ci.yml

name: CI
run-name: "${{ github.event_name == 'workflow_dispatch' && format('CI: {0}', github.ref_name) || '' }}"

on:
  push:
    branches:
      - dev
  pull_request:
  release:
    types: [published]
  workflow_dispatch:

env:
  ADDITIONAL_PYTHON_VERSIONS: "['3.14']"

concurrency:
  group: ${{ github.workflow }}-${{ (github.event_name == 'release' && github.run_id) || github.event.pull_request.number || github.ref }}
  cancel-in-progress: true

permissions:
  contents: read # required for actions/checkout
  id-token: write # required for OIDC authentication with CodSpeed

jobs:
  info:
    name: Collect information & prepare
    outputs:
      default_python_version: ${{ steps.info.outputs.default_python_version }}
      python_versions: ${{ steps.info.outputs.python_versions }}
    runs-on: ubuntu-latest
    steps:
      - name: ⤵️  Check out code from GitHub
        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
      - name: Collect information
        id: info
        run: |
          default_python_version=$(cat .python-version)
          echo "default python version: ${default_python_version}"
          echo "default_python_version=${default_python_version}" >> $GITHUB_OUTPUT

          # Ensure ADDITIONAL_PYTHON_VERSIONS is properly initialized
          ADDITIONAL_PYTHON_VERSIONS=${ADDITIONAL_PYTHON_VERSIONS:-"[]"}

          # Check if ADDITIONAL_PYTHON_VERSIONS contains default_python_version
          if [[ ! ${ADDITIONAL_PYTHON_VERSIONS} == *"${default_python_version}"* ]]; then
            # Handle empty or "[]" case properly
            if [[ ${ADDITIONAL_PYTHON_VERSIONS} == "[]" ]]; then
              all_python_versions="['${default_python_version}']"
            elif [[ -z ${ADDITIONAL_PYTHON_VERSIONS} ]]; then
              all_python_versions="['${default_python_version}']"
            else
              all_python_versions="[${ADDITIONAL_PYTHON_VERSIONS:1:-1}, '${default_python_version}']"
            fi
          else
            all_python_versions="${ADDITIONAL_PYTHON_VERSIONS}"
          fi
          echo "python_versions: ${all_python_versions}"
          echo "python_versions=${all_python_versions}" >> $GITHUB_OUTPUT
      - name: 🏗 Install uv
        uses: astral-sh/setup-uv@61cb8a9741eeb8a550a1b8544337180c0fc8476b # v7.2.0
      - name: Generate requirements files
        run: |
          uv export --no-hashes --no-dev --group test --no-emit-project > requirements-test.txt
          uv export --no-hashes --group dev --no-emit-project > requirements-dev.txt
      - name: Upload requirements-test.txt
        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
        with:
          name: requirements-test.txt
          path: requirements-test.txt
      - name: Upload requirements-dev.txt
        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
        with:
          name: requirements-dev.txt
          path: requirements-dev.txt

  python-code-quality:
    runs-on: "ubuntu-latest"
    name: Check Python code quality
    steps:
      - name: ⤵️ Checkout repository
        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1

      - name: 🏗 Setup Python
        uses: actions/setup-python@83679a892e2d95755f2dac6acb0bfd1e9ac5d548 # v6.1.0
        id: setup-python

      - name: 🏗 Install uv and Python
        uses: astral-sh/setup-uv@61cb8a9741eeb8a550a1b8544337180c0fc8476b # v7.2.0

      - uses: actions-rust-lang/setup-rust-toolchain@1780873c7b576612439a134613cc4cc74ce5538c # v1.15.2
        with:
          cache-key: ${{ steps.setup-python.outputs.python-version }}-${{ hashFiles('Cargo.lock') }}

      - name: 🏗 Install the project
        run: uv sync --locked --group lint

      # Following steps cannot run by pre-commit.ci as repo = local
      - name: Run mypy
        run: |
          source .venv/bin/activate
          mypy deebot_client/

