ci.yaml

# =============================================================================
# Forge CI Pipeline
# =============================================================================
# Main continuous integration pipeline for the Forge code migration engine.
# Runs on every push and pull request to ensure code quality and correctness.
#
# Features:
# - Multi-platform testing (Linux, macOS, Windows)
# - Rust toolchain setup with caching
# - Code formatting checks (rustfmt)
# - Linting (clippy)
# - Comprehensive test suite
# - Release and debug builds
# - Code coverage reporting
# - Artifact uploads
# - Dependency caching for fast builds
# =============================================================================

name: CI

on:
  push:
    branches:
      - main
      - develop
      - 'feature/**'
      - 'release/**'
      - 'hotfix/**'
    paths-ignore:
      - '**.md'
      - 'docs/**'
      - '.github/ISSUE_TEMPLATE/**'
      - '.github/PULL_REQUEST_TEMPLATE/**'
      - 'LICENSE*'
  pull_request:
    branches:
      - main
      - develop
    paths-ignore:
      - '**.md'
      - 'docs/**'
      - '.github/ISSUE_TEMPLATE/**'
      - '.github/PULL_REQUEST_TEMPLATE/**'
      - 'LICENSE*'
  workflow_dispatch:
    inputs:
      run_extended_tests:
        description: 'Run extended test suite'
        required: false
        default: 'false'
        type: boolean
      skip_cache:
        description: 'Skip dependency cache'
        required: false
        default: 'false'
        type: boolean

# Cancel in-progress runs for the same branch
concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

env:
  CARGO_TERM_COLOR: always
  CARGO_INCREMENTAL: 0
  CARGO_NET_RETRY: 10
  RUST_BACKTRACE: short
  RUSTFLAGS: -D warnings -W rust-2021-compatibility
  RUSTDOCFLAGS: -D warnings
  FORGE_CI: true
  # Minimum supported Rust version
  MSRV: "1.75.0"

jobs:
  # ===========================================================================
  # Pre-flight checks - Fast checks that should pass before running full CI
  # ===========================================================================
  preflight:
    name: Preflight Checks
    runs-on: ubuntu-latest
    outputs:
      should_skip: ${{ steps.skip_check.outputs.should_skip }}
      paths_result: ${{ steps.skip_check.outputs.paths_result }}
    steps:
      - name: Check for skip conditions
        id: skip_check
        uses: fkirc/skip-duplicate-actions@v5
        with:
          concurrent_skipping: 'same_content_newer'
          skip_after_successful_duplicate: 'true'
          paths_ignore: '["**/README.md", "**/docs/**", "**/*.txt"]'
          do_not_skip: '["workflow_dispatch", "schedule"]'

  # ===========================================================================
  # Format Check - Verify code formatting with rustfmt
  # ===========================================================================
  format:
    name: Format Check
    runs-on: ubuntu-latest
    needs: preflight
    if: needs.preflight.outputs.should_skip != 'true'
    steps:
      - name: Checkout repository
        uses: actions/checkout@v4
        with:
          fetch-depth: 1

      - name: Install Rust toolchain
        uses: dtolnay/rust-action@stable
        with:
          components: rustfmt

      - name: Check formatting
        run: |
          echo "::group::Checking code formatting"
          cargo fmt --all -- --check
          echo "::endgroup::"

      - name: Check TOML formatting
        uses: taiki-e/install-action@v2
        with:
          tool: taplo-cli

      - name: Verify Cargo.toml formatting
        run: taplo fmt --check

  # ===========================================================================
  # Lint - Run clippy for comprehensive linting
  # ===========================================================================
  lint:
    name: Lint (${{ matrix.os }})
    runs-on: ${{ matrix.os }}
    needs: preflight
    if: needs.preflight.outputs.should_skip != 'true'
    strategy:
      fail-fast: false
      matrix:
        os: [ubuntu-latest]
        include:
          - os: ubuntu-latest
            target: x86_64-unknown-linux-gnu
    steps:
      - name: Checkout repository
        uses: actions/checkout@v4
        with:
          fetch-depth: 1

      - name: Install Rust toolchain
        uses: dtolnay/rust-action@stable
        with:
          components: clippy
          targets: ${{ matrix.target }}

      - name: Cache cargo registry
        uses: actions/cache@v4
        if: ${{ github.event.inputs.skip_cache != 'true' }}
        with:
          path: |
            ~/.cargo/registry
            ~/.cargo/git
            target
          key: ${{ runner.os }}-cargo-lint-${{ hashFiles('**/Cargo.lock') }}
          restore-keys: |
            ${{ runner.os }}-cargo-lint-
            ${{ runner.os }}-cargo-

      - name: Install system dependencies (Linux)
        if: runner.os == 'Linux'
        run: |
          sudo apt-get update
          sudo apt-get install -y libssl-dev pkg-config

