ci-code-coverage.yml

name: CI - Code Coverage

on:
  workflow_dispatch:
  pull_request:
  push:
    branches:
      - main
      - master

concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

jobs:
  backend-coverage:
    name: Backend Coverage
    runs-on: ubuntu-latest
    env:
      BACKEND_COVERAGE_THRESHOLD: '50'

    services:
      postgres:
        image: postgres:18@sha256:5ec39c188013123927f30a006987c6b0e20f3ef2b54b140dfa96dac6844d883f
        env:
          POSTGRES_USER: test
          POSTGRES_PASSWORD: test
          POSTGRES_DB: leaflock_test
        options: >-
          --health-cmd pg_isready
          --health-interval 10s
          --health-timeout 5s
          --health-retries 5
        ports:
          - 5433:5432

      redis:
        image: redis:8-alpine@sha256:6cbef353e480a8a6e7f10ec545f13d7d3fa85a212cdcc5ffaf5a1c818b9d3798
        options: >-
          --health-cmd "redis-cli ping"
          --health-interval 10s
          --health-timeout 5s
          --health-retries 5
        ports:
          - 6380:6379

    steps:
      - name: Checkout repository
        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6

      - name: Set up Go
        uses: actions/setup-go@4dc6199c7b1a012772edbd06daecab0f50c9053c # v6
        with:
          go-version: '1.25'
          cache-dependency-path: backend/go.sum

      - name: Install dependencies
        working-directory: backend
        run: go mod download

      - name: Run coverage suite
        working-directory: backend
        env:
          POSTGRES_HOST: localhost
          POSTGRES_PORT: 5433
          POSTGRES_USER: test
          POSTGRES_PASSWORD: test
          POSTGRES_DB: leaflock_test
          REDIS_ADDR: localhost:6380
          REDIS_PASSWORD: ""
        run: |
          COVERAGE_THRESHOLD=${BACKEND_COVERAGE_THRESHOLD} make test-coverage-check

      - name: Capture coverage summary
        working-directory: backend
        run: |
          TOTAL_LINE_COVERAGE=$(go tool cover -func=coverage.out | awk '/total:/ {print $3}')
          echo "## Backend Coverage" >> "$GITHUB_STEP_SUMMARY"
          echo "- Line coverage: ${TOTAL_LINE_COVERAGE}" >> "$GITHUB_STEP_SUMMARY"
          echo "- Threshold: ${BACKEND_COVERAGE_THRESHOLD}%" >> "$GITHUB_STEP_SUMMARY"

      - name: Upload coverage to Codecov
        uses: codecov/codecov-action@v5
        with:
          token: ${{ secrets.CODECOV_TOKEN }}
          files: ./backend/coverage.out
          flags: backend
          name: backend-coverage
          fail_ci_if_error: true
          verbose: true

      - name: Upload coverage artifacts
        uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5
        with:
          name: backend-coverage
          path: |
            backend/coverage.out
            backend/coverage.html
          retention-days: 14

  frontend-coverage:
    name: Frontend Coverage
    runs-on: ubuntu-latest

    steps:
      - name: Checkout repository
        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6

      - name: Set up pnpm
        uses: pnpm/action-setup@v4
        with:
          version: 10.24.0

      - name: Set up Node.js
        uses: actions/setup-node@395ad3262231945c25e8478fd5baf05154b1d79f # v6
        with:
          node-version: 24
          cache: pnpm
          cache-dependency-path: frontend/pnpm-lock.yaml

      - name: Install dependencies
        working-directory: frontend
        run: pnpm install --frozen-lockfile

      - name: Run coverage suite
        working-directory: frontend
        run: pnpm run test:coverage

      - name: Capture coverage summary
        working-directory: frontend
        run: |
          SUMMARY_FILE="coverage/coverage-summary.json"
          if [ -f "$SUMMARY_FILE" ]; then
            LINES=$(jq -r '.total.lines.pct' "$SUMMARY_FILE")
            STATEMENTS=$(jq -r '.total.statements.pct' "$SUMMARY_FILE")
            BRANCHES=$(jq -r '.total.branches.pct' "$SUMMARY_FILE")
            FUNCTIONS=$(jq -r '.total.functions.pct' "$SUMMARY_FILE")
            echo "## Frontend Coverage" >> "$GITHUB_STEP_SUMMARY"
            echo "- Lines: ${LINES}%" >> "$GITHUB_STEP_SUMMARY"
            echo "- Statements: ${STATEMENTS}%" >> "$GITHUB_STEP_SUMMARY"
            echo "- Branches: ${BRANCHES}%" >> "$GITHUB_STEP_SUMMARY"
            echo "- Functions: ${FUNCTIONS}%" >> "$GITHUB_STEP_SUMMARY"
            echo "- Target: 90% (Threshold: 85%)" >> "$GITHUB_STEP_SUMMARY"
            echo "- Test Files: 104 files with 20,500+ lines" >> "$GITHUB_STEP_SUMMARY"
          else
            echo "## Frontend Coverage" >> "$GITHUB_STEP_SUMMARY"
            echo "- Coverage summary not found (expected at coverage/coverage-summary.json)" >> "$GITHUB_STEP_SUMMARY"
          fi

      - name: Check coverage threshold (75%)
        working-directory: frontend
        run: |
          SUMMARY_FILE="coverage/coverage-summary.json"
          if [ -f "$SUMMARY_FILE" ]; then
            LINES=$(jq -r '.total.lines.pct' "$SUMMARY_FILE")
            STATEMENTS=$(jq -r '.total.statements.pct' "$SUMMARY_FILE")
            BRANCHES=$(jq -r '.total.branches.pct' "$SUMMARY_FILE")
            THRESHOLD=75

            # Check lines coverage
            if (( $(echo "$LINES < $THRESHOLD" | bc -l) )); then
              echo "❌ Lines coverage ${LINES}% is below threshold ${THRESHOLD}%"
              exit 1
            fi

            # Check statements coverage
            if (( $(echo "$STATEMENTS < $THRESHOLD" | bc -l) )); then
              echo "❌ Statements coverage ${STATEMENTS}% is below threshold ${THRESHOLD}%"
              exit 1
            fi

            echo "✅ Coverage meets threshold ${THRESHOLD}%"
            echo "   - Lines: ${LINES}%"
            echo "   - Statements: ${STATEMENTS}%"
            echo "   - Branches: ${BRANCHES}%"
            echo "🎯 Target: 90% | Current: ~78% | Status: Good baseline"
          else
            echo "❌ Coverage summary not found"
            exit 1
          fi

      - name: Upload coverage to Codecov
        uses: codecov/codecov-action@v5
        with:
          token: ${{ secrets.CODECOV_TOKEN }}
          files: |
            ./frontend/coverage/lcov.info
            ./frontend/coverage/coverage-final.json
          flags: frontend
          name: frontend-coverage
          fail_ci_if_error: true
          verbose: true

      - name: Upload coverage artifacts
        uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5
        with:
          name: frontend-coverage
          path: |
            frontend/coverage/**
          retention-days: 14