ci.yml

name: CI

on:
  push:
    branches: [main]
  pull_request:
    branches: [main]

concurrency:
  group: ci-${{ github.ref }}
  cancel-in-progress: true

permissions:
  contents: read
  pull-requests: write

jobs:
  markdown:
    runs-on: ubuntu-latest
    name: Markdown Lint

    steps:
      - uses: actions/checkout@v4

      - name: Lint Markdown files
        uses: DavidAnson/markdownlint-cli2-action@v19
        with:
          globs: |
            *.md
            .github/**/*.md
          config: ".markdownlint.yaml"

  quality:
    runs-on: ubuntu-latest
    name: Lint, Format & Test

    steps:
      - uses: actions/checkout@v4

      - uses: subosito/flutter-action@v2
        with:
          channel: stable
          cache: true

      - name: Cache pub dependencies
        uses: actions/cache@v4
        with:
          path: ~/.pub-cache
          key: ${{ runner.os }}-pub-${{ hashFiles('**/pubspec.yaml') }}
          restore-keys: ${{ runner.os }}-pub-

      - name: Install Melos
        run: dart pub global activate melos

      - name: Bootstrap
        run: melos bootstrap

      - name: Check formatting
        run: dart format --output=none --set-exit-if-changed .

      - name: Analyze
        run: melos run analyze

      - name: Check auto-fixable issues
        run: |
          OUTPUT=$(dart fix --dry-run . 2>&1)
          echo "$OUTPUT"
          echo "$OUTPUT" | grep -q "Nothing to fix!" || { echo "::error::Auto-fixable issues found. Run 'dart fix --apply' and commit."; exit 1; }

      - name: Verify generated code (Drift)
        run: |
          cd core && dart run build_runner build --delete-conflicting-outputs
          git diff --exit-code . || { echo "::error::Generated code is out of date. Run 'dart run build_runner build --delete-conflicting-outputs' in core/ and commit."; exit 1; }

      - name: Verify generated localizations
        run: |
          cd app && flutter gen-l10n
          git diff --exit-code lib/l10n/ || { echo "::error::Generated l10n files are out of date. Run 'flutter gen-l10n' in app/ and commit."; exit 1; }

      - name: Check outdated dependencies
        run: melos run outdated
        continue-on-error: true

      - name: Run tests
        run: melos run test:coverage

      - name: Upload coverage artifacts
        uses: actions/upload-artifact@v4
        if: always()
        with:
          name: coverage-reports
          path: |
            core/coverage/lcov.info
            listener/coverage/lcov.info
            app/coverage/lcov.info
          retention-days: 1

      - name: Upload coverage to Codecov
        uses: codecov/codecov-action@v4
        if: always()
        with:
          token: ${{ secrets.CODECOV_TOKEN }}
          files: core/coverage/lcov.info,listener/coverage/lcov.info,app/coverage/lcov.info
          flags: core,listener,app
          fail_ci_if_error: false

  release-readiness:
    runs-on: ubuntu-latest
    name: Release Readiness

    steps:
      - uses: actions/checkout@v4

      - name: Validate pubspec structure
        run: |
          errors=0
          for pkg in app core listener; do
            if [ ! -f "$pkg/pubspec.yaml" ]; then
              echo "::error::Missing $pkg/pubspec.yaml"
              errors=$((errors + 1))
              continue
            fi
            version=$(grep '^version:' "$pkg/pubspec.yaml" | head -1 | awk '{print $2}')
            name=$(grep '^name:' "$pkg/pubspec.yaml" | head -1 | awk '{print $2}')
            if [ -z "$version" ]; then
              echo "::error::Missing version field in $pkg/pubspec.yaml"
              errors=$((errors + 1))
            fi
            if [ -z "$name" ]; then
              echo "::error::Missing name field in $pkg/pubspec.yaml"
              errors=$((errors + 1))
            fi
            echo "✓ $pkg: name=$name version=$version"
          done
          [ $errors -eq 0 ] || exit 1

      - name: Validate release workflow references
        run: |
          errors=0
          for wf in release-win.yml release-mac.yml release-linux.yml; do
            if [ ! -f ".github/workflows/$wf" ]; then
              echo "::error::Missing .github/workflows/$wf (referenced by release.yml)"
              errors=$((errors + 1))
            else
              echo "✓ .github/workflows/$wf"
            fi
          done
          [ $errors -eq 0 ] || exit 1

      - name: Validate project structure
        run: |
          errors=0
          for dir in app/lib app/windows app/macos app/linux app/assets; do
            if [ ! -d "$dir" ]; then
              echo "::error::Missing required directory: $dir"
              errors=$((errors + 1))
            else
              echo "✓ $dir/"
            fi
          done
          for file in app/l10n.yaml app/pubspec.yaml core/pubspec.yaml listener/pubspec.yaml; do
            if [ ! -f "$file" ]; then
              echo "::error::Missing required file: $file"
              errors=$((errors + 1))
            else
              echo "✓ $file"
            fi
          done
          [ $errors -eq 0 ] || exit 1