      - name: Run clippy (all features)
        run: |
          echo "::group::Running clippy with all features"
          cargo clippy --workspace --all-features --all-targets -- \
            -D warnings \
            -D clippy::all \
            -D clippy::pedantic \
            -A clippy::module_name_repetitions \
            -A clippy::too_many_lines \
            -A clippy::must_use_candidate \
            -A clippy::missing_errors_doc \
            -A clippy::missing_panics_doc
          echo "::endgroup::"

      - name: Run clippy (no default features)
        run: |
          echo "::group::Running clippy without default features"
          cargo clippy --workspace --no-default-features -- -D warnings
          echo "::endgroup::"

  # ===========================================================================
  # MSRV Check - Verify minimum supported Rust version
  # ===========================================================================
  msrv:
    name: MSRV Check (Rust ${{ matrix.rust }})
    runs-on: ubuntu-latest
    needs: preflight
    if: needs.preflight.outputs.should_skip != 'true'
    strategy:
      matrix:
        rust: ["1.75.0"]
    steps:
      - name: Checkout repository
        uses: actions/checkout@v4

      - name: Install Rust ${{ matrix.rust }}
        uses: dtolnay/rust-action@master
        with:
          toolchain: ${{ matrix.rust }}

      - name: Cache cargo registry
        uses: actions/cache@v4
        with:
          path: |
            ~/.cargo/registry
            ~/.cargo/git
            target
          key: ${{ runner.os }}-cargo-msrv-${{ matrix.rust }}-${{ hashFiles('**/Cargo.lock') }}
          restore-keys: |
            ${{ runner.os }}-cargo-msrv-${{ matrix.rust }}-

      - name: Check MSRV compatibility
        run: cargo check --workspace --all-features

  # ===========================================================================
  # Test - Run comprehensive test suite
  # ===========================================================================
  test:
    name: Test (${{ matrix.os }}, ${{ matrix.rust }})
    runs-on: ${{ matrix.os }}
    needs: [format, lint]
    strategy:
      fail-fast: false
      matrix:
        os: [ubuntu-latest, macos-latest, windows-latest]
        rust: [stable, beta]
        exclude:
          # Only test stable on Windows and macOS to save CI time
          - os: windows-latest
            rust: beta
          - os: macos-latest
            rust: beta
    steps:
      - name: Checkout repository
        uses: actions/checkout@v4
        with:
          fetch-depth: 1

      - name: Install Rust ${{ matrix.rust }}
        uses: dtolnay/rust-action@master
        with:
          toolchain: ${{ matrix.rust }}

      - name: Cache cargo registry
        uses: actions/cache@v4
        if: ${{ github.event.inputs.skip_cache != 'true' }}
        with:
          path: |
            ~/.cargo/registry
            ~/.cargo/git
            target
          key: ${{ runner.os }}-${{ matrix.rust }}-cargo-test-${{ hashFiles('**/Cargo.lock') }}
          restore-keys: |
            ${{ runner.os }}-${{ matrix.rust }}-cargo-test-
            ${{ runner.os }}-${{ matrix.rust }}-cargo-

      - name: Install system dependencies (Linux)
        if: runner.os == 'Linux'
        run: |
          sudo apt-get update
          sudo apt-get install -y libssl-dev pkg-config

      - name: Install system dependencies (macOS)
        if: runner.os == 'macOS'
        run: |
          brew install openssl@3

      - name: Run tests (all features)
        run: |
          echo "::group::Running tests with all features"
          cargo test --workspace --all-features --no-fail-fast
          echo "::endgroup::"
        env:
          RUST_LOG: debug

      - name: Run tests (no default features)
        run: |
          echo "::group::Running tests without default features"
          cargo test --workspace --no-default-features --no-fail-fast
          echo "::endgroup::"

      - name: Run doc tests
        run: |
          echo "::group::Running documentation tests"
          cargo test --workspace --doc
          echo "::endgroup::"

      - name: Run extended tests
        if: ${{ github.event.inputs.run_extended_tests == 'true' || github.ref == 'refs/heads/main' }}
        run: |
          echo "::group::Running extended tests"
          cargo test --workspace --all-features -- --ignored
          echo "::endgroup::"
        env:
          FORGE_EXTENDED_TESTS: true

  # ===========================================================================
  # Coverage - Generate code coverage reports
  # ===========================================================================
  coverage:
    name: Code Coverage
    runs-on: ubuntu-latest
    needs: test
    steps:
      - name: Checkout repository
        uses: actions/checkout@v4

      - name: Install Rust toolchain
        uses: dtolnay/rust-action@stable
        with:
          components: llvm-tools-preview

      - name: Install cargo-llvm-cov
        uses: taiki-e/install-action@v2
        with:
          tool: cargo-llvm-cov

