pull_request.yml

name: "Pull Request"

on:
  pull_request:
    branches:
      - "**"

permissions:
  actions: read
  checks: write
  security-events: write
  pull-requests: write
  contents: read
  packages: write

jobs:
  validate-xml:
    name: "Validate XML"
    runs-on: ubuntu-latest
    steps:
      - name: "Git Checkout"
        uses: actions/checkout@v4

      - name: "Run XMLStarlet"
        shell: "bash"
        run: |
          sudo apt-get update
          sudo apt-get install xmlstarlet
          scripts/xml/validate_xml.sh

  ktfmt:
    name: "ktfmt"
    runs-on: ubuntu-latest
    steps:
      - name: "Git Checkout"
        uses: actions/checkout@v4

      - name: "Run ktfmt"
        shell: "bash"
        run: |
          INSTALL_KTFMT_WHEN_MISSING=true ONLY_TOUCHED_FILES=false scripts/ktfmt/validate_ktfmt.sh

  validate-shell-scripts:
    name: "Validate Shell Scripts"
    runs-on: ubuntu-latest
    steps:
      - name: "Git Checkout"
        uses: actions/checkout@v4

      - name: "Run ShellCheck"
        shell: "bash"
        run: |
          scripts/shellcheck/validate_shell_scripts.sh

  codeql-node:
    name: "CodeQL Analysis - Node.js/TypeScript"
    runs-on: ubuntu-latest
    timeout-minutes: 360
    permissions:
      actions: read
      contents: read
      security-events: write
    strategy:
      fail-fast: false
      matrix:
        language: [ 'typescript' ]
    steps:
      - name: "Git Checkout"
        uses: actions/checkout@v4

      - name: "Initialize CodeQL"
        uses: github/codeql-action/init@v3
        with:
          languages: ${{ matrix.language }}
          queries: security-extended,security-and-quality

      - uses: ./.github/actions/setup-auto-mobile-npm-package

      - name: "Build TypeScript"
        run: npm run build

      - name: "Perform CodeQL Analysis"
        uses: github/codeql-action/analyze@v3
        with:
          category: "/language:${{matrix.language}}"

  npm-audit:
    name: "NPM Security Audit"
    runs-on: ubuntu-latest
    steps:
      - name: "Git Checkout"
        uses: actions/checkout@v4

      - uses: ./.github/actions/setup-auto-mobile-npm-package

      - name: "Run NPM Audit"
        run: |
          npm audit --audit-level=moderate --json > npm-audit-results.json || true
        continue-on-error: true

      - name: "Upload NPM Audit Results"
        uses: actions/upload-artifact@v4.4.0
        if: always()
        with:
          name: npm-audit-results
          path: npm-audit-results.json

  mcp-build-and-test:
    name: "Node TypeScript Build and Test"
    runs-on: ubuntu-latest
    steps:
      - name: "Git Checkout"
        uses: actions/checkout@v4

      - uses: ./.github/actions/setup-auto-mobile-npm-package

      - name: "Run Lint"
        run: npm run lint

      - name: "Run Tests"
        run: npm run test

  junit-runner-unit-tests:
    name: "Run JUnit Runner Unit Tests"
    runs-on: ubuntu-latest
    defaults:
      run:
        working-directory: android
    steps:
      - name: "Git Checkout"
        uses: actions/checkout@v4

      - uses: ./.github/actions/setup-auto-mobile-npm-package

      # Only run unit tests without Emulator
      - uses: ./.github/actions/gradle-task-run
        with:
          gradle-tasks: ":junit-runner:test"
          gradle-project-directory: "android"
          reuse-configuration-cache: true
          gradle-encryption-key: ${{ secrets.GRADLE_ENCRYPTION_KEY }}

      # Run AutoMobile tests that require emulator
      # - uses: ./.github/actions/android-emulator
      #   with:
      #     script: "./gradlew :junit-runner:test --rerun-tasks"
      #     working-directory: './android/'

      # - name: "Publish Test Report"
      #   uses: mikepenz/action-junit-report@v4
      #   if: always()
      #   with:
      #     check_name: "JUnit Runner Test Report"
      #     report_paths: '**/build/test-results/**/*.xml'

  kotlin-test-author-unit-tests:
    name: "Run Kotlin Test Author Unit Tests"
    runs-on: ubuntu-latest
    defaults:
      run:
        working-directory: android
    steps:
      - name: "Git Checkout"
        uses: actions/checkout@v4

