carpet bomb fair-plugin with tests

.distignore

@@ -18,3 +18,8 @@ package-lock.json
 .gitattributes
 .distignore
 .editorconfig
+.envrc
+.pi/
+tmp/
+ai/
+infection.json

.gitattributes

@@ -18,3 +18,8 @@ package-lock.json export-ignore
 .gitattributes export-ignore
 .distignore export-ignore
 .editorconfig export-ignore
+/ai export-ignore
+.envrc export-ignore
+.pi/ export-ignore
+/tmp export-ignore
+infection.json export-ignore

.github/workflows/integration-tests.yml

@@ -0,0 +1,173 @@
+name: Integration & Browser Tests
+
+on:
+#  push:
+#    branches: [main, development, 'release/*']
+#  pull_request:
+#    branches: [main, development]
+  workflow_dispatch:
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.event_name == 'pull_request' && github.head_ref || github.sha }}
+  cancel-in-progress: true
+
+permissions:
+  contents: read
+
+jobs:
+  # ── Integration + HTTP tests (ephemeral Docker) ────────────────────
+  docker-tests:
+    name: Docker (${{ matrix.php }}, WP ${{ matrix.wp }})
+    runs-on: ubuntu-latest
+    timeout-minutes: 15
+    strategy:
+      fail-fast: false
+      matrix:
+        php: ['8.0', '8.4']
+        wp: ['5.4', 'latest']
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Run integration + HTTP tests
+        timeout-minutes: 12
+        run: |
+          PHP_VERSION=${{ matrix.php }} \
+          WORDPRESS_VERSION=${{ matrix.wp }} \
+          bin/run-integration.sh
+
+      - name: Verify no leftover Docker containers
+        if: always()
+        run: |
+          LEFTOVERS=$(docker ps -q 2>/dev/null | wc -l)
+          if [ "$LEFTOVERS" -gt 0 ]; then
+            echo "WARNING: $LEFTOVERS leftover containers"
+            docker ps
+            docker rm -f $(docker ps -q)
+          fi
+
+  # ── Browser tests (Playwright, fast only) ──────────────────────────
+  browser-tests:
+    name: Browser (chromium, fast)
+    runs-on: ubuntu-latest
+    timeout-minutes: 15
+    # Only run on push to main/development/release, or on PRs labeled run-browser-tests.
+    if: |
+      github.event_name != 'pull_request' ||
+      contains(github.event.pull_request.labels.*.name, 'run-browser-tests')
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/setup-node@v4
+        with:
+          node-version: '20'
+
+      - name: Install Playwright
+        run: |
+          cd tests/browser
+          npm ci
+          npx playwright install chromium --with-deps
+
+      - name: Start Docker services
+        run: |
+          docker compose -f tests/sites/browser-test/docker-compose.yml up -d --wait
+
+      - name: Install WordPress and seed
+        run: |
+          docker compose -f tests/sites/browser-test/docker-compose.yml run --rm wp-cli \
+            wp core install \
+            --url=http://localhost:8899 \
+            --title="FAIR CI Test" \
+            --admin_user=admin \
+            --admin_password=password \
+            --admin_email=admin@ci.local
+
+          docker compose -f tests/sites/browser-test/docker-compose.yml run --rm wp-cli \
+            wp plugin activate fair-plugin
+
+          docker compose -f tests/sites/browser-test/docker-compose.yml run --rm wp-cli \
+            php /var/www/html/wp-content/plugins/fair-plugin/tests/sites/browser-test/seed.php
+
+      - name: Run browser tests
+        id: browser
+        run: |
+          cd tests/browser
+          npx playwright test --grep-invert @slow
+        env:
+          FAIR_TEST_BASE_URL: http://localhost:8899
+
+      - name: Upload test results on failure
+        if: failure() && steps.browser.outcome == 'failure'
+        uses: actions/upload-artifact@v4
+        with:
+          name: playwright-report
+          path: tests/browser/test-results/
+          retention-days: 7
+
+      - name: Tear down Docker
+        if: always()
+        run: |
+          docker compose -f tests/sites/browser-test/docker-compose.yml down -v --remove-orphans
+
+  # ── All @slow browser tests on main/RC only ────────────────────────
+  browser-slow:
+    name: Browser (chromium, @slow)
+    runs-on: ubuntu-latest
+    timeout-minutes: 20
+    if: |
+      github.event_name == 'push' &&
+      (github.ref == 'refs/heads/main' || startsWith(github.ref, 'refs/heads/release/'))
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/setup-node@v4
+        with:
+          node-version: '20'
+
+      - name: Install Playwright
+        run: |
+          cd tests/browser
+          npm ci
+          npx playwright install chromium --with-deps
+
+      - name: Start Docker services
+        run: |
+          docker compose -f tests/sites/browser-test/docker-compose.yml up -d --wait
+
+      - name: Install WordPress and seed
+        run: |
+          docker compose -f tests/sites/browser-test/docker-compose.yml run --rm wp-cli \
+            wp core install \
+            --url=http://localhost:8899 \
+            --title="FAIR CI Test" \
+            --admin_user=admin \
+            --admin_password=password \
+            --admin_email=admin@ci.local
+
+          docker compose -f tests/sites/browser-test/docker-compose.yml run --rm wp-cli \
+            wp plugin activate fair-plugin
+
+          docker compose -f tests/sites/browser-test/docker-compose.yml run --rm wp-cli \
+            php /var/www/html/wp-content/plugins/fair-plugin/tests/sites/browser-test/seed.php
+
+      - name: Run @slow browser tests
+        run: |
+          cd tests/browser
+          npx playwright test --grep @slow
+        env:
+          FAIR_TEST_BASE_URL: http://localhost:8899
+
+      - name: Upload test results on failure
+        if: failure()
+        uses: actions/upload-artifact@v4
+        with:
+          name: playwright-report-slow
+          path: tests/browser/test-results/
+          retention-days: 7
+
+      - name: Tear down Docker
+        if: always()
+        run: |
+          docker compose -f tests/sites/browser-test/docker-compose.yml down -v --remove-orphans