      - name: Simulate release version extraction
        run: |
          test_tags=("v2.1.0" "v2.0.0-beta.1" "v3.0.0" "v1.0.0-rc.1")
          for tag in "${test_tags[@]}"; do
            ref="refs/tags/$tag"
            if [[ "$ref" =~ refs/tags/v(.+) ]]; then
              VERSION="${BASH_REMATCH[1]}"
              # Validate version format (semver)
              if [[ ! "$VERSION" =~ ^[0-9]+\.[0-9]+\.[0-9]+ ]]; then
                echo "::error::Tag $tag produces invalid version: $VERSION"
                exit 1
              fi
              echo "✓ $tag → $VERSION"
            else
              echo "::error::Tag $tag would fail version extraction in release.yml"
              exit 1
            fi
          done

  build:
    needs: quality
    runs-on: windows-latest
    name: Build Verification (Windows)

    steps:
      - uses: actions/checkout@v4

      - uses: subosito/flutter-action@v2
        with:
          channel: stable
          cache: true

      - name: Cache pub dependencies
        uses: actions/cache@v4
        with:
          path: ~/.pub-cache
          key: ${{ runner.os }}-pub-${{ hashFiles('**/pubspec.yaml') }}
          restore-keys: ${{ runner.os }}-pub-

      - name: Install Melos
        run: dart pub global activate melos

      - name: Get dependencies
        run: melos bootstrap

      - name: Build Windows release
        run: cd app; flutter build windows --release

  build-linux:
    needs: quality
    runs-on: ubuntu-22.04
    name: Build Verification (Linux)

    steps:
      - uses: actions/checkout@v4

      - uses: subosito/flutter-action@v2
        with:
          channel: stable
          cache: true

      - name: Cache pub dependencies
        uses: actions/cache@v4
        with:
          path: ~/.pub-cache
          key: ${{ runner.os }}-pub-${{ hashFiles('**/pubspec.yaml') }}
          restore-keys: ${{ runner.os }}-pub-

      - name: Install Linux build dependencies
        run: |
          sudo apt-get update
          sudo apt-get install -y \
            clang \
            cmake \
            desktop-file-utils \
            libayatana-appindicator3-dev \
            libfuse2 \
            libgtk-3-dev \
            libkeybinder-3.0-dev \
            liblzma-dev \
            libx11-dev \
            libxtst-dev \
            lld-14 \
            ninja-build \
            patchelf \
            pkg-config

      - name: Verify Linux toolchain preflight
        run: |
          set -euo pipefail
          test -x /usr/lib/llvm-14/bin/ld.lld || test -x /usr/bin/ld.lld-14 || test -x /usr/bin/ld.lld
          pkg-config --modversion gtk+-3.0
          pkg-config --modversion keybinder-3.0
          pkg-config --modversion ayatana-appindicator3-0.1
          pkg-config --modversion x11
          pkg-config --modversion xtst

      - name: Install Melos
        run: dart pub global activate melos

      - name: Get dependencies
        run: melos bootstrap

      - name: Build Linux release
        run: cd app && flutter build linux --release

  build-macos:
    needs: quality
    runs-on: macos-latest
    name: Build Verification (macOS)

    steps:
      - uses: actions/checkout@v4

      - uses: subosito/flutter-action@v2
        with:
          channel: stable
          cache: true

      - name: Cache pub dependencies
        uses: actions/cache@v4
        with:
          path: ~/.pub-cache
          key: ${{ runner.os }}-pub-${{ hashFiles('**/pubspec.yaml') }}
          restore-keys: ${{ runner.os }}-pub-

      - name: Install Melos
        run: dart pub global activate melos

      - name: Get dependencies
        run: melos bootstrap

      - name: Build macOS release
        run: cd app && flutter build macos --release

  sonarcloud:
    name: SonarCloud
    needs: quality
    runs-on: ubuntu-latest
    if: github.event_name == 'push' || github.event.pull_request.head.repo.full_name == github.repository

    steps:
      - uses: actions/checkout@v4
        with:
          fetch-depth: 0

      - name: Download coverage reports
        uses: actions/download-artifact@v4
        with:
          name: coverage-reports
          path: .

      - name: SonarCloud Scan
        uses: SonarSource/sonarcloud-github-action@v5
        env:
          SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
        with:
          args: >
            -Dsonar.projectKey=${{ vars.SONAR_PROJECT_KEY }}
            -Dsonar.organization=${{ vars.SONAR_ORGANIZATION }}
            -Dsonar.sources=core/lib,listener/lib,app/lib
            -Dsonar.tests=core/test,listener/test,app/test
            -Dsonar.dart.lcov.reportPaths=core/coverage/lcov.info,listener/coverage/lcov.info,app/coverage/lcov.info
            -Dsonar.exclusions=**/generated/**,**/*.g.dart,**/*.freezed.dart,**/l10n/**,**/core.dart
            -Dsonar.coverage.exclusions=**/main.dart,**/shell/**,**/services/auto_update_service.dart,**/windows_clipboard_listener.dart,**/l10n/**,**/*.g.dart,**/*.freezed.dart,**/core.dart,**/screens/settings_screen.dart
            -Dsonar.qualitygate.wait=true
            -Dsonar.qualitygate.timeout=300