name: Build & Test

on:
  push:
    branches:
      - main
  pull_request:

jobs:
  test:
    name: Run Swift Tests (${{ matrix.name }})
    runs-on: macos-latest
    # A hung test must fail fast, not hold a runner for GitHub's 360-minute
    # default (observed: intermittent app-suite hangs starving the queue).
    # The long steps carry tighter individual bounds (5-minute test watchdog,
    # 6-minute benchmark step, 10-minute floor gate that may re-run the
    # benchmarks up to twice on a noisy runner); this is the backstop.
    timeout-minutes: 25

    strategy:
      fail-fast: false # Don't cancel other matrix jobs when one fails
      matrix:
        include:
          - name: app
            path: .
          - name: BitLogger
            path: localPackages/BitLogger
          - name: BitFoundation
            path: localPackages/BitFoundation

    steps:
      - name: Checkout code
        uses: actions/checkout@v5

      # Use the Xcode-bundled Swift toolchain: it always matches the SDK on
      # the runner image. A standalone swift.org toolchain (setup-swift) broke
      # whenever the image's Xcode moved ahead of it ("this SDK is not
      # supported by the compiler").
      - name: Note toolchain version (cache key)
        id: swift-version
        run: echo "version=$(swift --version 2>/dev/null | head -1 | shasum | cut -c1-12)" >> "$GITHUB_OUTPUT"

      - name: Cache build artifacts
        uses: actions/cache@v4
        with:
          path: ${{ matrix.path }}/.build
          key: ${{ runner.os }}-${{ steps.swift-version.outputs.version }}-${{ matrix.name }}-${{ hashFiles(format('{0}/**/*.swift', matrix.path), format('{0}/**/Package.resolved', matrix.path)) }}
          restore-keys: |
            ${{ runner.os }}-${{ steps.swift-version.outputs.version }}-${{ matrix.name }}-${{ hashFiles(format('{0}/**/Package.resolved', matrix.path)) }}
            ${{ runner.os }}-${{ steps.swift-version.outputs.version }}-${{ matrix.name }}-

      - name: Build tests
        # Built separately so the hang watchdog below times only test
        # execution: a cold-cache coverage build on a slow runner can
        # legitimately take several minutes, and is already bounded by the
        # 15-minute job timeout.
        run: swift build --build-tests --enable-code-coverage --package-path ${{ matrix.path }}

      - name: Run Tests
        # Perf benchmarks are excluded here and run in their own serial step
        # below: measuring while parallel test processes contend for cores
        # produces noisy numbers, and the XCTest measure machinery has hung
        # intermittently under parallel workers on loaded runners. Excluded
        # via --skip (not just the env guard): every app run since the
        # baselines landed timed out at the 15-minute job limit with the
        # baseline tests dispatched into the parallel phase.
        #
        # The watchdog samples any still-running test processes after 5
        # minutes (the suite passes in seconds when healthy; the build is
        # done by this step) and kills the run, so a hang fails fast with
        # stacks in the log instead of a silent timeout.
        env:
          BITCHAT_SKIP_PERF_BASELINES: "1"
        run: |
          swift test --skip-build --parallel --quiet --enable-code-coverage \
            --skip PerformanceBaselineTests \
            --package-path ${{ matrix.path }} &
          test_pid=$!
          (
            sleep 300
            if kill -0 "$test_pid" 2>/dev/null; then
              echo "::group::Tests still running after 5 minutes — sampling before kill"
              for pid in $(pgrep -if 'swiftpm-testing|xctest|PackageTests' || true); do
                echo "--- sample of pid $pid ---"
                sample "$pid" 5 2>/dev/null || true
              done
              echo "::endgroup::"
              pkill -KILL -P "$test_pid" 2>/dev/null || true
              kill -KILL "$test_pid" 2>/dev/null || true
            fi
          ) &
          watchdog_pid=$!
          wait "$test_pid" && status=0 || status=$?
          kill "$watchdog_pid" 2>/dev/null || true
          exit "$status"