.github/workflows/phpunit-tests.yml

@@ -113,3 +113,57 @@ jobs:
         run: |
           echo "define('WP_TESTS_PHPUNIT_POLYFILLS_PATH', '$HOME/.composer/vendor/yoast/phpunit-polyfills');" >> ${{ runner.temp }}/wordpress-tests-lib/wp-tests-config.php
           phpunit
+
+  # ── Coverage (single PHP version, push to main/release only) ─────
+  coverage:
+    name: Coverage (PHP 8.4, WP latest)
+    runs-on: ubuntu-latest
+    timeout-minutes: 15
+    if: |
+      github.event_name == 'push' &&
+      (github.ref == 'refs/heads/main' || github.ref == 'refs/heads/development' || startsWith(github.ref, 'refs/heads/release/'))
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Setup MySQL
+        uses: shogo82148/actions-setup-mysql@v1
+        with:
+          mysql-version: '8.0'
+          my-cnf: |
+            bind_address=127.0.0.1
+            default-authentication-plugin=mysql_native_password
+          root-password: root
+
+      - name: Set up PHP with XDebug
+        uses: shivammathur/setup-php@v2
+        with:
+          php-version: '8.4'
+          coverage: xdebug
+          extensions: mysql, mysqli
+          tools: composer
+        env:
+          COMPOSER_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Install Composer dependencies
+        run: composer update --optimize-autoloader --prefer-dist
+
+      - name: Install test suite
+        run: |
+          echo "TMPDIR=${{ runner.temp }}" >> $GITHUB_ENV
+          echo "WP_TESTS_DIR=${{ runner.temp }}/wordpress-tests-lib" >> $GITHUB_ENV
+          echo "WP_CORE_DIR=${{ runner.temp }}/wordpress" >> $GITHUB_ENV
+          TMPDIR=${{ runner.temp }} bash bin/install-wp-tests.sh wordpress_test root root 127.0.0.1 latest
+
+      - name: Run coverage
+        run: composer run coverage:full
+        env:
+          XDEBUG_MODE: coverage
+
+      - name: Upload coverage HTML
+        uses: actions/upload-artifact@v4
+        with:
+          name: coverage-report
+          path: tests/unit/coverage/html/full/
+          retention-days: 30

