ci.yml

# =============================================================================
# VDV463 Validator - GitHub Actions CI Workflow
# =============================================================================

name: CI

on:
  push:
    branches: [ main, develop ]
    paths:
      - 'src/**'
      - 'tests/**'
      - 'schemas/**'
      - 'rules/**'
      - 'requirements*.txt'
      - 'pyproject.toml'
      - '.github/workflows/ci.yml'
  pull_request:
    branches: [ main ]

env:
  FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true

jobs:
  # ---------------------------------------------------------------------------
  # Lint Job
  # ---------------------------------------------------------------------------
  lint:
    name: Lint & Type Check
    runs-on: ubuntu-latest
    permissions:
      contents: write
    steps:
      # Checkout mit persist-credentials für Push
      - uses: actions/checkout@v5
        with:
          token: ${{ secrets.GITHUB_TOKEN }}
          fetch-depth: 0
          persist-credentials: true

      # Python Setup
      - name: Set up Python
        uses: actions/setup-python@v6
        with:
          python-version: '3.11'
          cache: 'pip'

      # Dependencies installieren
      - name: Install dependencies
        run: |
          python -m pip install --upgrade pip
          pip install ruff mypy bandit

      - name: Run Ruff linter
        run: ruff check src/ tests/ --fix
        continue-on-error: false

      - name: Run Bandit security scan
        run: bandit -r src/ -ll
        continue-on-error: false

      - name: Run Ruff formatter
        run: ruff format src/ tests/

      - name: Commit Ruff changes
        if: github.event_name == 'push'
        run: |
          git config --local user.email "github-actions[bot]@users.noreply.github.com"
          git config --local user.name "github-actions[bot]"
          git add -A
          git diff --staged --quiet || git commit -m "style: apply ruff formatting and fixes [skip ci]"
          git push || echo "No changes to push"
          pip install ruff mypy types-PyYAML

      # Ruff Lint + Auto-Fix
      - name: Lint + auto-fix with Ruff
        run: ruff check src/ tests/ --fix

      # Mypy Typprüfung
      - name: Type check with mypy
        run: mypy src/ --install-types --non-interactive --ignore-missing-imports
        continue-on-error: true

      # Commit & Push Auto-Fixes auf neuen Branch
      - name: Commit fixes
        uses: stefanzweifel/git-auto-commit-action@v5
        with:
          commit_message: "auto-fix: ruff"
          file_pattern: "."       # alle geänderten Dateien
          create_branch: true     # neuer Branch wird automatisch erstellt


  # ---------------------------------------------------------------------------
  # Test Job
  # ---------------------------------------------------------------------------
  test:
    name: Test (Python ${{ matrix.python-version }})
    runs-on: ubuntu-latest
    permissions:
      contents: read
      checks: write
      pull-requests: write
    strategy:
      fail-fast: false
      matrix:
        python-version: [ '3.10', '3.11', '3.12' ]

    steps:
      - uses: actions/checkout@v5

      - name: Set up Python ${{ matrix.python-version }}
        uses: actions/setup-python@v6
        with:
          python-version: ${{ matrix.python-version }}
          cache: 'pip'

      - name: Install system dependencies for Qt
        run: |
          sudo apt-get update
          sudo apt-get install -y libxkbcommon-x11-0 libxcb-icccm4 libxcb-image0 libxcb-keysyms1 libxcb-randr0 libxcb-render-util0 libxcb-xinerama0 libxcb-xfixes0 libegl1

      - name: Install dependencies
        run: |
          python -m pip install --upgrade pip
          pip install -r requirements-dev.txt

      - name: Pre-download schemas for tests
        run: |
          mkdir -p schemas/v1.0 schemas/v1.1 schemas/v2.0
          # Run validation for each version to force downloads
          # We use --quiet to avoid cluttering logs
          python src/vdv463_validator.py tests/fixtures/v1.0/valid/charging_info_minimal.json --schema-version 1.0 --quiet || true
          python src/vdv463_validator.py tests/fixtures/v1.1/valid/valid_charging_info.json --schema-version 1.1 --quiet || true
          # v2.0 doesn't have a fixture yet, but the directory is there



      - name: Run tests
        env:
          QT_QPA_PLATFORM: offscreen
        run: pytest tests/ -v --cov=src --cov-report=xml --junitxml=pytest-results.xml

      - name: Upload test results
        uses: actions/upload-artifact@v5
        if: always()
        with:
          name: test-results-${{ matrix.python-version }}
          path: pytest-results.xml
          retention-days: 3

      - name: Upload coverage to Codecov
        uses: codecov/codecov-action@v4
        if: matrix.python-version == '3.11'
        with:
          files: coverage.xml
          flags: unittests
          name: codecov-umbrella

      - name: Publish Test Results
        uses: dorny/test-reporter@v1
        if: always() && matrix.python-version == '3.11'
        with:
          name: Pytest Results
          path: pytest-results.xml
          reporter: java-junit

  # ---------------------------------------------------------------------------
  # Validation Job
  # ---------------------------------------------------------------------------
  validate:
    name: Validate Fixtures
    runs-on: ubuntu-latest
    permissions:
      contents: read
      checks: write
      pull-requests: write
    needs: test
    strategy:
      matrix:
        fail-level: [ ERROR, WARNING ]
      fail-fast: false

    steps:
      - uses: actions/checkout@v5

      - name: Set up Python
        uses: actions/setup-python@v6
        with:
          python-version: '3.11'
          cache: 'pip'

      - name: Install dependencies
        run: pip install -r requirements.txt

      - name: Pre-download schemas
        run: |
          mkdir -p schemas/v1.0 schemas/v1.1 schemas/v2.0
          python scripts/update_schemas.py

      - name: Validate fixtures (fail-level ${{ matrix.fail-level }})
        run: |
          mkdir -p reports
          # Validate each version separately to ensure correct schema selection
          for version in 1.0 1.1; do
            if [ -d "tests/fixtures/v$version/valid" ]; then
              echo "Validating v$version fixtures..."
              python src/vdv463_validator.py tests/fixtures/v$version/valid/*.json \
                --quiet \
                --schema-version $version \
                --junit-xml reports/validation-$version-${{ matrix.fail-level }}.xml \
                --fail-level ${{ matrix.fail-level }}
            else
              # Still create an empty report for versions without fixtures to satisfy the reporter
              echo "No fixtures for v$version, creating empty report..."
              python src/vdv463_validator.py --quiet --schema-version $version \
                --junit-xml reports/validation-$version-${{ matrix.fail-level }}.xml \
                --fail-level ${{ matrix.fail-level }}
            fi
          done
          # Combine reports or ensure test-reporter finds them
        continue-on-error: ${{ matrix.fail-level == 'WARNING' }}

      - name: Publish Validation Results
        uses: dorny/test-reporter@v1
        if: always()
        with:
          name: VDV463 Validation (${{ matrix.fail-level }})
          path: reports/validation-*-${{ matrix.fail-level }}.xml
          reporter: java-junit

  # ---------------------------------------------------------------------------
  # Build Job
  # ---------------------------------------------------------------------------
  build:
    name: Build Package
    runs-on: ubuntu-latest
    needs: [ lint, test ]

    steps:
      - uses: actions/checkout@v5

      - name: Set up Python
        uses: actions/setup-python@v6
        with:
          python-version: '3.11'
          cache: 'pip'

      - name: Install build tools
        run: pip install build

      - name: Build package
        run: python -m build