      - uses: ./.github/actions/gradle-task-run
        with:
          gradle-tasks: ":kotlinTestAuthor:test"
          gradle-project-directory: "android"
          reuse-configuration-cache: true
          gradle-encryption-key: ${{ secrets.GRADLE_ENCRYPTION_KEY }}

      - name: "Publish Test Report"
        uses: mikepenz/action-junit-report@v4
        if: always()
        with:
          check_name: "Kotlin Test Author Test Report"
          report_paths: '**/build/test-results/**/*.xml'

  android-accessibility-service-unit-tests:
    name: "Run Accessibility Service Unit Tests"
    runs-on: ubuntu-latest
    defaults:
      run:
        working-directory: android
    steps:
      - name: "Git Checkout"
        uses: actions/checkout@v4

      - uses: ./.github/actions/gradle-task-run
        with:
          gradle-tasks: ":accessibility-service:testDebugUnitTest"
          gradle-project-directory: "android"
          reuse-configuration-cache: true
          gradle-encryption-key: ${{ secrets.GRADLE_ENCRYPTION_KEY }}

  build-junit-runner-library:
    name: "Build JUnitRunner Library"
    runs-on: ubuntu-latest
    defaults:
      run:
        working-directory: android
    steps:
      - name: "Git Checkout"
        uses: actions/checkout@v4

      - uses: ./.github/actions/setup-auto-mobile-npm-package

      - uses: ./.github/actions/gradle-task-run
        with:
          gradle-tasks: ":junitRunner:assemble"
          gradle-project-directory: "android"
          reuse-configuration-cache: true
          gradle-encryption-key: ${{ secrets.GRADLE_ENCRYPTION_KEY }}

      - name: "Store AAR"
        uses: actions/upload-artifact@v4.4.0
        with:
          name: aar
          path: core/build/outputs/aar/core-debug.aar

  build-kotlin-test-author-clikt-app:
    name: "Build Kotlin Test Author Clikt App"
    runs-on: ubuntu-latest
    defaults:
      run:
        working-directory: android
    steps:
      - name: "Git Checkout"
        uses: actions/checkout@v4

      - uses: ./.github/actions/gradle-task-run
        with:
          gradle-tasks: ":kotlinTestAuthor:assembleDist"
          gradle-project-directory: "android"
          reuse-configuration-cache: true
          gradle-encryption-key: ${{ secrets.GRADLE_ENCRYPTION_KEY }}

      - name: "Store AAR"
        uses: actions/upload-artifact@v4.4.0
        with:
          name: aar
          path: core/build/outputs/aar/core-debug.aar

  build-android-accessibility-service:
    name: "Build Accessibility Service"
    runs-on: ubuntu-latest
    defaults:
      run:
        working-directory: android
    steps:
      - name: "Git Checkout"
        uses: actions/checkout@v4

      - uses: ./.github/actions/gradle-task-run
        with:
          gradle-tasks: ":accessibility-service:assembleDebug"
          gradle-project-directory: "android"
          reuse-configuration-cache: true
          gradle-encryption-key: ${{ secrets.GRADLE_ENCRYPTION_KEY }}

  build-playground-app:
    name: "Build Playground App"
    runs-on: ubuntu-latest
    defaults:
      run:
        working-directory: android
    steps:
      - name: "Git Checkout"
        uses: actions/checkout@v4

      - uses: ./.github/actions/setup-auto-mobile-npm-package

      - uses: ./.github/actions/gradle-task-run
        with:
          gradle-tasks: ":playground:app:assembleDebug"
          gradle-project-directory: "android"
          reuse-configuration-cache: true
          gradle-encryption-key: ${{ secrets.GRADLE_ENCRYPTION_KEY }}

      - name: "Store Sample APK"
        uses: actions/upload-artifact@v4.4.0
        if: success()  # Only upload if build succeeded
        with:
          name: playground-app-apk
          path: android/playground/app/build/outputs/apk/debug/playground-app-debug.apk