.github/workflows/releases.yml

@@ -20,11 +20,13 @@ jobs:
       - name: Set up PHP
         uses: shivammathur/setup-php@v2
         with:
-          php-version: '8.2'
+          php-version: '8.0'
           tools: composer
 
       - name: Install Composer dependencies
-        run: composer install --no-dev --optimize-autoloader --no-interaction
+        run: |
+          composer config platform.php 8.0
+          composer update --no-dev --optimize-autoloader --no-interaction
 
       - name: Get tag
         id: tag

.gitignore

@@ -15,3 +15,17 @@ wp-tests-config.php
 
 # Track placeholders so that empty directories stay in the repo.
 !.gitkeep
+
+# Playwright browser test artifacts
+.playwright-cli/
+tests/browser/test-results/
+tests/browser/.auth/
+tests/browser/node_modules/
+
+# Infection mutation test output
+tests/unit/infection/
+tests/mutation/vendor/
+tests/mutation/composer.lock
+
+# Test fixture generated artifacts (keys are reproducible via generate.php)
+tests/fixtures/keys/ed25519-keypair.json

.wp-env.json

@@ -1,5 +1,5 @@
 {
-	"phpVersion": "7.4",
+	"phpVersion": "8.0",
 	"plugins": [
 		"norcross/airplane-mode",
 		"johnbillion/query-monitor#3.18.0"

ai/plans/tests/README.md

@@ -0,0 +1,27 @@
+# Testing Plan — FAIR Plugin
+
+> **Status:** Design validated, pending implementation  
+> **Date:** 2026-06-09  
+> **Branch:** `development` (or dedicated feature branch)
+
+## Overview
+
+Four-layer test pyramid for the FAIR WordPress plugin. The DID-manager package pipeline (`inc/packages/`) is the top-priority functional area. Edge case coverage must be exhaustive; Infection mutation testing will be added in a follow-up pass.
+
+| Layer | Directory | Docker? | Target URL |
+|-------|-----------|---------|------------|
+| Unit | `tests/unit/` | No | N/A |
+| Integration | `tests/integration/` | Yes (ephemeral) | `tests/sites/ephemeral/<suite>/` |
+| HTTP | `tests/http/` | Optional | Configurable (ephemeral or pet) |
+| Browser | `tests/browser/` | Recommended | Configurable (ephemeral or pet) |
+
+## Documents
+
+- **[test-directory-layout.md](./test-directory-layout.md)** — File structure, bootstrap files, configs
+- **[unit-tests.md](./unit-tests.md)** — Packages/DID pipeline strategy, factory/fixture design, module coverage matrix
+- **[integration-tests.md](./integration-tests.md)** — Docker Compose harness, mock DID server, site lifecycle, seeding
+- **[http-tests.md](./http-tests.md)** — HTTP-level tests against configurable base URL, group annotations
+- **[browser-tests.md](./browser-tests.md)** — Playwright specs, auth bootstrap, UI coverage
+- **[static-sites.md](./static-sites.md)** — Persistent pet instances for exotic configurations (Bedrock, custom dir layouts, etc.)
+- **[ci-strategy.md](./ci-strategy.md)** — GitHub Actions workflow, matrix, group-gated gates
+- **[implementation-order.md](./implementation-order.md)** — 13-phase execution plan with parallelization notes