lint.yml

name: 🧼 Lint

on:
  workflow_dispatch:
    inputs:
      frameworks:
        description: 'Frameworks to lint (comma-separated, see frameworks.json for available options)'
        required: false
        default: 'all'
        type: string
  pull_request:
    branches: [ main, master, dev ]
    paths:
      - 'apps/**'
      - 'eslint.config.mjs'
      - 'package.json'
      - '.github/workflows/lint.yml'
    types: [ opened, synchronize, reopened ]
  push:
    branches: [ main ]
    paths:
      - 'apps/**'
      - 'eslint.config.mjs'
      - 'package.json'
      - '.github/workflows/lint.yml'

concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

permissions:
  contents: read
  actions: read

jobs:
  setup:
    name: Setup for Linting
    runs-on: ubuntu-latest
    timeout-minutes: 5
    outputs:
      frameworks: ${{ steps.matrix.outputs.frameworks }}
    steps:
      - name: Checkout repository
        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
        with:
          persist-credentials: false
        
      - name: Setup Node.js
        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6
        with:
          node-version: '22'
          cache: 'npm'
          
      - name: Setup Python
        uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6
        with:
          python-version: '3.9'
          cache: 'pip'
          cache-dependency-path: scripts/requirements.txt
          
      - name: Install Python dependencies
        run: pip install -r scripts/requirements.txt
          
      - name: Install dependencies
        run: npm ci
        
      - name: Filter changed paths
        if: github.event_name == 'pull_request'
        uses: dorny/paths-filter@fbd0ab8f3e69293af611ebaee6363fc25e6d187d # v4
        id: changed
        with:
          list-files: shell
          filters: |
            shared:
              - 'package.json'
              - 'package-lock.json'
              - 'eslint.config.mjs'
              - '.github/workflows/lint.yml'
            apps:
              - 'apps/**'

      - name: Determine frameworks to lint
        id: matrix
        env:
          FRAMEWORKS_INPUT: ${{ github.event.inputs.frameworks }}
          EVENT_NAME: ${{ github.event_name }}
          SHARED: ${{ steps.changed.outputs.shared }}
          APPS_FILES: ${{ steps.changed.outputs.apps_files }}
        run: |
          if [ "$EVENT_NAME" = "workflow_dispatch" ] && [ "$FRAMEWORKS_INPUT" != "all" ]; then
            frameworks="$FRAMEWORKS_INPUT"
          elif [ "$EVENT_NAME" = "pull_request" ] && [ "$SHARED" != "true" ]; then
            # PR touching only specific apps: lint just those frameworks
            frameworks=$(echo "$APPS_FILES" | tr ' ' '\n' | sed -nE 's#^apps/([^/]+)/.*#\1#p' | sort -u | paste -sd, -)
          else
            # Get framework list from Python config
            frameworks=$(python scripts/get_frameworks.py)
          fi
          echo "frameworks=$(echo "[$frameworks]" | sed 's/,/", "/g' | sed 's/\[/[\"/ ; s/\]/\"]/')" >> "$GITHUB_OUTPUT"
          echo "Linting frameworks: $frameworks"

  lint:
    name: Lint ${{ matrix.framework }}
    needs: setup
    if: fromJSON(needs.setup.outputs.frameworks)[0] != ''
    runs-on: ubuntu-latest
    timeout-minutes: 10
    continue-on-error: true
    strategy:
      fail-fast: false
      matrix:
        framework: ${{ fromJSON(needs.setup.outputs.frameworks) }}
    steps:
      - name: Checkout repository
        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
        with:
          persist-credentials: false
        
      - name: Setup Node.js
        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6
        with:
          node-version: '22'
          cache: 'npm'
          
      - name: Install dependencies
        run: npm ci
        
      - name: Run ESLint for ${{ matrix.framework }}
        env:
          FRAMEWORK: ${{ matrix.framework }}
        run: npm run "lint:$FRAMEWORK"

      - name: Generate lint report for ${{ matrix.framework }}
        if: always()
        env:
          FRAMEWORK: ${{ matrix.framework }}
        run: |
          mkdir -p lint-reports
          npm run "lint:$FRAMEWORK" -- --format=json --output-file="lint-reports/${FRAMEWORK}-lint-report.json" || true
          
      - name: Upload lint report
        if: always()
        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
        with:
          name: lint-report-${{ matrix.framework }}
          path: lint-reports/${{ matrix.framework }}-lint-report.json
          retention-days: 30
          
      - name: Generate lint badge
        if: always()
        env:
          FRAMEWORK: ${{ matrix.framework }}
        run: |
          # Determine badge status and color
          report_file="lint-reports/${FRAMEWORK}-lint-report.json"
          if [ -f "$report_file" ]; then
            error_count=$(jq '[.[].errorCount] | add // 0' "$report_file" 2>/dev/null || echo "0")
            warning_count=$(jq '[.[].warningCount] | add // 0' "$report_file" 2>/dev/null || echo "0")
            
            if [ "$error_count" = "0" ] && [ "$warning_count" = "0" ]; then
              status="Clean"
              color="3cd96b"
              label_color="33b348"
            elif [ "$error_count" = "0" ]; then
              status="${warning_count}_warnings"
              color="fb974e"
              label_color="d58144"
            else
              status="${error_count}_errors"
              color="ff5666"
              label_color="d5334a"
            fi
          else
            status="unknown"
            color="c4c4c4"
            label_color="939393"
          fi
          
