elizaos--eliza/.github/workflows/ci-full-matrix-proof.yml

name: CI Full Matrix Proof

# Un-cancellable proof that the exhaustive develop lane keeps its full coverage
# shape (#12342). This does NOT re-run the test matrix — `test.yml` owns that on
# its own schedule. It runs the deterministic proof job: it enumerates every
# expected lane from the committed manifest, cross-checks them against
# `test.yml` (job present, not pinned pull_request-only) and against
# `run-all-tests.mjs --plan=json` (task/package floors, required core packages,
# non-empty per-script lanes). A missing lane, a lane pointed at a nonexistent
# glob, or a whole script lane collapsing to zero turns this red.
#
# Additive by design: it introduces no new required status check and does not
# touch any PR-critical workflow. The twice-daily cadence exists so the #12342
# "≥ twice daily for 7 consecutive days" observation window has a dedicated,
# never-cancelled signal to sample.

on:
  schedule:
    # Twice daily, offset from test.yml's 09:17 nightly so the two do not stampede.
    - cron: "13 3 * * *"
    - cron: "13 15 * * *"
  workflow_dispatch:

# Never cancel an in-flight proof run. Push/PR traffic must not be able to
# abort the scheduled exhaustive-lane signal (#12337/#12342).
concurrency:
  group: ci-full-matrix-proof-${{ github.event_name }}-${{ github.ref }}
  cancel-in-progress: false

permissions:
  contents: read

env:
  CI: "true"
  # One pinned Bun source, matching test.yml. Floating canary hangs `bun install`
  # on hosted runners and writes a lockfileVersion that breaks --frozen-lockfile
  # (#11184/#9454), which would itself masquerade as a failed proof.
  BUN_VERSION: "1.3.14"
  NODE_VERSION: "24.15.0"
  NODE_NO_WARNINGS: "1"
  NODE_OPTIONS: "--max-old-space-size=8192"

jobs:
  matrix-proof:
    name: Exhaustive lane matrix proof
    runs-on: ${{ fromJSON(vars.HETZNER_FLEET_ONLINE == 'false' && '["ubuntu-24.04"]' || '["self-hosted","hetzner-robot"]') }}
    steps:
      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5
        with:
          submodules: false

      - name: Setup Node.js
        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e
        with:
          node-version: ${{ env.NODE_VERSION }}

      - name: Setup workspace dependencies
        uses: ./.github/actions/setup-bun-workspace
        with:
          bun-version: ${{ env.BUN_VERSION }}
          install-command: bun install --frozen-lockfile --ignore-scripts
          install-native-deps: "false"
          skip-avatar-clone: "true"
          no-vision-deps: "true"

      - name: Validate GitHub-native turbo cache contract
        run: node packages/scripts/ci-turbo-cache-contract.mjs

      - name: Capture exhaustive test plan
        run: node packages/scripts/run-all-tests.mjs --plan=json > /tmp/full-matrix-plan.json

      - name: Prove exhaustive lane coverage
        run: node packages/scripts/ci-full-matrix-proof.mjs --plan-file /tmp/full-matrix-plan.json

      - name: Upload captured plan
        if: always()
        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
        with:
          name: full-matrix-plan
          path: /tmp/full-matrix-plan.json
          if-no-files-found: warn