name: Quant Engine CI/CD Pipeline

on:
  push:
    branches: [ main ]
  pull_request:
    branches: [ main ]

# ─────────────────────────────────────────────────────────────────
# Synology DS216j (ARMv7l 32-bit) 환경 제약
#   - Python: /usr/bin/python3 (3.8.12)
#   - Node.js 18: /usr/local/bin (appstore)
#   - numpy/pandas: 공식 휠 없음, gcc 미설치 → 소스 빌드 불가
#
# CI 역할: 코드 구조 검증 게이트 (순수 Python, yaml/json)
#   - Validate Specs / Formula Registry / Coverage / Behavioral Coverage
# 통합 테스트(run_release_dag, ingest 등)는 로컬에서 실행
# ─────────────────────────────────────────────────────────────────

jobs:
  validate-and-build:
    runs-on: self-hosted

    steps:
    - name: Checkout Code
      run: |
        if [ -d .git ]; then
          git remote set-url origin http://x-access-token:${{ secrets.GITHUB_TOKEN }}@192.168.123.100:8418/KimJaeHyun/myfinance.git
        else
          git init
          git remote add origin http://x-access-token:${{ secrets.GITHUB_TOKEN }}@192.168.123.100:8418/KimJaeHyun/myfinance.git
        fi
        git fetch origin ${{ github.sha }} --depth=1
        git reset --hard FETCH_HEAD

    - name: Configure Runtime Paths
      run: |
        # Node.js 18: /usr/local/bin (appstore symlink)
        export PATH=/usr/local/bin:$PATH
        echo "/usr/local/bin" >> $GITHUB_PATH
        echo "=== 런타임 확인 ==="
        /usr/bin/python3 --version
        node --version
        npm --version

    - name: Setup Python Environment
      run: |
        # 순수 Python 패키지만 설치 (numpy/pandas 제외 — ARMv7l 휠 없음)
        VENV=/volume1/gitea/python_venv
        if ! "$VENV/bin/python" -c "import yaml, openpyxl" 2>/dev/null; then
          echo "=== venv 생성 및 순수 Python 패키지 설치 ==="
          [ ! -f "$VENV/bin/pip" ] && /usr/bin/python3 -m venv "$VENV"
          "$VENV/bin/pip" install --upgrade pip --quiet
          "$VENV/bin/pip" install pyyaml openpyxl --quiet
          if [ -f requirements.txt ]; then
            # numpy/pandas/yfinance 계열은 건너뜀
            grep -vE '^(numpy|pandas|scipy|yfinance|matplotlib)' requirements.txt \
              | "$VENV/bin/pip" install -r /dev/stdin --quiet --prefer-binary 2>/dev/null || true
          fi
          echo "venv 설치 완료"
        else
          echo "=== venv 재사용: $("$VENV/bin/python" --version 2>&1) ==="
        fi
        echo "$VENV/bin" >> $GITHUB_PATH

    - name: Install Node Dependencies
      run: npm install --quiet

    - name: Validate Specs
      run: python3 tools/validate_specs.py

    - name: Validate Formula Registry
      run: python3 tools/validate_formula_registry.py

    - name: Validate Golden Case Coverage
      run: python3 tools/validate_golden_coverage_100.py

    - name: Validate Behavioral Coverage
      run: python3 tools/validate_behavioral_coverage_v1.py --strict

    - name: Validate Harness Coverage Audit
      run: python3 tools/harness_coverage_auditor.py

    - name: Notify PR Result
      if: always() && github.event_name == 'pull_request'
      run: |
        STATUS="${{ job.status }}"
        PR_NUM="${{ github.event.pull_request.number }}"
        RUN_URL="${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}"
        if [ "$STATUS" = "success" ]; then
          MSG="✅ **CI PASS** — spec/registry/coverage gate OK\n\n[워크플로우 로그](${RUN_URL})"
        else
          MSG="❌ **CI FAIL** — 로그 확인 필요\n\n[워크플로우 로그](${RUN_URL})"
        fi
        curl -s -X POST "${{ github.api_url }}/repos/${{ github.repository }}/issues/${PR_NUM}/comments" \
          -H "Authorization: token ${{ secrets.GITHUB_TOKEN }}" \
          -H "Content-Type: application/json" \
          -d "{\"body\":\"${MSG}\"}"