elizaos--eliza/.github/workflows/orchestrator-multi-account.yml

# Orchestrator — multi-account selection lane (per-PR, secret-free)
#
# The coding orchestrator's account pool — rotating sub-agent spawns across
# distinct Claude (OAuth) and Codex (CODEX_HOME) accounts, dropping the parent's
# API keys from each subprocess, and reusing a session's account on follow-ups —
# had NO CI coverage (#9960). `test:e2e:multi-account` already proves all of
# that end-to-end against a fake `acpx` subprocess with synthetic accounts, so it
# needs ZERO secrets and is safe to gate every PR.
#
# This lane runs that e2e on any change to the orchestrator, the account bridge,
# or the codex/claude auth surfaces. The real-account (live OAuth) lane is a
# separate, secret-gated, scheduled job — this is the deterministic per-PR floor.

name: Orchestrator multi-account

on:
  pull_request:
    branches: [main]
    paths:
      - "plugins/plugin-agent-orchestrator/**"
      - "packages/app-core/src/services/coding-account-bridge.ts"
      - "plugins/plugin-codex-cli/**"
      - ".github/workflows/orchestrator-multi-account.yml"
  push:
    branches: [develop]
    paths:
      - "plugins/plugin-agent-orchestrator/**"
      - "packages/app-core/src/services/coding-account-bridge.ts"
      - "plugins/plugin-codex-cli/**"
      - ".github/workflows/orchestrator-multi-account.yml"
  workflow_dispatch:

concurrency:
  group: orchestrator-multi-account-${{ github.ref }}
  cancel-in-progress: true

# Default to least privilege.
permissions:
  contents: read

env:
  BUN_VERSION: "canary"
  NODE_VERSION: "24"

jobs:
  multi-account-e2e:
    name: multi-account selection e2e
    runs-on: ${{ fromJSON(vars.HETZNER_FLEET_ONLINE == 'false' && '["ubuntu-24.04"]' || '["self-hosted","hetzner-robot"]') }}
    timeout-minutes: 25
    steps:
      - name: Checkout
        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5
        with:
          submodules: recursive
          fetch-depth: 1

      - name: Setup Node.js
        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e
        with:
          node-version: ${{ env.NODE_VERSION }}

      - name: Setup workspace dependencies
        uses: ./.github/actions/setup-bun-workspace
        with:
          bun-version: ${{ env.BUN_VERSION }}
          install-command: bun install --ignore-scripts --no-frozen-lockfile

      # Drives the real AccountPool + coding-account-bridge + AcpService through a
      # fake `acpx` subprocess: asserts distinct-account round-robin, per-account
      # token/CODEX_HOME injection, parent-key scrubbing, and session reuse.
      # Secret-free and deterministic.
      - name: Run multi-account selection e2e
        run: bun run --cwd plugins/plugin-agent-orchestrator test:e2e:multi-account