      - name: Verify no getLogger usages
        run: scripts/check_getLogger.sh

  rust-code-quality:
    runs-on: "ubuntu-latest"
    name: Check Rust code quality
    env:
      RUSTFLAGS: "-Dwarnings"
    steps:
      - name: ⤵️ Checkout repository
        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
      - uses: actions-rust-lang/setup-rust-toolchain@1780873c7b576612439a134613cc4cc74ce5538c # v1.15.2
        with:
          components: rustfmt,clippy
      - name: Rust format
        uses: actions-rust-lang/rustfmt@4066006ec54a31931b9b1fddfd38f2fdf2d27143 # v1.1.2
      - uses: clechasseur/rs-clippy-check@286fd9545eb133adad54b4af34bcb642e266ddd1 # v5.0.2
        with:
          args: --all-features

  prek:
    runs-on: ubuntu-latest
    name: Run prek checks
    steps:
      - name: ⤵️ Checkout repository
        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
      - name: Run prek
        uses: j178/prek-action@9d6a3097e0c1865ecce00cfb89fe80f2ee91b547 # v1.0.12
        env:
          PREK_SKIP: no-commit-to-branch,mypy,verifyNoGetLogger,rust-fmt,rust-check,rust-clippy

  tests:
    name: Execute tests
    runs-on: ubuntu-latest
    needs:
      - info
      - python-code-quality
      - rust-code-quality
      - prek
    strategy:
      fail-fast: false
      matrix:
        python-version: ${{ fromJSON(needs.info.outputs.python_versions) }}
    steps:
      - name: ⤵️ Checkout repository
        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
      - uses: actions/setup-python@83679a892e2d95755f2dac6acb0bfd1e9ac5d548 # v6.1.0
        with:
          python-version: ${{ matrix.python-version }}
        id: setup-python
      - name: 🏗 Install uv and Python
        uses: astral-sh/setup-uv@61cb8a9741eeb8a550a1b8544337180c0fc8476b # v7.2.0
      - uses: actions-rust-lang/setup-rust-toolchain@1780873c7b576612439a134613cc4cc74ce5538c # v1.15.2
        with:
          components: llvm-tools
          cache-key: ${{ steps.setup-python.outputs.python-version }}-${{ hashFiles('Cargo.lock') }}
      - name: Install cargo-llvm-cov
        run: cargo install cargo-llvm-cov
      - name: Download requirements-dev.txt
        uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0
        with:
          name: requirements-dev.txt
      - name: Prepare env and install requirements
        shell: bash
        run: |
          uv venv -p ${{ steps.setup-python.outputs.python-version }}
          uv pip install --system -r requirements-dev.txt
      - name: Execute tests
        id: tests
        run: |
          source .venv/bin/activate
          source <(cargo llvm-cov show-env --export-prefix)
          export CARGO_TARGET_DIR=$CARGO_LLVM_COV_TARGET_DIR
          export CARGO_INCREMENTAL=1
          cargo llvm-cov clean --workspace
          cargo test
          maturin develop --uv
          pytest tests -n auto --cov=deebot_client --cov-report xml --junitxml=junit.xml -o junit_family=legacy -v
          cargo llvm-cov report --lcov --output-path coverage.lcov
      - name: Upload coverage to Codecov
        uses: codecov/codecov-action@671740ac38dd9b0130fbe1cec585b89eea48d3de # v5.5.2
        with:
          fail_ci_if_error: true
          disable_telem: true
          use_oidc: true
          files: coverage.lcov,coverage.xml
      - name: Upload test results to Codecov
        if: ${{ !cancelled() && steps.tests.outcome == 'success' }}
        uses: codecov/codecov-action@671740ac38dd9b0130fbe1cec585b89eea48d3de # v5.5.2
        with:
          fail_ci_if_error: true
          disable_telem: true
          verbose: true
          use_oidc: true

