[Continuous integration]

Continuous integration

Abstract

CI is the public invariant check for the monorepo-like layout. A single PR can touch the Python evaluator, the Flask API, the VS Code extension, the AXIS PWA, and a Cloudflare Worker typecheck — the workflow graph is deliberately fan-out with concurrency cancellation on newer pushes to the same ref.

Primary definition: .github/workflows/ci.yml. Nightly AXIS expansion lives in axis-nightly.yml. Release builds are separate (release.yml).

Conceptual model

Interface surface

Triggers

ci.yml jobs

Concurrency:

concurrency:
  group: ci-${{ github.ref }}
  cancel-in-progress: true

Nightly (axis-nightly.yml)

• Full e2e suite (bun run test:e2e) with report artifact on failure
• Coverage gate + security tests (stricter than PR smoke)

Internals

Secrets referenced in CI surface

�SLOT0� — CI test job currently does not run the full tests/ corpus on every matrix cell; it prioritizes LSP + backend. Local make test is broader.

Invariants & edge cases

1. Fail-fast is off on the Python matrix — one version failure does not hide others.
2. Codecov only on 3.13 to avoid noisy multi-upload; coverage XML path depends on pytest-cov configuration in the job.
3. PWA install is resilient: bun install --frozen-lockfile || bun install — lockfile drift should still be fixed, not papered forever.
4. VSIX artifacts are not the Marketplace. Packaging on every PR proves buildability; publish is release-gated.
5. Worker typecheck ≠ deploy. cf-worker job does not call wrangler deploy.

Worked examples

Reproduce lint locally as CI does

pip install ruff flake8 mypy types-python-dateutil antlr4-python3-runtime
ruff check src/ tests/ --output-format=github
mypy src/ --ignore-missing-imports

Reproduce Python job slice

pip install -e ".[lsp]"
pip install pytest pytest-cov pytest-xdist pytest-asyncio
python -m pytest tests/test_langserver.py tests/test_lsp_features.py -v --tb=short
python -m pytest tests/test_backend.py -v --tb=short

Reproduce PWA job

bun install --frozen-lockfile
cd frontend/worker && bun install --frozen-lockfile && bunx tsc --noEmit
cd ../.. && bunx tsc -p tsconfig.json
cd frontend && bun install && bun run test:coverage:gate && bun run test:security

Failure modes

See also

• Release
• Local development
• Observability
• Security