ci.yml

name: Flydb CI

on:
  push:
    branches: [main, master]
  pull_request:

permissions:
  contents: read

concurrency:
  group: flydb-${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

jobs:
  unit-and-release:
    name: Unit, coverage, bytecode and release rehearsal
    runs-on: ubuntu-latest
    timeout-minutes: 25
    steps:
      - name: Checkout
        uses: actions/checkout@v4
      - name: Set up JDK 17
        uses: actions/setup-java@v4
        with:
          distribution: temurin
          java-version: '17'
          cache: maven
      - name: Set up Node for bundled GUI
        uses: actions/setup-node@v4
        with:
          node-version: '22'
          cache: npm
          cache-dependency-path: flydb-web/frontend/package-lock.json
      - name: Verify reactor
        run: ./mvnw -B verify
      - name: Assert Java 8 bytecode boundary
        run: >-
          ./scripts/check-bytecode.sh 52
          flydb-core/target/classes
          flydb-cli/target/classes
          flydb-runtime/target/classes
          flydb-web/target/classes
          flydb-spring-boot-2-starter/target/classes
          examples/boot2-demo/target/classes
      - name: Assert Java 17 bytecode boundary
        run: >-
          ./scripts/check-bytecode.sh 61
          flydb-spring-boot-3-starter/target/classes
          examples/boot3-demo/target/classes
      - name: Rehearse local deployment
        run: >-
          ./mvnw -B -DskipTests deploy
          -DaltDeploymentRepository=local::file:${{ runner.temp }}/flydb-staging
      - name: Check release artifacts
        run: ./scripts/check-release-artifacts.sh "${{ runner.temp }}/flydb-staging" flydb-cli/target
      - name: Upload CLI distribution
        uses: actions/upload-artifact@v4
        with:
          name: flydb-cli-${{ github.sha }}
          path: flydb-cli/target/flydb-cli-*.zip
          if-no-files-found: error

  mcp-adapter:
    name: MCP adapter (Node)
    runs-on: ubuntu-latest
    timeout-minutes: 20
    steps:
      - name: Checkout
        uses: actions/checkout@v4
      - name: Set up JDK 17
        uses: actions/setup-java@v4
        with:
          distribution: temurin
          java-version: '17'
          cache: maven
      - name: Set up Node 20
        uses: actions/setup-node@v4
        with:
          node-version: '20'
          cache: npm
          cache-dependency-path: flydb-skills/mcp/package-lock.json
      - name: Install adapter dependencies
        run: npm ci
        working-directory: flydb-skills/mcp
      - name: Typecheck and unit tests
        run: npm run typecheck && npm test
        working-directory: flydb-skills/mcp
      - name: Build adapter bundle
        run: npm run build
        working-directory: flydb-skills/mcp
      - name: Set up Node for bundled GUI
        uses: actions/setup-node@v4
        with:
          node-version: '22'
          cache: npm
          cache-dependency-path: flydb-web/frontend/package-lock.json
      - name: Build CLI distribution
        run: ./mvnw -B -pl flydb-cli -am package -DskipTests
      - name: Cross-runtime e2e (real CLI + official MCP client)
        run: |
          archives=("$GITHUB_WORKSPACE"/flydb-cli/target/flydb-cli-*.zip)
          if [ "${#archives[@]}" -ne 1 ] || [ ! -f "${archives[0]}" ]; then
            echo "CLI 发行包数量必须为 1，实际为 ${#archives[@]}" >&2
            exit 1
          fi
          archive="${archives[0]}"
          unzip -q "$archive" -d "$RUNNER_TEMP/flydb-dist"
          bin_dir=$(echo "$RUNNER_TEMP"/flydb-dist/*/bin)
          FLYDB_E2E_CLI="$bin_dir/flydb" npm run test:e2e
        working-directory: flydb-skills/mcp

