ci.yml

name: CI
run-name: "CI: ${{ github.ref_name }} (${{ github.event.head_commit.message || github.event.pull_request.title || 'manual' }})"

on:
  push:
    branches: [main]
    tags:
      - 'agent-v[0-9]+.[0-9]+.[0-9]+'
      - 'server-v[0-9]+.[0-9]+.[0-9]+'
  pull_request:
    branches: [main]
  workflow_dispatch: {}

concurrency:
  group: ci-${{ github.ref }}
  cancel-in-progress: true

permissions:
  contents: read

env:
  GO_VERSION: '1.25'

jobs:
  # ============================================================================
  # LINT & TEST - Common runs first, agent/server run in parallel after
  # ============================================================================
  common:
    name: Common
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v6
      - uses: actions/setup-go@v6
        with:
          go-version: ${{ env.GO_VERSION }}
          cache-dependency-path: |
            common/go.sum
            agent/go.sum
            server/go.sum

      - name: Lint
        working-directory: ./common
        run: |
          go install honnef.co/go/tools/cmd/staticcheck@latest
          go vet ./...
          staticcheck ./...

      - name: Test
        working-directory: ./common
        run: go test -v -coverprofile=coverage.out ./...

      - uses: codecov/codecov-action@v4
        with:
          file: ./common/coverage.out
          flags: common
          fail_ci_if_error: false

  agent:
    name: Agent
    runs-on: ubuntu-latest
    needs: [common]
    steps:
      - uses: actions/checkout@v6
      - uses: actions/setup-go@v6
        with:
          go-version: ${{ env.GO_VERSION }}
          cache-dependency-path: |
            common/go.sum
            agent/go.sum

      - name: Lint
        working-directory: ./agent
        run: |
          go install honnef.co/go/tools/cmd/staticcheck@latest
          go vet ./...
          staticcheck ./...

      - name: Test
        working-directory: ./agent
        run: go test -v -coverprofile=coverage.out ./...

      - uses: codecov/codecov-action@v4
        with:
          file: ./agent/coverage.out
          flags: agent
          fail_ci_if_error: false

  server:
    name: Server
    runs-on: ubuntu-latest
    needs: [common]
    steps:
      - uses: actions/checkout@v6
      - uses: actions/setup-go@v6
        with:
          go-version: ${{ env.GO_VERSION }}
          cache-dependency-path: |
            common/go.sum
            server/go.sum

      - name: Lint
        working-directory: ./server
        run: |
          go install honnef.co/go/tools/cmd/staticcheck@latest
          go vet ./...
          staticcheck ./...

      - name: Test
        working-directory: ./server
        run: go test -v -coverprofile=coverage.out ./...

      - uses: codecov/codecov-action@v4
        with:
          file: ./server/coverage.out
          flags: server
          fail_ci_if_error: false

      - name: Integration Tests (Postgres)
        working-directory: ./server
        run: go test -v -tags=integration -coverprofile=coverage-integration.out ./storage/...

      - uses: codecov/codecov-action@v4
        with:
          file: ./server/coverage-integration.out
          flags: server-integration
          fail_ci_if_error: false

  # ============================================================================
  # JAVASCRIPT - Jest unit tests + Playwright UI tests
  # ============================================================================
  javascript:
    name: JavaScript
    runs-on: ubuntu-latest
    env:
      PLAYWRIGHT_BROWSERS_PATH: ~/.cache/ms-playwright
    steps:
      - uses: actions/checkout@v6
      - uses: actions/setup-node@v4
        with:
          node-version: '20'
          cache: 'npm'

      - name: Install dependencies
        run: npm ci

      - name: Jest unit tests
        run: npm run test:js

      - name: Cache Playwright browsers
        id: playwright-cache
        uses: actions/cache@v4
        with:
          path: ~/.cache/ms-playwright
          key: ${{ runner.os }}-playwright-${{ hashFiles('package-lock.json') }}
          restore-keys: |
            ${{ runner.os }}-playwright-

      - name: Install Playwright browsers (cache miss)
        if: steps.playwright-cache.outputs.cache-hit != 'true'
        run: npx playwright install --with-deps chromium firefox webkit

      - name: Validate Playwright browsers (cache hit)
        if: steps.playwright-cache.outputs.cache-hit == 'true'
        run: npx playwright install chromium firefox webkit

      - uses: actions/setup-go@v6
        with:
          go-version: ${{ env.GO_VERSION }}
          cache-dependency-path: |
            common/go.sum
            agent/go.sum
            server/go.sum

      - name: Build binaries for Playwright
        run: |
          (cd agent && go build -o printmaster-agent .)
          (cd server && go build -o printmaster-server .)

