ci(workspace): run collaboration service tests

Author: Programcode

.github/workflows/deploy.yml

@@ -48,6 +48,9 @@ jobs:
       - name: Test
         run: npm test -- --coverage
 
+      - name: Collaboration service tests
+        run: npm run test:collaboration
+
       - name: Edge function tests
         run: npm run test:edge
 

AGENTS.md

@@ -36,6 +36,7 @@ npm run docs:check
 npm run lint
 npm run typecheck
 npm test -- --coverage
+npm run test:collaboration
 npm run test:edge
 npm run build
 CI=1 PORT=18080 PLAYWRIGHT_BASE_URL=http://127.0.0.1:18080 npm run test:e2e

docs/development.md

@@ -77,6 +77,16 @@ Follow existing functional React, Zustand, Zod, and shadcn/Radix patterns. Reuse
 
 Run the closest unit or component test while changing behavior. Run lint, type checking, and build before handing work off.
 
+## Collaboration service spike
+
+The Phase 0 service evidence lives under `services/collaboration/`. Run:
+
+```bash
+npm run test:collaboration
+```
+
+The spike is not a deployed service. Its in-memory writer lock is single-process evidence; the database-backed service and advisory-lock lifecycle belong to P2.1.
+
 ## Edge Function workflow
 
 Edge Functions live under [`supabase/functions/`](../supabase/functions/). Shared server code belongs in `_shared` only when at least two functions use the same boundary or policy.

docs/testing.md

@@ -48,6 +48,14 @@ npx vitest run src/test/security/url-validation.test.ts
 
 For a bug, watch the reproduction fail for the expected reason before implementing the fix.
 
+## Collaboration service tests
+
+```bash
+npm run test:collaboration
+```
+
+This runs the isolated Node service spike with real Hocuspocus providers and Yjs documents. It covers durable acknowledgement ordering, reconnect sync, duplicate delivery, schema and size rejection, writer serialization, stale epochs, and process-kill recovery. It does not prove PostgreSQL advisory locks or a deployed collaboration service.
+
 ## Edge Function tests
 
 ```bash
@@ -91,9 +99,10 @@ The gate runs, in order:
 2. lint
 3. type checking
 4. selected-scope coverage
-5. native Edge Function tests
-6. production build
-7. desktop and mobile Chromium
+5. collaboration service tests
+6. native Edge Function tests
+7. production build
+8. desktop and mobile Chromium
 
 It does not start local Supabase, run pgTAP, run WebKit, or use protected staging.
 

package.json

@@ -24,7 +24,7 @@
     "test:e2e": "playwright test --project=desktop-chromium --project=mobile-chromium",
     "test:e2e:webkit": "playwright test --project=webkit",
     "test:e2e:staging": "playwright test --project=staging",
-    "verify": "npm run docs:check && npm run lint && npm run typecheck && npm test -- --coverage && npm run test:edge && npm run build && CI=1 PORT=18080 PLAYWRIGHT_BASE_URL=http://127.0.0.1:18080 npm run test:e2e"
+    "verify": "npm run docs:check && npm run lint && npm run typecheck && npm test -- --coverage && npm run test:collaboration && npm run test:edge && npm run build && CI=1 PORT=18080 PLAYWRIGHT_BASE_URL=http://127.0.0.1:18080 npm run test:e2e"
   },
   "dependencies": {
     "@capacitor/app": "^8.1.0",