      - name: Cache cargo registry
        uses: actions/cache@v4
        with:
          path: |
            ~/.cargo/registry
            ~/.cargo/git
            target
          key: ${{ runner.os }}-cargo-coverage-${{ hashFiles('**/Cargo.lock') }}
          restore-keys: |
            ${{ runner.os }}-cargo-coverage-

      - name: Install system dependencies
        run: |
          sudo apt-get update
          sudo apt-get install -y libssl-dev pkg-config

      - name: Generate coverage report
        run: |
          echo "::group::Generating code coverage"
          cargo llvm-cov --workspace --all-features --lcov --output-path lcov.info
          echo "::endgroup::"

      - name: Upload coverage to Codecov
        uses: codecov/codecov-action@v4
        with:
          files: lcov.info
          fail_ci_if_error: false
          verbose: true
        env:
          CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}

      - name: Upload coverage artifact
        uses: actions/upload-artifact@v4
        with:
          name: coverage-report
          path: lcov.info
          retention-days: 30

  # ===========================================================================
  # Build - Build release binaries
  # ===========================================================================
  build:
    name: Build (${{ matrix.os }}, ${{ matrix.target }})
    runs-on: ${{ matrix.os }}
    needs: [format, lint]
    strategy:
      fail-fast: false
      matrix:
        include:
          - os: ubuntu-latest
            target: x86_64-unknown-linux-gnu
            artifact_name: forge-linux-x86_64
          - os: ubuntu-latest
            target: x86_64-unknown-linux-musl
            artifact_name: forge-linux-x86_64-musl
          - os: ubuntu-latest
            target: aarch64-unknown-linux-gnu
            artifact_name: forge-linux-aarch64
          - os: macos-latest
            target: x86_64-apple-darwin
            artifact_name: forge-macos-x86_64
          - os: macos-latest
            target: aarch64-apple-darwin
            artifact_name: forge-macos-aarch64
          - os: windows-latest
            target: x86_64-pc-windows-msvc
            artifact_name: forge-windows-x86_64
    steps:
      - name: Checkout repository
        uses: actions/checkout@v4
        with:
          fetch-depth: 1

      - name: Install Rust toolchain
        uses: dtolnay/rust-action@stable
        with:
          targets: ${{ matrix.target }}

      - name: Cache cargo registry
        uses: actions/cache@v4
        if: ${{ github.event.inputs.skip_cache != 'true' }}
        with:
          path: |
            ~/.cargo/registry
            ~/.cargo/git
            target
          key: ${{ runner.os }}-${{ matrix.target }}-cargo-build-${{ hashFiles('**/Cargo.lock') }}
          restore-keys: |
            ${{ runner.os }}-${{ matrix.target }}-cargo-build-
            ${{ runner.os }}-${{ matrix.target }}-cargo-

      - name: Install cross-compilation tools (Linux aarch64)
        if: matrix.target == 'aarch64-unknown-linux-gnu'
        run: |
          sudo apt-get update
          sudo apt-get install -y gcc-aarch64-linux-gnu

      - name: Install musl tools (Linux musl)
        if: matrix.target == 'x86_64-unknown-linux-musl'
        run: |
          sudo apt-get update
          sudo apt-get install -y musl-tools

      - name: Install system dependencies (Linux)
        if: runner.os == 'Linux'
        run: |
          sudo apt-get update
          sudo apt-get install -y libssl-dev pkg-config

      - name: Build release binary
        run: |
          echo "::group::Building release binary for ${{ matrix.target }}"
          cargo build --release --target ${{ matrix.target }} --workspace
          echo "::endgroup::"
        env:
          CARGO_TARGET_AARCH64_UNKNOWN_LINUX_GNU_LINKER: aarch64-linux-gnu-gcc

      - name: Strip binary (Linux/macOS)
        if: runner.os != 'Windows'
        run: |
          strip target/${{ matrix.target }}/release/forge || true
          strip target/${{ matrix.target }}/release/forge-cli || true

      - name: Create artifact directory
        shell: bash
        run: |
          mkdir -p artifacts
          if [ "${{ runner.os }}" == "Windows" ]; then
            cp target/${{ matrix.target }}/release/forge.exe artifacts/ || true
            cp target/${{ matrix.target }}/release/forge-cli.exe artifacts/ || true
          else
            cp target/${{ matrix.target }}/release/forge artifacts/ || true
            cp target/${{ matrix.target }}/release/forge-cli artifacts/ || true
          fi
          cp README.md artifacts/ || true
          cp LICENSE* artifacts/ || true

      - name: Upload build artifact
        uses: actions/upload-artifact@v4
        with:
          name: ${{ matrix.artifact_name }}
          path: artifacts/
          retention-days: 7