      - name: Playwright tests
        run: npm run test:playwright

      - uses: actions/upload-artifact@v7
        if: always()
        with:
          name: playwright-report
          path: test-results/
          if-no-files-found: ignore

  # ============================================================================
  # E2E - Runs after both agent and server pass (mock-based tests)
  # ============================================================================
  e2e:
    name: E2E (Mock)
    runs-on: ubuntu-latest
    needs: [agent, server]
    steps:
      - uses: actions/checkout@v6
      - uses: actions/setup-go@v6
        with:
          go-version: ${{ env.GO_VERSION }}
          cache-dependency-path: |
            common/go.sum
            agent/go.sum
            server/go.sum
            tests/go.sum

      - name: Run E2E tests (mock-based)
        working-directory: ./tests
        run: go test -v -count=1 ./...

      - uses: actions/upload-artifact@v7
        if: always()
        with:
          name: e2e-test-results
          path: tests/*.log
          if-no-files-found: ignore

  # ============================================================================
  # E2E Docker - Full integration tests with real containers
  # ============================================================================
  e2e-docker:
    name: E2E (Docker)
    runs-on: ubuntu-latest
    needs: [agent, server]
    steps:
      - uses: actions/checkout@v6

      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v4

      - name: Create data directories
        run: |
          mkdir -p tests/testdata/server
          mkdir -p tests/testdata/agent

      - name: Start E2E environment
        working-directory: ./tests
        run: |
          docker compose -f docker-compose.e2e.yml up -d --build server agent
          echo "Waiting for services to be healthy..."
          sleep 10
          docker compose -f docker-compose.e2e.yml ps

      - name: Wait for services
        run: |
          echo "Waiting for server..."
          server_ready=false
          for i in {1..30}; do
            if curl -sf http://localhost:9090/health > /dev/null 2>&1; then
              echo "Server is ready!"
              server_ready=true
              break
            fi
            echo "Attempt $i: Server not ready yet..."
            sleep 2
          done
          
          if [ "$server_ready" = false ]; then
            echo "::error::Server failed to become ready after 30 attempts"
            echo "Docker logs for server:"
            docker compose -f tests/docker-compose.e2e.yml logs server
            exit 1
          fi
          
          echo "Waiting for agent..."
          agent_ready=false
          for i in {1..30}; do
            if curl -sf http://localhost:8080/health > /dev/null 2>&1; then
              echo "Agent is ready!"
              agent_ready=true
              break
            fi
            echo "Attempt $i: Agent not ready yet..."
            sleep 2
          done
          
          if [ "$agent_ready" = false ]; then
            echo "::error::Agent failed to become ready after 30 attempts"
            echo "Docker logs for agent:"
            docker compose -f tests/docker-compose.e2e.yml logs agent
            exit 1
          fi

      - name: Seed test data
        run: |
          # Containers created the schema on startup, now seed test data
          # Must seed from inside containers since they own the DB files
          echo "Seeding server test data..."
          docker exec pm-e2e-server sh -c "cat > /tmp/seed.sql && sqlite3 /data/server.db < /tmp/seed.sql" < tests/testdata/seed/server_data.sql
          
          echo "Seeding agent test data..."
          docker exec pm-e2e-agent sh -c "cat > /tmp/seed.sql && sqlite3 /data/agent.db < /tmp/seed.sql" < tests/testdata/seed/agent_data.sql
          
          echo "Verifying seeded data..."
          docker exec pm-e2e-server sqlite3 /data/server.db "SELECT 'Server devices: ' || COUNT(*) FROM devices;"
          docker exec pm-e2e-agent sqlite3 /data/agent.db "SELECT 'Agent devices: ' || COUNT(*) FROM devices;"

      - uses: actions/setup-go@v6
        with:
          go-version: ${{ env.GO_VERSION }}
          cache-dependency-path: |
            common/go.sum
            agent/go.sum
            server/go.sum
            tests/go.sum

      - name: Run E2E Docker tests
        working-directory: ./tests
        env:
          E2E_SERVER_URL: http://localhost:9090
          E2E_AGENT_URL: http://localhost:8080
          E2E_ADMIN_PASSWORD: e2e-test-password
        run: go test -tags=e2e -v -count=1 ./...

      - name: Collect container logs
        if: always()
        working-directory: ./tests
        run: |
          mkdir -p results
          docker compose -f docker-compose.e2e.yml logs server > results/server.log 2>&1 || true
          docker compose -f docker-compose.e2e.yml logs agent > results/agent.log 2>&1 || true

      - name: Stop E2E environment
        if: always()
        working-directory: ./tests
        run: docker compose -f docker-compose.e2e.yml down -v

      - uses: actions/upload-artifact@v7
        if: always()
        with:
          name: e2e-docker-results
          path: tests/results/
          if-no-files-found: ignore

  ci-passed:
    name: CI Passed
    runs-on: ubuntu-latest
    needs: [agent, server, javascript, e2e, e2e-docker]
    if: always()
    steps:
      - name: Check results
        run: |
          if [[ "${{ needs.agent.result }}" != "success" || "${{ needs.server.result }}" != "success" || "${{ needs.javascript.result }}" != "success" || "${{ needs.e2e.result }}" != "success" || "${{ needs.e2e-docker.result }}" != "success" ]]; then
            echo "One or more jobs failed"
            exit 1
          fi
          echo "All CI checks passed"