ci.yml

name: CI

on:
  push:
    branches: [ main, master, develop ]
  pull_request:
    branches: [ main, master ]
  workflow_call:

jobs:
  # ==================================================
  # Unit Tests (JUnit)
  # ==================================================
  unit-tests:
    name: Unit Tests (${{ matrix.os }}, Java ${{ matrix.java }})
    runs-on: ${{ matrix.os }}
    permissions:
      contents: read
      checks: write
      pull-requests: write
      issues: write
    strategy:
      fail-fast: false
      matrix:
        os: [ubuntu-latest, macos-latest, windows-latest]
        java: [21]
    
    steps:
    - name: Checkout code
      uses: actions/checkout@v4

    - name: Set up JDK ${{ matrix.java }}
      uses: actions/setup-java@v4
      with:
        java-version: ${{ matrix.java }}
        distribution: 'temurin'

    - name: Cache Maven dependencies
      uses: actions/cache@v4
      with:
        path: ~/.m2
        key: ${{ runner.os }}-m2-${{ matrix.java }}-${{ hashFiles('**/pom.xml') }}
        restore-keys: |
          ${{ runner.os }}-m2-${{ matrix.java }}-
          ${{ runner.os }}-m2-

    - name: Run Unit Tests with Coverage
      run: mvn clean test

    - name: Upload JUnit Test Results
      if: always()
      uses: actions/upload-artifact@v4
      with:
        name: unit-test-results-${{ matrix.os }}-java${{ matrix.java }}
        path: target/surefire-reports/*.xml
        retention-days: 7
        if-no-files-found: warn

    - name: Upload Coverage Report
      if: matrix.os == 'ubuntu-latest' && matrix.java == 21
      uses: actions/upload-artifact@v4
      with:
        name: coverage-report
        path: target/site/jacoco/
        retention-days: 7
        if-no-files-found: warn

    - name: Publish Unit Test Results (Linux only)
      if: always() && runner.os == 'Linux'
      uses: EnricoMi/publish-unit-test-result-action@v2
      with:
        files: target/surefire-reports/*.xml
        check_name: Unit Tests (${{ matrix.os }}, Java ${{ matrix.java }})

  # ==================================================
  # Integration Tests (BATS)
  # ==================================================
  integration-tests:
    name: Integration Tests (${{ matrix.os }}, Java ${{ matrix.java }})
    runs-on: ${{ matrix.os }}
    permissions:
      contents: read
      checks: write
      pull-requests: write
      issues: write
    strategy:
      fail-fast: false
      matrix:
        os: [ubuntu-latest, macos-latest]
        java: [21]
    
    steps:
    - name: Checkout code
      uses: actions/checkout@v4

    - name: Set up JDK ${{ matrix.java }}
      uses: actions/setup-java@v4
      with:
        java-version: ${{ matrix.java }}
        distribution: 'temurin'

    - name: Cache Maven dependencies
      uses: actions/cache@v4
      with:
        path: ~/.m2
        key: ${{ runner.os }}-m2-${{ matrix.java }}-${{ hashFiles('**/pom.xml') }}
        restore-keys: |
          ${{ runner.os }}-m2-${{ matrix.java }}-
          ${{ runner.os }}-m2-
    - name: Install bats (Ubuntu)
      if: runner.os == 'Linux'
      run: |
        sudo apt-get update
        sudo apt-get install -y bats

    - name: Install bats-core (macOS)
      if: runner.os == 'macOS'
      run: brew install bats-core

    - name: Build JAR and Binary
      run: |
        mvn clean package -DskipTests -Pbinary
        chmod +x target/lucli

    - name: Verify binary works
      run: ./target/lucli --version

    - name: Run Integration Tests (BATS)
      run: |
        chmod +x tests/*.sh tests/lib/*.sh 2>/dev/null || true
        ./tests/test-bats.sh
      env:
        CI: true
        BATS_JUNIT_XML_OUTPUT: integration-test-results.xml

    - name: Upload Integration Test Results
      if: always()
      uses: actions/upload-artifact@v4
      with:
        name: integration-test-results-${{ matrix.os }}-java${{ matrix.java }}
        path: integration-test-results.xml
        retention-days: 7
        if-no-files-found: warn

    - name: Publish Integration Test Results (Linux only)
      if: always() && runner.os == 'Linux'
      uses: EnricoMi/publish-unit-test-result-action@v2
      with:
        files: integration-test-results.xml
        check_name: Integration Tests (${{ matrix.os }}, Java ${{ matrix.java }})

  # ==================================================
  # Build Verification
  # ==================================================
  build:
    name: Build (${{ matrix.os }}, Java ${{ matrix.java }})
    runs-on: ${{ matrix.os }}
    strategy:
      fail-fast: false
      matrix:
        os: [ubuntu-latest, macos-latest, windows-latest]
        java: [21]
    
    steps:
    - name: Checkout code
      uses: actions/checkout@v4

    - name: Set up JDK ${{ matrix.java }}
      uses: actions/setup-java@v4
      with:
        java-version: ${{ matrix.java }}
        distribution: 'temurin'

    - name: Cache Maven dependencies
      uses: actions/cache@v4
      with:
        path: ~/.m2
        key: ${{ runner.os }}-m2-${{ matrix.java }}-${{ hashFiles('**/pom.xml') }}
        restore-keys: |
          ${{ runner.os }}-m2-${{ matrix.java }}-
          ${{ runner.os }}-m2-

    - name: Build JAR
      run: mvn clean package -DskipTests

    - name: Test JAR execution
      run: java -jar target/lucli.jar --version

    - name: Build binary (Unix)
      if: runner.os != 'Windows'
      run: |
        mvn clean package -DskipTests -Pbinary
        chmod +x target/lucli
        ./target/lucli --version

    - name: Build Windows executable (Launch4j)
      if: runner.os == 'Windows'
      run: mvn package -DskipTests -Pwindows-exe

    - name: Verify Windows executable works
      if: runner.os == 'Windows'
      run: .\target\lucli.exe --version

  # ==================================================
  # Published APT Repository Smoke Test
  # ==================================================
  apt-install-smoke:
    name: APT Install Smoke (Ubuntu)
    runs-on: ubuntu-latest
    if: github.event_name == 'push' && (github.ref == 'refs/heads/main' || github.ref == 'refs/heads/master')
    steps:
    - name: Install apt prerequisites
      run: |
        sudo apt-get update
        sudo apt-get install -y curl ca-certificates gnupg

    - name: Configure LuCLI apt source
      run: |
        curl -fsSL https://lucli.dev/apt/gpg.key | sudo tee /usr/share/keyrings/lucli-archive-keyring.asc >/dev/null
        echo "deb [arch=amd64 signed-by=/usr/share/keyrings/lucli-archive-keyring.asc] https://lucli.dev/apt stable main" | sudo tee /etc/apt/sources.list.d/lucli.list >/dev/null
        sudo apt-get update

    - name: Install and verify lucli from apt
      run: |
        sudo apt-get install -y lucli
        lucli --version