ci.yml

name: CI

on:
  push:
    branches: [master]
  pull_request:
    branches: [master]

permissions:
  contents: read

jobs:
  frontend:
    name: Frontend checks
    runs-on: ubuntu-latest

    steps:
      - name: Checkout code
        uses: actions/checkout@v4

      - name: Setup pnpm
        uses: pnpm/action-setup@v4

      - name: Setup Node.js
        uses: actions/setup-node@v4
        with:
          node-version: '20.19'
          cache: pnpm

      - name: Install frontend dependencies
        run: pnpm install --frozen-lockfile

      - name: Run frontend checks
        run: pnpm check

      - name: Validate OpenAPI contract
        run: pnpm api:lint

  test:
    name: PHP ${{ matrix.php }}
    runs-on: ubuntu-latest
    permissions:
      contents: read
      id-token: write

    strategy:
      fail-fast: false
      matrix:
        php: ['8.4']

    steps:
      - name: Checkout code
        uses: actions/checkout@v4

      - name: Setup PHP
        uses: shivammathur/setup-php@v2
        with:
          php-version: ${{ matrix.php }}
          extensions: mbstring, xml, curl, intl, json, mysqlnd, sockets
          coverage: pcov

      - name: Get Composer cache directory
        id: composer-cache
        run: echo "dir=$(composer config cache-files-dir)" >> "$GITHUB_OUTPUT"

      - name: Cache Composer dependencies
        uses: actions/cache@v4
        with:
          path: ${{ steps.composer-cache.outputs.dir }}
          key: ${{ runner.os }}-composer-${{ hashFiles('**/composer.lock') }}
          restore-keys: |
            ${{ runner.os }}-composer-

      - name: Install Composer dependencies
        run: composer install --prefer-dist --no-progress --no-interaction

      - name: Validate environment configuration
        env:
          DB_PASSWORD: db-${{ github.run_id }}-${{ github.run_attempt }}-validation-value
          DB_ROOT_PASSWORD: root-${{ github.run_id }}-${{ github.run_attempt }}-validation-value
          WEBSOCKET_TOKEN_SECRET: websocket-${{ github.sha }}-${{ github.run_id }}
        run: |
          cp .env.example .env
          sed -i "s|^DB_PASSWORD=.*|DB_PASSWORD=${DB_PASSWORD}|" .env
          sed -i "s|^DB_ROOT_PASSWORD=.*|DB_ROOT_PASSWORD=${DB_ROOT_PASSWORD}|" .env
          sed -i "s|^WEBSOCKET_TOKEN_SECRET=.*|WEBSOCKET_TOKEN_SECRET=${WEBSOCKET_TOKEN_SECRET}|" .env
          php spark env:check --no-header
          php spark env:diff --no-header

      - name: Check PHP coding style
        run: composer cs-check

      - name: Run PHPUnit tests with coverage
        if: github.event_name == 'pull_request'
        run: composer test:coverage

      - name: Upload PHP coverage to Codecov
        if: github.event_name == 'pull_request'
        uses: codecov/codecov-action@0fb7174895f61a3b6b78fc075e0cd60383518dac # v5.5.5
        with:
          fail_ci_if_error: true
          files: build/logs/clover.xml
          flags: php
          name: php-8.4
          use_oidc: true

      - name: Run PHPUnit tests
        if: github.event_name != 'pull_request'
        run: composer test

      - name: Run database integration tests
        if: github.event_name == 'pull_request'
        run: composer test:integration

      - name: Run Composer audit
        run: composer audit

  mysql-integration:
    name: MySQL 8 integration
    if: github.event_name == 'pull_request'
    runs-on: ubuntu-latest

    services:
      mysql:
        image: mysql:8.4
        env:
          MYSQL_DATABASE: codeigniter_chat_test
          MYSQL_ROOT_PASSWORD: root
        ports:
          - 3306:3306
        options: >-
          --health-cmd="mysqladmin ping --host=127.0.0.1 --user=root --password=root"
          --health-interval=10s
          --health-timeout=5s
          --health-retries=10

    env:
      database.tests.hostname: 127.0.0.1
      database.tests.username: root
      database.tests.password: root
      database.tests.database: codeigniter_chat_test
      database.tests.DBDriver: MySQLi
      database.tests.DBPrefix: db_
      database.tests.port: 3306

    steps:
      - name: Checkout code
        uses: actions/checkout@v4

      - name: Setup PHP
        uses: shivammathur/setup-php@v2
        with:
          php-version: '8.4'
          extensions: mbstring, xml, curl, intl, json, mysqli, sockets
          coverage: none

      - name: Install Composer dependencies
        run: composer install --prefer-dist --no-progress --no-interaction

      - name: Run database integration tests against MySQL
        run: composer test:integration:mysql