ci.yml

name: CI

on:
  push:
    branches: [main, develop]
  pull_request:
    branches: [main, develop]

jobs:
  test-linux:
    name: Test (Linux)
    runs-on: ubuntu-latest
    # Phase H: run inside the runex-ci image so the shell tools the
    # test suite reaches for (bash 4+, zsh, pwsh, nu, xclip,
    # wl-paste, xsel) are pinned and reproducible. The image is
    # built / pushed by .github/workflows/build-ci-image.yml; the
    # digest below is copied from that workflow's Step Summary.
    # Bumping the digest is a deliberate one-line commit so a
    # rebuilt image cannot silently change the CI gate.
    container:
      image: ghcr.io/shortarrow/runex-ci@sha256:0690174dd710f346726779da0c87a5c39eb9bd4d8111b71d87266b0c10b4c6e1
      options: --user 1001
    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
        with:
          persist-credentials: false
      # No dtolnay/rust-toolchain — the image already ships rustup
      # default stable + clippy + rustfmt. No `apt-get install zsh`
      # — that's now baked in.
      - name: Verify image tooling
        run: which bash zsh pwsh nu xclip wl-paste xsel cargo rustc
      - uses: Swatinem/rust-cache@v2
      - name: Test
        run: cargo test --locked

  test-macos:
    name: Test (macOS)
    runs-on: macos-latest
    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
        with:
          persist-credentials: false
      - uses: dtolnay/rust-toolchain@stable
      - uses: Swatinem/rust-cache@v2
      - name: Test
        run: cargo test --locked

  test-windows:
    name: Test (Windows)
    runs-on: windows-latest
    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
        with:
          persist-credentials: false
      - uses: dtolnay/rust-toolchain@stable
      - uses: Swatinem/rust-cache@v2
      - name: Test
        run: cargo test --locked