  mcp-adapter-windows:
    name: MCP adapter (Windows CLI distribution)
    runs-on: windows-latest
    timeout-minutes: 20
    steps:
      - name: Checkout
        uses: actions/checkout@v4
      - name: Set up JDK 17
        uses: actions/setup-java@v4
        with:
          distribution: temurin
          java-version: '17'
          cache: maven
      - name: Set up Node 20
        uses: actions/setup-node@v4
        with:
          node-version: '20'
          cache: npm
          cache-dependency-path: flydb-skills/mcp/package-lock.json
      - name: Install and verify adapter
        shell: pwsh
        run: |
          npm ci
          npm run typecheck
          npm test
          npm run build
        working-directory: flydb-skills/mcp
      - name: Set up Node for bundled GUI
        uses: actions/setup-node@v4
        with:
          node-version: '22'
          cache: npm
          cache-dependency-path: flydb-web/frontend/package-lock.json
      - name: Build CLI distribution
        shell: pwsh
        run: .\mvnw.cmd -B -pl flydb-cli -am package -DskipTests
      - name: Cross-runtime e2e through flydb.bat
        shell: pwsh
        run: |
          $archive = (Get-ChildItem "flydb-cli/target/flydb-cli-*.zip" | Select-Object -First 1).FullName
          $dist = Join-Path $env:RUNNER_TEMP "flydb-dist"
          Expand-Archive -Path $archive -DestinationPath $dist
          $env:FLYDB_E2E_CLI = (Get-ChildItem $dist -Filter "flydb.bat" -Recurse | Select-Object -First 1).FullName
          npm --prefix flydb-skills/mcp run test:e2e

  java8-compatibility:
    name: Java 8 compatibility
    runs-on: ubuntu-latest
    timeout-minutes: 15
    steps:
      - name: Checkout
        uses: actions/checkout@v4
      - name: Set up JDK 8
        uses: actions/setup-java@v4
        with:
          distribution: temurin
          java-version: '8'
          cache: maven
      - name: Set up Node for bundled GUI
        uses: actions/setup-node@v4
        with:
          node-version: '22'
          cache: npm
          cache-dependency-path: flydb-web/frontend/package-lock.json
      - name: Verify Java 8 modules
        run: >-
          ./mvnw -B verify
          -pl flydb-core,flydb-cli,flydb-spring-boot-2-starter,examples/boot2-demo
          -am

  dialect-contract:
    name: ${{ matrix.dialect }} family contract
    runs-on: ubuntu-latest
    timeout-minutes: 20
    strategy:
      fail-fast: false
      matrix:
        include:
          - dialect: mysql
            profile: mysql
          - dialect: postgresql
            profile: postgresql
          - dialect: tidb
            profile: mysql
          - dialect: oceanbase-mysql
            profile: mysql
          - dialect: opengauss
            profile: postgresql
    steps:
      - name: Checkout
        uses: actions/checkout@v4
      - name: Set up JDK 17
        uses: actions/setup-java@v4
        with:
          distribution: temurin
          java-version: '17'
          cache: maven
      - name: Run selected contract
        run: >-
          ./mvnw -B verify
          -pl flydb-integration-tests -am
          -P${{ matrix.profile }}
          -Dflydb.integration.database=${{ matrix.dialect }}

  licensed-database:
    name: Licensed database gate
    if: github.event_name == 'push' && vars.RUN_LICENSED_DB_TESTS == 'true'
    runs-on: [self-hosted, licensed-db]
    timeout-minutes: 30
    env:
      FLYDB_TEST_DM_URL: ${{ secrets.FLYDB_TEST_DM_URL }}
      FLYDB_TEST_DM_USER: ${{ secrets.FLYDB_TEST_DM_USER }}
      FLYDB_TEST_DM_PASSWORD: ${{ secrets.FLYDB_TEST_DM_PASSWORD }}
      FLYDB_TEST_KINGBASE_URL: ${{ secrets.FLYDB_TEST_KINGBASE_URL }}
      FLYDB_TEST_KINGBASE_USER: ${{ secrets.FLYDB_TEST_KINGBASE_USER }}
      FLYDB_TEST_KINGBASE_PASSWORD: ${{ secrets.FLYDB_TEST_KINGBASE_PASSWORD }}
      FLYDB_TEST_ORACLE_URL: ${{ secrets.FLYDB_TEST_ORACLE_URL }}
      FLYDB_TEST_ORACLE_USER: ${{ secrets.FLYDB_TEST_ORACLE_USER }}
      FLYDB_TEST_ORACLE_PASSWORD: ${{ secrets.FLYDB_TEST_ORACLE_PASSWORD }}
    steps:
      - name: Checkout
        uses: actions/checkout@v4
      - name: Set up JDK 17
        uses: actions/setup-java@v4
        with:
          distribution: temurin
          java-version: '17'
          cache: maven
      - name: Run licensed contracts
        # 自建 Runner 需按厂商许可提供 DM/Kingbase/Oracle JDBC 驱动；公共仓库不捆绑专有驱动。
        run: >-
          ./mvnw -B test
          -pl flydb-integration-tests -am
          -Dflydb.integration.database=all