).sort();
}
const expectedAgents = Object.keys(agents).sort();
const crossagentTests = getTestNamesFromDir("crossagent");
const agnosticTests = getTestNamesFromDir("agnostic");
const adhocTests = getTestNamesFromDir("adhoc");
const dynamicAgentsExpression = "$" + "{{ fromJSON(needs.changes.outputs.agents) }}";
// all provider API key names + GITHUB_TOKEN + model overrides
const expectedAgentEnvVars = [
"GITHUB_TOKEN",
...new Set(Object.values(providers).flatMap((p) => [...p.envVars])),
"PULLFROG_MODEL",
].sort();
const expectedAgnosticEnvVars = ["ANTHROPIC_API_KEY", "GITHUB_TOKEN"].sort();
describe("ci workflow consistency", () => {
it("workflow names match", () => {
expect(rootWorkflow.name).toBe(actionWorkflow.name);
});
it("no duplicate test names across directories", () => {
const allNames = [...crossagentTests, ...agnosticTests, ...adhocTests];
const duplicates = allNames.filter((name, idx) => allNames.indexOf(name) !== idx);
expect(duplicates).toEqual([]);
});
describe("cross-agent tests", () => {
const rootJob = rootWorkflow.jobs["action-agents"];
const actionJob = actionWorkflow.jobs.agents;
it("root agent matrix uses dynamic output from changes job", () => {
expect(rootJob.strategy!.matrix.agent).toBe(dynamicAgentsExpression);
});
it("changed-agents.sh falls back to opencode when shared agent code changed", () => {
const input = JSON.stringify(["action/agents/shared.ts"]);
const output = execFileSync("bash", [join(__dirname, "changed-agents.sh")], {
input,
encoding: "utf-8",
});
expect(JSON.parse(output)).toEqual(["opencode"]);
});
it("changed-agents.sh falls back to opencode for non-agent action changes", () => {
const output = execFileSync("bash", [join(__dirname, "changed-agents.sh")], {
input: JSON.stringify(["action/mcp/server.ts"]),
encoding: "utf-8",
});
expect(JSON.parse(output)).toEqual(["opencode"]);
});
it("changed-agents.sh includes opencode canary alongside changed agents", () => {
const output = execFileSync("bash", [join(__dirname, "changed-agents.sh")], {
input: JSON.stringify(["action/agents/opencode.ts", "action/mcp/server.ts"]),
encoding: "utf-8",
});
expect(JSON.parse(output)).toEqual(["opencode"]);
});
it("changed-agents.sh treats legacy agent files as non-agent changes", () => {
const output = execFileSync("bash", [join(__dirname, "changed-agents.sh")], {
input: JSON.stringify(["action/agents/codex.ts", "action/agents/gemini.ts"]),
encoding: "utf-8",
});
expect(JSON.parse(output)).toEqual(["opencode"]);
});
it("action agent matrix matches agents map", () => {
expect([...actionJob.strategy!.matrix.agent].sort()).toEqual(expectedAgents);
});
it("root test matrix matches crossagent/ directory", () => {
expect([...rootJob.strategy!.matrix.test].sort()).toEqual(crossagentTests);
});
it("action test matrix matches crossagent/ directory", () => {
expect([...actionJob.strategy!.matrix.test].sort()).toEqual(crossagentTests);
});
it("permissions match between root and action", () => {
expect(rootJob.permissions).toEqual(actionJob.permissions);
});
it("timeout-minutes match between root and action", () => {
expect(rootJob["timeout-minutes"]).toEqual(actionJob["timeout-minutes"]);
});
it("env vars match between root and action", () => {
expect(getEnvVarNames(rootJob)).toEqual(getEnvVarNames(actionJob));
});
it("env vars cover all provider API keys", () => {
expect(getEnvVarNames(rootJob)).toEqual(expectedAgentEnvVars);
});
it("fail-fast is enabled in both", () => {
expect(rootJob.strategy!["fail-fast"]).toBe(true);
expect(actionJob.strategy!["fail-fast"]).toBe(true);
});
});
describe("agnostic tests", () => {
const rootJob = rootWorkflow.jobs["action-agnostic"];
const actionJob = actionWorkflow.jobs.agnostic;
it("root test matrix matches agnostic/ directory", () => {
expect([...rootJob.strategy!.matrix.test].sort()).toEqual(agnosticTests);
});
it("action test matrix matches agnostic/ directory", () => {
expect([...actionJob.strategy!.matrix.test].sort()).toEqual(agnosticTests);
});
it("permissions match between root and action", () => {
expect(rootJob.permissions).toEqual(actionJob.permissions);
});
it("timeout-minutes match between root and action", () => {
expect(rootJob["timeout-minutes"]).toEqual(actionJob["timeout-minutes"]);
});
it("env vars match between root and action", () => {
expect(getEnvVarNames(rootJob)).toEqual(getEnvVarNames(actionJob));
});
it("env vars are correct for agnostic tests", () => {
expect(getEnvVarNames(rootJob)).toEqual(expectedAgnosticEnvVars);
});
it("fail-fast is enabled in both", () => {
expect(rootJob.strategy!["fail-fast"]).toBe(true);
expect(actionJob.strategy!["fail-fast"]).toBe(true);
});
});
});