  # ===========================================================================
  # Documentation - Build and verify documentation
  # ===========================================================================
  docs:
    name: Documentation
    runs-on: ubuntu-latest
    needs: preflight
    if: needs.preflight.outputs.should_skip != 'true'
    steps:
      - name: Checkout repository
        uses: actions/checkout@v4

      - name: Install Rust toolchain
        uses: dtolnay/rust-action@stable

      - name: Cache cargo registry
        uses: actions/cache@v4
        with:
          path: |
            ~/.cargo/registry
            ~/.cargo/git
            target
          key: ${{ runner.os }}-cargo-docs-${{ hashFiles('**/Cargo.lock') }}
          restore-keys: |
            ${{ runner.os }}-cargo-docs-

      - name: Build documentation
        run: |
          echo "::group::Building documentation"
          cargo doc --workspace --all-features --no-deps --document-private-items
          echo "::endgroup::"
        env:
          RUSTDOCFLAGS: -D warnings --cfg docsrs

      - name: Check for broken intra-doc links
        run: |
          echo "::group::Checking documentation links"
          cargo doc --workspace --all-features --no-deps 2>&1 | tee doc-output.txt
          if grep -q "warning: unresolved link" doc-output.txt; then
            echo "::error::Found broken documentation links"
            grep "warning: unresolved link" doc-output.txt
            exit 1
          fi
          echo "::endgroup::"

      - name: Upload documentation artifact
        uses: actions/upload-artifact@v4
        with:
          name: documentation
          path: target/doc
          retention-days: 7

  # ===========================================================================
  # Benchmarks - Run performance benchmarks (on main only)
  # ===========================================================================
  benchmarks:
    name: Benchmarks
    runs-on: ubuntu-latest
    needs: test
    if: github.ref == 'refs/heads/main' || github.event_name == 'workflow_dispatch'
    steps:
      - name: Checkout repository
        uses: actions/checkout@v4

      - name: Install Rust toolchain
        uses: dtolnay/rust-action@stable

      - name: Cache cargo registry
        uses: actions/cache@v4
        with:
          path: |
            ~/.cargo/registry
            ~/.cargo/git
            target
          key: ${{ runner.os }}-cargo-bench-${{ hashFiles('**/Cargo.lock') }}
          restore-keys: |
            ${{ runner.os }}-cargo-bench-

      - name: Install critcmp
        run: cargo install critcmp

      - name: Run benchmarks
        run: |
          echo "::group::Running benchmarks"
          cargo bench --workspace -- --save-baseline current
          echo "::endgroup::"

      - name: Upload benchmark results
        uses: actions/upload-artifact@v4
        with:
          name: benchmark-results
          path: target/criterion
          retention-days: 30

  # ===========================================================================
  # Final Status - Aggregate all job results
  # ===========================================================================
  ci-success:
    name: CI Success
    runs-on: ubuntu-latest
    needs: [format, lint, test, build, docs, coverage]
    if: always()
    steps:
      - name: Check all jobs passed
        run: |
          if [ "${{ needs.format.result }}" != "success" ] || \
             [ "${{ needs.lint.result }}" != "success" ] || \
             [ "${{ needs.test.result }}" != "success" ] || \
             [ "${{ needs.build.result }}" != "success" ] || \
             [ "${{ needs.docs.result }}" != "success" ]; then
            echo "::error::One or more CI jobs failed"
            echo "Format: ${{ needs.format.result }}"
            echo "Lint: ${{ needs.lint.result }}"
            echo "Test: ${{ needs.test.result }}"
            echo "Build: ${{ needs.build.result }}"
            echo "Docs: ${{ needs.docs.result }}"
            exit 1
          fi
          echo "::notice::All CI checks passed successfully!"

      - name: Post success comment on PR
        if: github.event_name == 'pull_request'
        uses: actions/github-script@v7
        with:
          script: |
            const { data: comments } = await github.rest.issues.listComments({
              owner: context.repo.owner,
              repo: context.repo.repo,
              issue_number: context.issue.number,
            });
            
            const botComment = comments.find(comment => 
              comment.user.type === 'Bot' && 
              comment.body.includes('CI Status')
            );
            
            const body = `## ✅ CI Status
            
            All checks passed successfully!
            
            | Check | Status |
            |-------|--------|
            | Format | ✅ |
            | Lint | ✅ |
            | Tests | ✅ |
            | Build | ✅ |
            | Docs | ✅ |
            | Coverage | ✅ |
            
            _Updated: ${new Date().toISOString()}_`;
            
            if (botComment) {
              await github.rest.issues.updateComment({
                owner: context.repo.owner,
                repo: context.repo.repo,
                comment_id: botComment.id,
                body: body
              });
            } else {
              await github.rest.issues.createComment({
                owner: context.repo.owner,
                repo: context.repo.repo,
                issue_number: context.issue.number,
                body: body
              });
            }