.gitlab-ci.yml

# GitLab CI/CD Pipeline para dotfiles
# Pipeline Python - Tests de instalación y validación

stages:
  - lint
  - test
  - validate

# Template para cache de Python
.python_cache: &python_cache
  cache:
    key: python-cache
    paths:
      - .cache/pip

variables:
  DEBIAN_FRONTEND: noninteractive
  PIP_CACHE_DIR: "$CI_PROJECT_DIR/.cache/pip"

#######################
# Stage: Lint
#######################

python-lint:
  stage: lint
  image: python:3-slim
  before_script:
    - pip install --upgrade pip
    - pip install pyyaml
  script:
    # Verificar sintaxis de todos los scripts Python
    - echo "=== Verificando sintaxis Python ==="
    - python -m py_compile scripts/install.py
    - python -m py_compile .github/scripts/check-english.py
    - python -m py_compile .github/scripts/check-mappings.py
    - python -m py_compile .github/scripts/test_install.py
    - python -m py_compile .github/scripts/test_sanitize.py
    - echo "✅ Sintaxis Python válida"
  <<: *python_cache

check-executables:
  stage: lint
  image: alpine/git
  script:
    - apk add --no-cache bash
    - |
      fail=0
      files=$(git ls-files || true)
      if [ -n "$files" ]; then
        for f in $files; do
          if [ -f "$f" ]; then
            if head -n1 "$f" | grep -q '^#!'; then
              mode=$(git ls-files --stage "$f" | awk '{print $1}')
              if [ "$mode" != "100755" ]; then
                echo "$f tiene shebang pero no es ejecutable"
                fail=1
              fi
            fi
          fi
        done
      fi
      if [ "$fail" -eq 1 ]; then exit 1; fi

check-i18n:
  stage: lint
  image: python:3-slim
  before_script:
    - pip install --upgrade pip
    - pip install pyyaml
  script:
    # Verificar no reintroducción de texto en inglés
    - python .github/scripts/check-english.py
  <<: *python_cache

#######################
# Stage: Test
#######################

test-install-default:
  stage: test
  image: python:3-slim
  before_script:
    - apt-get update
    - apt-get install -y git-lfs rsync
    - pip install --upgrade pip
    - pip install pyyaml
  script:
    - echo "=== Ejecutando test_install.py (Default - Sin Temas) ==="
    - python .github/scripts/test_install.py 2>&1 | tee /tmp/test-default.log
  <<: *python_cache

test-install-with-themes:
  stage: test
  image: python:3-slim
  before_script:
    - apt-get update
    - apt-get install -y git-lfs rsync
    - pip install --upgrade pip
    - pip install pyyaml
  script:
    - echo "=== Ejecutando test_install.py (Con Temas) ==="
    - python .github/scripts/test_install.py --with-themes 2>&1 | tee /tmp/test-themes.log
  <<: *python_cache
  artifacts:
    when: on_failure
    paths:
      - /tmp/test-themes.log
    expire_in: 1 week

test-quick-install:
  stage: test
  image: python:3-slim
  before_script:
    - apt-get update
    - apt-get install -y git-lfs rsync
    - pip install --upgrade pip
    - pip install pyyaml
  script:
    - TMP=$(mktemp -d)
    - echo "Testing installer against: $TMP"
    - python scripts/install.py --target "$TMP" modules/shell/bash 2>&1 | head -50
    - echo "Verificando instalación..."
    - ls -la "$TMP" | head -20
    - find "$TMP" -type l 2>/dev/null | head -10 || echo "No symlinks found yet"
  <<: *python_cache
  after_script:
    - rm -rf "$TMP" || true

#######################
# Stage: Validate
#######################

validate-mappings:
  stage: validate
  image: python:3-slim
  before_script:
    - pip install --upgrade pip
    - pip install pyyaml
  script:
    # Verificar cobertura de mapeos
    - python .github/scripts/check-mappings.py
  <<: *python_cache

validate-module-coverage:
  stage: validate
  image: python:3-slim
  before_script:
    - pip install --upgrade pip
    - pip install pyyaml
  script:
    - |
      echo "=== Verificando archivos top-level en módulos ==="
      cd modules
      FAIL=0
      ALLOWED=''
      if [ -f ../install-mappings.yml ]; then
        raw_keys=$(sed -n 's/^[[:space:]]*//;s/#.*//;s/:.*$//;s/|.*$//;p' ../install-mappings.yml | sed '/^[[:space:]]*-/d' | sed '/^$/d' || true)
        if [ -n "$raw_keys" ]; then
          pats=$(printf '%s\n' "$raw_keys" | awk -F: '
            /^[[:space:]]*#/ { next }
            /^[[:space:]]*$/ { next }
            { line=$1; sub(/^[[:space:]]*/, "", line); sub(/[[:space:]]*$/, "", line); sub(/\|.*$/, "", line);
              n=split(line, parts, "/"); base=parts[n];
              printf "%s|%s\n", line, base
            }
          ' | tr '\n' '|' | sed 's/|$//' || true)
          esc=$(printf '%s' "$pats" | sed -E 's/([^a-zA-Z0-9_\-\.\/|])/\\\\\1/g' || true)
          ALLOWED="^$(printf '%s' "$esc" | sed 's/|/\$|^/g')$|^\..+"
        fi
      fi
      if [ -z "$ALLOWED" ]; then
        ALLOWED='^\..+'
      fi
      for m in */ ; do
        m=$(basename "$m")
        while IFS= read -r -d $'\0' f; do
          fname=$(basename "$f")
          if [[ ! "$fname" =~ $ALLOWED ]] && [[ ! "$fname" =~ ^\..+ ]]; then
            echo "ERROR: El módulo $m contiene archivo en raíz sin mapear: $fname"
            FAIL=1
          fi
        done < <(find "$m" -maxdepth 1 -type f -print0 || true)
      done
      if [ "$FAIL" -eq 1 ]; then
        echo "❌ Se detectaron archivos sin mapear"
        exit 1
      else
        echo "✅ Todos los archivos están mapeados"
      fi
  <<: *python_cache

# Job solo para tags/releases
validate-release:
  stage: validate
  image: python:3-slim
  only:
    - tags
  before_script:
    - apt-get update
    - apt-get install -y git-lfs rsync
    - pip install --upgrade pip
    - pip install pyyaml
  script:
    - echo "=== Validando release $CI_COMMIT_TAG ==="
    - TMP=$(mktemp -d)
    # Ejecutar test completo
    - python .github/scripts/test_install.py
    - echo "✅ Release $CI_COMMIT_TAG validado correctamente"
  <<: *python_cache
  after_script:
    - rm -rf "$TMP" || true