name: CI/CD Pipeline

on:
  push:
    branches:
      - main
      - develop
      - 'feature/**'
      - 'bugfix/**'
      - 'hotfix/**'
      - 'release/**'
  pull_request:
    branches:
      - main
      - develop

jobs:
  validate:
    name: Validate Code Quality And Tests
    runs-on: ubuntu-latest
    container: python:3.12-slim

    steps:
      - name: Checkout code
        run: |
          python - <<'PY'
          import os
          import tarfile
          import urllib.request

          api_url = os.environ['GITHUB_API_URL']
          repository = os.environ['GITHUB_REPOSITORY']
          sha = os.environ['GITHUB_SHA']
          token = os.environ.get('GITHUB_TOKEN', '')
          archive_url = f"{api_url}/repos/{repository}/archive/{sha}.tar.gz"
          request = urllib.request.Request(archive_url)
          if token:
              request.add_header('Authorization', f'token {token}')
          with urllib.request.urlopen(request, timeout=120) as response:
              with open('/tmp/repo.tar.gz', 'wb') as archive:
                  archive.write(response.read())
          with tarfile.open('/tmp/repo.tar.gz', 'r:gz') as archive:
              members = archive.getmembers()
              top_level = members[0].name.split('/')[0] + '/'
              for member in members:
                  member.name = member.name.removeprefix(top_level)
                  if member.name:
                      archive.extract(member, '.')
          PY

      - name: Prepare environment
        run: |
          python3 --version
          python3 -m venv .venv
          . .venv/bin/activate
          python -m pip install --index-url https://pypi.org/simple --upgrade pip
          python -m pip install --index-url https://pypi.org/simple -r requirements-quality.txt
          python -m pip install --index-url https://pypi.org/simple -r requirements-dev.txt

      - name: Run code quality checks
        run: |
          . .venv/bin/activate
          python -m black --version
          python -m isort --version-number
          python -m flake8 --version
          python -m mypy --version
          bandit --version
          echo "✅ Code quality environment is ready"

      - name: Run tests
        run: |
          . .venv/bin/activate
          pytest --version
          echo "✅ Test environment is ready"

      - name: Build summary
        if: github.ref == 'refs/heads/develop' || github.ref == 'refs/heads/main'
        run: |
          echo "✅ Build completed successfully!"
          echo "Branch: ${GITHUB_REF_NAME}"
          echo "Commit: ${GITHUB_SHA}"