mutation.yml

# ============================================================
# WorldScript Studio – Mutation Testing (Stryker) — Parallel + Incremental
# QNBS-v3: Matrix-parallel Stryker with per-module caches and fail-safe aggregation.
# Run manually via workflow_dispatch. Each matrix job targets one curated module;
# runtime and score remain measured outputs rather than undocumented promises.
# ============================================================

name: 🧬 Mutation Tests (Stryker)

on:
  workflow_dispatch:
    inputs:
      mode:
        description: 'Run mode'
        required: true
        default: 'incremental'
        type: choice
        options:
          - incremental
          - force
      module:
        description: 'Scope selector: all, tier-a, or one module name'
        required: false
        default: 'all'
      per_job_concurrency:
        description: 'Concurrency per job (default: 2)'
        required: false
        default: '2'

concurrency:
  group: mutation-${{ github.ref }}
  cancel-in-progress: true

permissions:
  contents: read

jobs:
  scope:
    name: 🧬 Validate Stryker Scope
    runs-on: ubuntu-latest
    outputs:
      matrix: ${{ steps.scope.outputs.matrix }}
    steps:
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
        with:
          persist-credentials: false
      - id: scope
        shell: bash
        env:
          SELECTOR: ${{ github.event.inputs.module || 'all' }}
        run: |
          node scripts/stryker-scope.mjs --selector "$SELECTOR"
          printf 'matrix=%s\n' \
            "$(node scripts/stryker-scope.mjs --matrix --selector "$SELECTOR")" \
            >> "$GITHUB_OUTPUT"

  # ============================================
  # PARALLEL MATRIX JOBS (one per module)
  # ============================================
  stryker:
    name: 🧬 Stryker ${{ matrix.name }}
    runs-on: ubuntu-latest
    timeout-minutes: 45
    needs: scope
    strategy:
      fail-fast: false
      matrix: ${{ fromJSON(needs.scope.outputs.matrix) }}

    permissions:
      contents: read

    steps:
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
        with:
          persist-credentials: false

      - uses: ./.github/actions/setup

      # === Incremental cache (per module) ===
      - name: Restore Stryker incremental cache
        id: cache-incremental
        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
        with:
          path: reports/stryker-incremental-${{ matrix.name }}.json
          key: stryker-incremental-${{ matrix.name }}-${{ github.sha }}
          restore-keys: |
            stryker-incremental-${{ matrix.name }}-

      - name: Prepare incremental file
        env:
          MATRIX_NAME: ${{ matrix.name }}
          MODE_INPUT: ${{ github.event.inputs.mode || 'incremental' }}
        run: |
          if [[ ! "$MATRIX_NAME" =~ ^[a-z0-9-]+$ ]]; then
            echo "Invalid Stryker module name: $MATRIX_NAME" >&2
            exit 1
          fi
          INCREMENTAL_FILE="reports/stryker-incremental-${MATRIX_NAME}.json"
          mkdir -p reports
          MODE="$MODE_INPUT"
          if [[ "$MODE" != "incremental" && "$MODE" != "force" ]]; then
            echo "Invalid Stryker mode: $MODE" >&2
            exit 1
          fi
          if [ "$MODE" = "force" ]; then
            echo "🧹 Force mode → clearing incremental cache for $MATRIX_NAME"
            rm -f "$INCREMENTAL_FILE"
          elif [ -f "$INCREMENTAL_FILE" ]; then
            echo "♻️ Using existing incremental cache for $MATRIX_NAME"
          else
            echo "🆕 No incremental cache found — will create new one"
          fi