      # Benchmarks run serially on an otherwise idle runner for stable
      # numbers; BITCHAT_PERF_LOG captures the PERF[...] lines for the gate.
      - name: Run performance benchmarks (serial)
        if: matrix.name == 'app'
        timeout-minutes: 6
        env:
          BITCHAT_PERF_LOG: ${{ github.workspace }}/perf-output.log
        run: swift test --quiet --filter PerformanceBaselineTests

      # Order-of-magnitude performance regression gate. Floors are deliberately
      # generous (see bitchatTests/Performance/perf-floors.json) so this
      # catches algorithmic regressions, never runner variance. If a metric
      # still lands below floor (a saturated runner can dip one), the script
      # re-runs the benchmarks — appending to the same log and keeping each
      # benchmark's best value per metric — so noise clears on retry while a
      # real regression fails every attempt. Floors are never lowered by this.
      - name: Performance floor gate
        if: matrix.name == 'app'
        timeout-minutes: 10
        run: ./scripts/check-perf-floors.sh perf-output.log

      # Informational only: surfaces per-file and total line coverage in the
      # job log so coverage trends are visible on every PR. No thresholds —
      # this must never be the reason a build goes red.
      - name: Coverage summary
        run: |
          BIN_PATH=$(swift build --show-bin-path --package-path ${{ matrix.path }})
          PROF="$BIN_PATH/codecov/default.profdata"
          XCTEST=$(find "$BIN_PATH" -maxdepth 1 -name '*.xctest' | head -1)
          BINARY="$XCTEST/Contents/MacOS/$(basename "$XCTEST" .xctest)"
          if [ -f "$PROF" ] && [ -f "$BINARY" ]; then
            xcrun llvm-cov report "$BINARY" -instr-profile "$PROF" \
              -ignore-filename-regex='(Tests|\.build|checkouts|Mocks|_PreviewHelpers)' || true
          else
            echo "No coverage data found; skipping summary."
          fi

  # SPM tests do not link the shipping app targets. This job covers the
  # iOS-conditional paths and both universal Release link configurations.
  ios-build:
    name: Build Release apps (universal)
    runs-on: macos-latest
    timeout-minutes: 15

    steps:
      - name: Checkout code
        uses: actions/checkout@v5

      - name: Build iOS (simulator, no signing)
        # Build both simulator architectures so CI validates every vendored
        # Arti simulator slice and the configuration that ships.
        run: |
          set -o pipefail
          xcodebuild -project bitchat.xcodeproj \
            -scheme "bitchat (iOS)" \
            -configuration Release \
            -sdk iphonesimulator \
            -destination 'generic/platform=iOS Simulator' \
            ARCHS='arm64 x86_64' \
            ONLY_ACTIVE_ARCH=NO \
            CODE_SIGNING_ALLOWED=NO \
            build

      - name: Build macOS (universal, no signing)
        run: |
          set -o pipefail
          xcodebuild -project bitchat.xcodeproj \
            -scheme "bitchat (macOS)" \
            -configuration Release \
            -destination 'generic/platform=macOS' \
            ARCHS='arm64 x86_64' \
            ONLY_ACTIVE_ARCH=NO \
            CODE_SIGNING_ALLOWED=NO \
            build

  # Advisory only: SwiftLint reports style violations without ever failing the
  # build. Runs in a pinned container (no Xcode plugin, no pbxproj changes) so
  # it can never break the documented xcodebuild path or block a merge.
  lint:
    name: SwiftLint (advisory)
    runs-on: ubuntu-latest
    timeout-minutes: 15
    # This job runs a third-party container image, so give it the least
    # privilege we can: a read-only token, and no credentials left in the
    # checkout for the container to find.
    permissions:
      contents: read
    container:
      # Tag for readability, digest for immutability (tags can be repointed).
      # Bump both together, deliberately — never a floating tag.
      image: ghcr.io/realm/swiftlint:0.65.0@sha256:a482729f4b58741875af1566f23397f3f6db300372756fc31606d0a4527fab9e
    continue-on-error: true
    steps:
      - uses: actions/checkout@v5
        with:
          persist-credentials: false
      - name: Run SwiftLint
        run: swiftlint lint --reporter github-actions-logging