ci: test imported agent-notify module

Co-authored-by: Cursor <cursoragent@cursor.com>

Author: solomonneas

.github/workflows/ci.yml

@@ -17,6 +17,7 @@ jobs:
     outputs:
       code_graph: ${{ steps.filter.outputs.code_graph }}
       evidence_ledger: ${{ steps.filter.outputs.evidence_ledger }}
+      notify: ${{ steps.filter.outputs.notify }}
     steps:
       - uses: actions/checkout@v5
       - uses: dorny/paths-filter@v3
@@ -31,6 +32,10 @@ jobs:
               - 'engines/evidence-ledger/**'
               - 'src/brigade/templates/components/manifest-v1.json'
               - '.github/workflows/ci.yml'
+            notify:
+              - 'stations/notify/**'
+              - 'src/brigade/templates/components/manifest-v1.json'
+              - '.github/workflows/ci.yml'
 
   code-graph-msrv:
     name: MSRV (Rust 1.85)
@@ -147,6 +152,50 @@ jobs:
       - run: scripts/smoke_mcp.sh
       - run: scripts/smoke_http.sh
 
+  notify-build-and-test:
+    name: notify-build-and-test (ubuntu-latest)
+    needs: changes
+    if: ${{ needs.changes.outputs.notify == 'true' }}
+    runs-on: ubuntu-latest
+    defaults:
+      run:
+        working-directory: stations/notify
+    steps:
+      - uses: actions/checkout@v5
+      - uses: actions/setup-go@v5
+        with:
+          go-version: '1.22'
+      - name: Build
+        run: go build ./...
+      - name: Vet
+        run: go vet ./...
+      - name: Test
+        run: go test -race ./...
+      - name: Install govulncheck
+        run: go install golang.org/x/vuln/cmd/govulncheck@v1.3.0
+      - name: Vulncheck
+        run: govulncheck ./...
+
+  notify-windows:
+    name: notify-build-and-test (windows-latest)
+    needs: changes
+    if: ${{ needs.changes.outputs.notify == 'true' }}
+    runs-on: windows-latest
+    defaults:
+      run:
+        working-directory: stations/notify
+    steps:
+      - uses: actions/checkout@v5
+      - uses: actions/setup-go@v5
+        with:
+          go-version: '1.22'
+      - name: Build
+        run: go build ./...
+      - name: Vet
+        run: go vet ./...
+      - name: Test
+        run: go test -race ./...
+
   lint:
     runs-on: ubuntu-latest
     steps:

tests/test_ci_workflow.py

@@ -22,12 +22,15 @@ def test_ci_workflow_path_filter_has_valid_structure_and_engine_paths():
     assert "uses: dorny/paths-filter@v3" in changes
     assert "code_graph: ${{ steps.filter.outputs.code_graph }}" in changes
     assert "evidence_ledger: ${{ steps.filter.outputs.evidence_ledger }}" in changes
+    assert "notify: ${{ steps.filter.outputs.notify }}" in changes
     assert "code-graph:" not in changes
     assert "evidence-ledger:" not in changes
+    assert "stations/notify:" not in changes
 
     for path in (
         "engines/code-graph/**",
         "engines/evidence-ledger/**",
+        "stations/notify/**",
         "src/brigade/templates/components/manifest-v1.json",
         ".github/workflows/ci.yml",
     ):
@@ -63,6 +66,23 @@ def test_ci_workflow_gates_native_engine_jobs_with_valid_expressions():
         assert "self-hosted" not in section
 
 
+def test_ci_workflow_gates_notify_jobs_with_valid_expressions():
+    text = (ROOT / ".github/workflows/ci.yml").read_text()
+    expected_jobs = {
+        "notify-build-and-test": "notify",
+        "notify-windows": "notify",
+    }
+
+    job_names = re.findall(r"^  ([a-z0-9][a-z0-9-]*):$", text, re.MULTILINE)
+    assert {name for name in job_names if name.startswith("notify-")} == set(expected_jobs)
+
+    for job_name, output_name in expected_jobs.items():
+        section = _workflow_job_section(text, job_name)
+        assert "needs: changes" in section
+        assert f"if: ${{{{ needs.changes.outputs.{output_name} == 'true' }}}}" in section
+        assert "self-hosted" not in section
+
+
 def test_ci_workflow_runs_embedded_engine_commands_from_engine_directories():
     text = (ROOT / ".github/workflows/ci.yml").read_text()
 
@@ -106,6 +126,37 @@ def test_ci_workflow_runs_embedded_engine_commands_from_engine_directories():
         assert command in evidence_ledger
 
 
+def test_ci_workflow_runs_notify_go_commands_from_notify_directory():
+    text = (ROOT / ".github/workflows/ci.yml").read_text()
+
+    ubuntu = _workflow_job_section(text, "notify-build-and-test")
+    assert "runs-on: ubuntu-latest" in ubuntu
+    assert "working-directory: stations/notify" in ubuntu
+    assert "uses: actions/setup-go@v5" in ubuntu
+    assert "go-version: '1.22'" in ubuntu
+    for command in (
+        "go build ./...",
+        "go vet ./...",
+        "go test -race ./...",
+        "go install golang.org/x/vuln/cmd/govulncheck@v1.3.0",
+        "govulncheck ./...",
+    ):
+        assert command in ubuntu
+
+    windows = _workflow_job_section(text, "notify-windows")
+    assert "runs-on: windows-latest" in windows
+    assert "working-directory: stations/notify" in windows
+    assert "uses: actions/setup-go@v5" in windows
+    assert "go-version: '1.22'" in windows
+    for command in (
+        "go build ./...",
+        "go vet ./...",
+        "go test -race ./...",
+    ):
+        assert command in windows
+    assert "govulncheck" not in windows
+
+
 def test_ci_workflow_does_not_skip_docs_only_content_guard():
     text = (ROOT / ".github/workflows/ci.yml").read_text()