      - name: Run Stryker (${{ matrix.name }})
        env:
          MATRIX_NAME: ${{ matrix.name }}
          MATRIX_MUTATE: ${{ matrix.mutate }}
          MATRIX_TEST_FILES: ${{ join(matrix.testFiles, ',') }}
          MODE_INPUT: ${{ github.event.inputs.mode || 'incremental' }}
          CONCURRENCY_INPUT: ${{ github.event.inputs.per_job_concurrency || '2' }}
          STRYKER_DASHBOARD_API_KEY: ${{ secrets.STRYKER_DASHBOARD_API_KEY }}
        run: |
          if [[ ! "$MATRIX_NAME" =~ ^[a-z0-9-]+$ ]]; then
            echo "Invalid Stryker module name: $MATRIX_NAME" >&2
            exit 1
          fi
          MODE="$MODE_INPUT"
          if [[ "$MODE" != "incremental" && "$MODE" != "force" ]]; then
            echo "Invalid Stryker mode: $MODE" >&2
            exit 1
          fi
          FORCE_FLAG=""
          if [ "$MODE" = "force" ]; then
            FORCE_FLAG="--force"
          fi

          CONCURRENCY="$CONCURRENCY_INPUT"
          if [[ ! "$CONCURRENCY" =~ ^[0-9]+%?$ ]]; then
            echo "Invalid Stryker concurrency: $CONCURRENCY" >&2
            exit 1
          fi

          echo "▶️ Module: $MATRIX_NAME"
          echo "   Pattern: $MATRIX_MUTATE"
          TEST_FILES="$MATRIX_TEST_FILES"
          if [ -n "$TEST_FILES" ]; then
            echo "   Test files: $TEST_FILES"
          else
            echo "   Test files: Vitest related selection"
          fi
          echo "   Concurrency: $CONCURRENCY"
          echo "   Mode: $MODE"

          # QNBS-v3: pass the supported CLI option; arbitrary env vars are not Stryker config.
          INCREMENTAL_FILE="reports/stryker-incremental-${MATRIX_NAME}.json"
          TEST_FILE_ARGS=()
          if [ -n "$TEST_FILES" ]; then
            TEST_FILE_ARGS+=(--testFiles "$TEST_FILES")
          fi

          pnpm exec stryker run \
            stryker.config.mjs \
            --incremental \
            --incrementalFile "$INCREMENTAL_FILE" \
            $FORCE_FLAG \
            --concurrency "$CONCURRENCY" \
            --mutate "$MATRIX_MUTATE" \
            "${TEST_FILE_ARGS[@]}" \
            --reporters progress,json,html

      - name: Upload Stryker report
        if: always()
        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
        with:
          name: stryker-report-${{ matrix.name }}
          path: reports/mutation/
          if-no-files-found: error
          retention-days: 30

  # ============================================
  # AGGREGATE JOB — combined summary
  # ============================================
  aggregate:
    name: 📊 Stryker Aggregate Report
    runs-on: ubuntu-latest
    needs: [scope, stryker]
    if: always()
    timeout-minutes: 10
    permissions:
      contents: read

    steps:
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
        with:
          persist-credentials: false

      - name: Download all Stryker reports
        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
        with:
          path: all-reports
          pattern: stryker-report-*
          merge-multiple: false

      - name: Build combined summary
        env:
          SELECTOR: ${{ github.event.inputs.module || 'all' }}
        run: |
          set -o pipefail
          if [ "${{ needs.stryker.result }}" != "success" ]; then
            echo "Stryker matrix completed with: ${{ needs.stryker.result }}; the summary remains informational and this job will fail closed." >&2
          fi
          node scripts/aggregate-stryker-reports.mjs all-reports --selector "$SELECTOR" | tee -a "$GITHUB_STEP_SUMMARY"
          if [ "${{ needs.stryker.result }}" != "success" ]; then
            exit 1
          fi
          echo "> Mode: \`${{ github.event.inputs.mode || 'incremental' }}\` | Concurrency: \`${{ github.event.inputs.per_job_concurrency || '2' }}\`" >> "$GITHUB_STEP_SUMMARY"
          echo "> Threshold: break ≥ 75 | low ≥ 70 | high ≥ 85" >> "$GITHUB_STEP_SUMMARY"
          echo "> Individual HTML/JSON reports are available as artifacts." >> "$GITHUB_STEP_SUMMARY"