ci.yml

name: CI

on:
  push:
    branches: [main]
  pull_request:
    branches: [main]
  workflow_call:

env:
  CARGO_TERM_COLOR: always
  RUSTFLAGS: "-Dwarnings"

jobs:
  ci:
    name: Build, Test, Lint
    runs-on: ubuntu-latest

    steps:
      - name: Checkout repository
        uses: actions/checkout@v4

      - name: Install Rust toolchain
        uses: dtolnay/rust-toolchain@stable
        with:
          components: rustfmt, clippy

      - name: Cache cargo registry
        uses: actions/cache@v4
        with:
          path: |
            ~/.cargo/registry
            ~/.cargo/git
            target
          key: ${{ runner.os }}-cargo-${{ hashFiles('**/Cargo.lock') }}
          restore-keys: |
            ${{ runner.os }}-cargo-

      - name: Check formatting
        run: cargo fmt --all -- --check

      - name: Run clippy
        run: cargo clippy --all-targets --all-features -- -D warnings

      - name: Build
        run: cargo build --verbose

      - name: Run tests
        run: cargo test --verbose

      - name: Build release
        run: cargo build --release

      - name: Upload release binary
        uses: actions/upload-artifact@v4
        with:
          name: lattice-linux
          path: target/release/lattice

  # Validate lattice structure (self-describing)
  validate-lattice:
    name: Validate Lattice Structure
    runs-on: ubuntu-latest

    steps:
      - name: Checkout repository
        uses: actions/checkout@v4

      - name: Validate YAML syntax
        run: |
          # Install yaml validator
          npm install -g yaml-lint

          # Validate all lattice YAML files
          find .lattice -name "*.yaml" -exec yaml-lint {} \;

      - name: Check required fields
        run: |
          # Ensure all nodes have required fields
          for file in $(find .lattice/requirements .lattice/theses .lattice/sources -name "*.yaml"); do
            echo "Checking $file..."

            # Check for required fields using grep
            if ! grep -q "^id:" "$file"; then
              echo "ERROR: $file missing 'id' field"
              exit 1
            fi

            if ! grep -q "^title:" "$file"; then
              echo "ERROR: $file missing 'title' field"
              exit 1
            fi

            if ! grep -q "^status:" "$file"; then
              echo "ERROR: $file missing 'status' field"
              exit 1
            fi
          done

          echo "All lattice nodes have required fields"

  # Test CLI against actual lattice
  cli-smoke-test:
    name: CLI Smoke Test
    runs-on: ubuntu-latest
    needs: ci

    steps:
      - name: Checkout repository
        uses: actions/checkout@v4

      - name: Download release binary
        uses: actions/download-artifact@v4
        with:
          name: lattice-linux
          path: bin

      - name: Smoke test - version
        run: chmod +x bin/lattice && bin/lattice --version

      - name: Smoke test - list requirements
        run: bin/lattice list requirements

      - name: Smoke test - list theses
        run: bin/lattice list theses

      - name: Smoke test - list sources
        run: bin/lattice list sources

      - name: Smoke test - get requirement
        run: bin/lattice get REQ-CICD-001

      - name: Smoke test - drift check
        run: bin/lattice drift

      - name: Smoke test - export overview
        run: bin/lattice export --audience overview

      - name: Smoke test - export contributor
        run: bin/lattice export --audience contributor

  # End-to-end integration test (full CLI workflow from scratch)
  e2e-test:
    name: E2E Integration Test
    runs-on: ubuntu-latest
    needs: ci

    steps:
      - name: Checkout repository
        uses: actions/checkout@v4

      - name: Download release binary
        uses: actions/download-artifact@v4
        with:
          name: lattice-linux
          path: bin

      - name: Run e2e tests
        run: |
          chmod +x bin/lattice
          export PATH="$PWD/bin:$PATH"
          bash tests/docker/e2e-test.sh

  # Code coverage measurement
  coverage:
    name: Code Coverage
    runs-on: ubuntu-latest

    steps:
      - name: Checkout repository
        uses: actions/checkout@v4

      - name: Install Rust toolchain
        uses: dtolnay/rust-toolchain@stable

      - name: Cache cargo
        uses: actions/cache@v4
        with:
          path: |
            ~/.cargo/registry
            ~/.cargo/git
            target
          key: ${{ runner.os }}-cargo-coverage-${{ hashFiles('**/Cargo.lock') }}

      - name: Install cargo-tarpaulin
        uses: taiki-e/install-action@v2
        with:
          tool: cargo-tarpaulin

      - name: Run coverage with threshold
        run: cargo tarpaulin --fail-under 40 --out Html --output-dir coverage

      - name: Upload coverage artifact
        uses: actions/upload-artifact@v4
        if: always()
        with:
          name: coverage-report
          path: coverage/