  build-test-native:
    name: ${{ matrix.platform.name }} ${{ matrix.platform.target }} ${{ matrix.python-version }}
    runs-on: ${{ matrix.platform.runner }}
    needs:
      - info
      - tests
    strategy:
      fail-fast: false
      matrix:
        include:
          - name: Linux
            manylinux: manylinux_2_34
          - name: Macos
            pytest_args: -m "not docker"
        platform:
          - name: Linux
            runner: ubuntu-latest
            target: x86_64
          - name: Linux
            runner: ubuntu-24.04-arm
            target: aarch64
          - name: Windows
            runner: windows-latest
            target: x64
          - name: Macos
            runner: macos-15-intel
            target: x86_64
          - name: Macos
            runner: macos-15
            target: aarch64
        python-version: ${{ fromJSON(needs.info.outputs.python_versions) }}
    steps:
      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
      - uses: actions/setup-python@83679a892e2d95755f2dac6acb0bfd1e9ac5d548 # v6.1.0
        with:
          python-version: ${{ matrix.python-version }}
          architecture: ${{ (matrix.platform.name == 'Windows') && matrix.platform.target || '' }}
      - name: 🏗 Set package version
        if: ${{ matrix.platform.name != 'Windows' && github.event_name == 'release' }}
        run: |
          sed -i.bak "s/^version = \".*\"/version = \"${{ github.event.release.tag_name }}\"/" pyproject.toml && rm pyproject.toml.bak
      - name: 🏗 Set package version (Windows)
        if: ${{ matrix.platform.name == 'Windows' && github.event_name == 'release' }}
        run: |
          (Get-Content pyproject.toml) -replace 'version = ".*"', 'version = "${{ github.event.release.tag_name }}"' | Set-Content pyproject.toml
      - name: Build wheels
        uses: PyO3/maturin-action@86b9d133d34bc1b40018696f782949dac11bd380 # v1.49.4
        with:
          target: ${{ matrix.platform.target }}
          args: --release --strip --out dist -i python${{ matrix.python-version }}
          sccache: "false"
          manylinux: ${{ matrix.manylinux }}
          before-script-linux: python3 -m ensurepip
      - name: Upload wheels
        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
        with:
          name: wheels-${{ matrix.platform.name }}-${{ matrix.platform.target }}-${{ matrix.python-version }}
          path: dist
      - name: 🏗 Install uv
        uses: astral-sh/setup-uv@61cb8a9741eeb8a550a1b8544337180c0fc8476b # v7.2.0
      - name: Download requirements-test.txt
        uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0
        with:
          name: requirements-test.txt
      - name: Prepare env and install wheel
        shell: bash
        run: |
          # Remove sources otherwise pytest will complain about missing rust files
          rm -rf deebot_client
          uv venv -p ${{ matrix.python-version }}
          uv pip install -r requirements-test.txt
          uv pip install --force-reinstall dist/deebot_client-*.whl
      - name: Run pytest
        if: ${{ matrix.platform.name != 'Windows' }}
        id: pytest
        run: |
          source .venv/bin/activate
          pytest tests -n auto -v ${{ matrix.pytest_args || ''}}
      - name: Run pytest (windows)
        if: ${{ matrix.platform.name == 'Windows' }}
        id: pytest_windows
        run: |
          .venv/Scripts/activate
          pytest tests -n auto -v -m "not docker"

  build-test-musl:
    name: Musllinux ${{ matrix.target }} ${{ matrix.python-version }}
    runs-on: ${{ matrix.os || 'ubuntu-latest' }}
    needs:
      - info
      - tests
    strategy:
      fail-fast: false
      matrix:
        target:
          - x86_64
          - aarch64
        python-version: ${{ fromJSON(needs.info.outputs.python_versions) }}
        include:
          # x86_64
          - target: x86_64
            docker_arch: amd64
          # aarch64
          - target: aarch64
            docker_arch: arm64
            os: ubuntu-24.04-arm
    steps:
      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
      - uses: actions/setup-python@83679a892e2d95755f2dac6acb0bfd1e9ac5d548 # v6.1.0
        with:
          python-version: ${{ matrix.python-version }}
      - name: 🏗 Set package version
        if: ${{ github.event_name == 'release' }}
        run: |
          sed -i "s/^version = \".*\"/version = \"${{ github.event.release.tag_name }}\"/" pyproject.toml
      - name: Build wheels
        uses: PyO3/maturin-action@86b9d133d34bc1b40018696f782949dac11bd380 # v1.49.4
        with:
          target: ${{ matrix.target }}
          args: --release --strip --out dist -i python${{ matrix.python-version }}
          sccache: "false"
          manylinux: musllinux_1_2
      - name: Upload wheels
        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
        with:
          name: wheels-musllinux-${{ matrix.target }}-${{ matrix.python-version }}
          path: dist
      - name: Download requirements-test.txt
        uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0
        with:
          name: requirements-test.txt
      - name: Install Docker Buildx
        uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3.12.0
      - name: Build image
        uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # v6.18.0
        with:
          context: .
          file: ci/Dockerfile.alpine
          platforms: linux/${{ matrix.docker_arch }}
          push: false
          load: true
          cache-from: type=gha
          cache-to: type=gha,mode=max
          build-args: |
            PYTHON_VERSION=${{ matrix.python-version }}
          tags: deebot_client:${{ matrix.target }}-${{ matrix.python-version }}
      - name: Pytest in docker
        id: pytest
        run: |
          docker run --rm -v ${{ github.workspace }}:/github/workspace --platform linux/${{ matrix.docker_arch }} deebot_client:${{ matrix.target }}-${{ matrix.python-version }}

