ci.yml

name: CI

on:
  push:
    branches: [ main, dev ]
  pull_request:
    branches: [ main, dev ]
  workflow_dispatch:

concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: ${{ github.event_name == 'pull_request' }}

defaults:
  run:
    shell: bash

env:
  FORCE_COLOR: "1"

jobs:
  changelog-check:
    name: CHANGELOG Check
    runs-on: ubuntu-latest
    if: github.ref == 'refs/heads/dev' || github.base_ref == 'dev'
    steps:
    - name: Checkout code
      uses: actions/checkout@v6
      with:
        fetch-depth: 0

    - name: Check CHANGELOG entry
      run: |
        if [ "${{ github.event_name }}" = "pull_request" ]; then
          BASE="origin/${{ github.base_ref }}"
          git fetch --no-tags --depth=1 origin "${{ github.base_ref }}:${BASE}" || true
          echo "PR detected - checking changelog entries against $BASE"
        elif [ "${{ github.event_name }}" = "push" ] && [ -n "${{ github.event.before }}" ] && [ "${{ github.event.before }}" != "0000000000000000000000000000000000000000" ]; then
          BASE="${{ github.event.before }}"
          git fetch --no-tags origin "$BASE" || true
          echo "Push detected - checking changelog entries against $BASE"
        else
          BASE="HEAD~1"
          echo "Manual run detected - checking changelog entries against $BASE"
        fi

        if ! python scripts/changelog_tools.py check --base "$BASE" --head HEAD; then
          {
            echo "### CHANGELOG gate"
            echo
            echo "User-facing changes need a curated \`CHANGELOG.md\` entry under \`## Unreleased\`."
            echo "This keeps nightly and stable release notes based on product wording instead of PR titles."
          } >> "$GITHUB_STEP_SUMMARY"
          exit 1
        fi

  lint:
    name: Lint
    runs-on: ubuntu-latest
    steps:
    - name: Checkout code
      uses: actions/checkout@v6

    - name: Ruff format check
      uses: astral-sh/ruff-action@v3
      with:
        args: format --check

    - name: Ruff lint
      uses: astral-sh/ruff-action@v3
      with:
        args: check

  tests:
    name: Tests (Ubuntu, Python ${{ matrix.python-version }})
    runs-on: ubuntu-latest
    needs: lint
    strategy:
      fail-fast: false
      matrix:
        python-version: ["3.11", "3.12"]

    steps:
    - name: Checkout code
      uses: actions/checkout@v6

    - name: Set up Python
      uses: actions/setup-python@v6
      with:
        python-version: ${{ matrix.python-version }}
        cache: pip

    - name: Install dependencies
      run: |
        python -m pip install --upgrade pip
        # Use prebuilt wx wheels only — never build from source.
        # extras.wxpython.org provides Linux wheels for supported Python versions.
        pip install \
          -f https://extras.wxpython.org/wxPython4/extras/linux/gtk3/ubuntu-24.04 \
          --only-binary wxPython \
          -e ".[dev]"

    - name: Run tests with coverage
      env:
        PYTHONPATH: src
      run: |
        mkdir -p reports
        pytest tests/ -n auto -v --tb=short -m "not integration" \
          --junitxml=reports/junit.xml \
          --cov=src/portkeydrop \
          --cov-report=xml:reports/coverage.xml \
          --cov-report=term-missing

    - name: Upload test report
      if: always()
      uses: actions/upload-artifact@v7
      with:
        name: junit-${{ matrix.python-version }}
        path: reports/junit.xml
        retention-days: 7

    - name: Upload coverage report
      if: always()
      uses: actions/upload-artifact@v7
      with:
        name: coverage-${{ matrix.python-version }}
        path: reports/coverage.xml
        retention-days: 7

  coverage-gate:
    name: Coverage Gate
    runs-on: ubuntu-latest
    needs: tests
    if: github.event_name == 'pull_request'
    steps:
    - name: Checkout code
      uses: actions/checkout@v6
      with:
        fetch-depth: 0

    - name: Set up Python
      uses: actions/setup-python@v6
      with:
        python-version: "3.11"
        cache: pip

    - name: Install diff-cover
      run: pip install diff-cover>=9.0.0

    - name: Download coverage report
      uses: actions/download-artifact@v7
      with:
        name: coverage-3.11
        path: reports

    - name: Check coverage on changed lines
      run: |
        diff-cover reports/coverage.xml \
          --compare-branch=origin/${{ github.base_ref }} \
          --fail-under=80 \
          --diff-range-notation='..' \
          --exclude \
            '*/portkeydrop/ui/*' \
            '*/portkeydrop/dialogs/*' \
            '*/portkeydrop/importers/winscp.py'
        echo "✅ New code meets coverage threshold!"