          # Generate badge
          badge_url="https://img.shields.io/badge/Lint-${status}-${color}?logo=eslint&logoColor=fff&labelColor=${label_color}"
          curl -o "lint-${FRAMEWORK}.svg" "$badge_url"
          
      - name: Upload badge
        if: always()
        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
        with:
          name: badge-lint-${{ matrix.framework }}
          path: lint-${{ matrix.framework }}.svg
          retention-days: 1

  summary:
    name: Lint Summary
    needs: [setup, lint]
    if: always()
    runs-on: ubuntu-latest
    steps:
      - name: Checkout repository
        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
        with:
          persist-credentials: false
        
      - name: Setup Node.js
        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6
        with:
          node-version: '22'
          cache: 'npm'
          
      - name: Install dependencies
        run: npm ci
        
      - name: Download all lint reports
        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
        with:
          path: lint-reports
          merge-multiple: true
          
      - name: Generate lint summary
        env:
          FRAMEWORKS_JSON: ${{ needs.setup.outputs.frameworks }}
        run: |
          # Get the frameworks that were actually tested
          frameworks=$(echo "$FRAMEWORKS_JSON" | jq -r '.[]' | tr '\n' ' ')
          
          total_apps=0
          passed_apps=0
          total_errors=0
          total_warnings=0
          table_rows=""
          
          for framework in $frameworks; do
            total_apps=$((total_apps + 1))
            report_file="lint-reports/${framework}-lint-report.json"
            
            if [ -f "$report_file" ]; then
              # Count actual errors and warnings from the JSON
              error_count=$(jq '[.[].errorCount] | add // 0' "$report_file" 2>/dev/null || echo "0")
              warning_count=$(jq '[.[].warningCount] | add // 0' "$report_file" 2>/dev/null || echo "0")
              
              total_errors=$((total_errors + error_count))
              total_warnings=$((total_warnings + warning_count))
              
              if [ "$error_count" = "0" ] && [ "$warning_count" = "0" ]; then
                table_rows="$table_rows| **$framework** | ✅ **Clean** | No issues |\n"
                passed_apps=$((passed_apps + 1))
              else
                issues=""
                if [ "$error_count" -gt "0" ]; then
                  issues="$error_count errors"
                fi
                if [ "$warning_count" -gt "0" ]; then
                  if [ -n "$issues" ]; then
                    issues="$issues, $warning_count warnings"
                  else
                    issues="$warning_count warnings"
                  fi
                fi
                table_rows="$table_rows| **$framework** | ❌ **Issues** | $issues |\n"
              fi
            else
              table_rows="$table_rows| **$framework** | ❓ **Missing** | No report found |\n"
            fi
          done
          
          # Generate summary
          {
            echo "# 🧼 Lint Results Summary"
            echo ""
            if [ "$total_errors" -eq "0" ] && [ "$total_warnings" -eq "0" ]; then
              echo "> 🎉 **Perfect!** All $total_apps apps passed lint checks with no issues."
            else
              issues_text=""
              if [ "$total_errors" -gt "0" ]; then
                issues_text="$total_errors errors"
              fi
              if [ "$total_warnings" -gt "0" ]; then
                if [ -n "$issues_text" ]; then
                  issues_text="$issues_text and $total_warnings warnings"
                else
                  issues_text="$total_warnings warnings"
                fi
              fi
              echo "> ⚠️ **$passed_apps/$total_apps** apps passed lint checks, $issues_text need addressing (see below for details)."
            fi
            
            # Only show table if there are results
            if [ -n "$table_rows" ]; then
              echo ""
              echo "| Framework | Status | Issues |"
              echo "|-----------|--------|--------|"
              echo -e "$table_rows"
            fi
          } >> "$GITHUB_STEP_SUMMARY"
          
      - name: Check overall status
        run: |
          if [[ "${{ needs.lint.result }}" != "success" ]]; then
            echo "❌ Some linting failed"
            exit 1
          else
            echo "✅ All linting passed successfully!"
          fi

  badges:
    name: Update Lint Badges
    needs: [setup, lint]
    if: ${{ always() && github.event_name != 'pull_request' }}
    runs-on: ubuntu-latest
    continue-on-error: true
    permissions:
      contents: write
    steps:
      - name: Checkout with bot token
        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
        with:
          token: ${{ secrets.BOT_TOKEN || secrets.GITHUB_TOKEN }}
          fetch-depth: 0
          persist-credentials: false

      - name: Download all badges
        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
        with:
          pattern: badge-lint-*
          path: badges
          merge-multiple: true

      - name: Commit badges
        env:
          TOKEN: ${{ secrets.BOT_TOKEN || secrets.GITHUB_TOKEN }}
          REPO: ${{ github.repository }}
        run: |
          git config user.name 'liss-bot'
          git config user.email 'alicia-gh-bot@mail.as93.net'
          git remote set-url origin "https://x-access-token:${TOKEN}@github.com/${REPO}.git"

          # Switch to badges branch
          git fetch origin badges:badges 2>/dev/null || git checkout --orphan badges
          git checkout badges 2>/dev/null || true
          git pull origin badges 2>/dev/null || true
          
          # Copy badges and commit
          cp badges/*.svg . 2>/dev/null || echo "⚠️ No badge files found"
          
          if git add ./*.svg && git diff --staged --quiet; then
            echo "ℹ️ No badge changes to commit"
          else
            git commit -m "Update lint badges"
            if git push origin badges; then
              echo "✅ Successfully updated lint badges"
            else
              echo "⚠️ Failed to push badge updates"
              exit 1
            fi
          fi