  benchmarks:
    runs-on: "ubuntu-latest"
    name: Run benchmarks
    if: ${{ github.event_name != 'release' }}
    needs:
      - info
      - tests
    steps:
      - name: ⤵️ Checkout repository
        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
      - name: 🏗 Install uv
        uses: astral-sh/setup-uv@61cb8a9741eeb8a550a1b8544337180c0fc8476b # v7.2.0
      - name: 🏗 Setup Python
        uses: actions/setup-python@83679a892e2d95755f2dac6acb0bfd1e9ac5d548 # v6.1.0
        with:
          python-version: ${{ needs.info.outputs.default_python_version }}
      - name: Download requirements-dev.txt
        uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0
        with:
          name: requirements-dev.txt
      - name: 🏗 Install the project
        run: |
          uv pip install --no-build --system -r requirements-dev.txt
          maturin build --profile codspeed
          uv pip install --no-build --system target/wheels/deebot_client-*.whl
      - name: 🏗 Remove source files
        run: |
          rm -rf deebot_client/
      - name: Run benchmarks
        uses: CodSpeedHQ/action@94b88560ad3ed11ed5e92a321518a47c35a1fed5 # v4.8.0
        with:
          run: pytest tests/ --codspeed
          mode: instrumentation

  sdist:
    name: Create source distribution
    runs-on: ubuntu-latest
    needs: tests
    steps:
      - name: ⤵️ Check out code from GitHub
        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
      - name: 🏗 Set up uv
        uses: astral-sh/setup-uv@61cb8a9741eeb8a550a1b8544337180c0fc8476b # v7.2.0
      - name: 🏗 Set package version
        if: ${{ github.event_name == 'release' }}
        run: |
          sed -i "s/^version = \".*\"/version = \"${{ github.event.release.tag_name }}\"/" pyproject.toml
      - name: 📦 Build source package
        run: uv build --sdist
      - name: Upload sdist
        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
        with:
          name: wheels-sdist
          path: dist

  release:
    name: Releasing to PyPi
    if: ${{ github.event_name == 'release' }}
    runs-on: ubuntu-latest
    needs:
      - build-test-native
      - build-test-musl
      - sdist
    environment:
      name: release
      url: https://pypi.org/p/deebot-client
    permissions:
      contents: write
      id-token: write
    steps:
      - name: ⤵️ Check out code from GitHub
        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
      - name: ⬇️ Download wheels
        uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0
        with:
          pattern: wheels-*
          path: dist
          merge-multiple: true
      - name: 🚀 Publish to PyPi
        uses: pypa/gh-action-pypi-publish@ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e # v1.13.0
        with:
          verbose: true
          print-hash: true
      - name: ✍️ Sign published artifacts
        uses: sigstore/gh-action-sigstore-python@a5caf349bc536fbef3668a10ed7f5cd309a4b53d # v3.2.0
        with:
          inputs: ./dist/*.tar.gz ./dist/*.whl
          release-signing-artifacts: true

  all-required-green: # This job does nothing and is only used for the branch protection
    name: All required checks pass
    runs-on: ubuntu-latest
    needs:
      - build-test-native
      - build-test-musl
      - sdist
      - benchmarks
    if: always() && ${{ github.event_name != 'release' }}

    steps:
      - name: Check whether the needed jobs succeeded or failed
        uses: re-actors/alls-green@05ac9388f0aebcb5727afa17fcccfecd6f8ec5fe # v1.2.2
        with:
          jobs: ${{ toJSON(needs) }}