ci.yml

name: CI

on:
  push:
    branches: [ main ]
  pull_request:

permissions:
  contents: read

jobs:
  test:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v5

      - uses: actions/setup-dotnet@v4
        with:
          dotnet-version: "8.0.x"

      - name: Restore
        run: dotnet restore

      # Build also runs the Roslyn analyzers (latest-recommended); warnings are
      # errors, so a static-analysis finding fails the build.
      - name: Build (static analysis)
        run: dotnet build -c Release --no-restore

      # The xUnit suite runs against Moq-mocked DotPulsar IProducer/IConsumer/IMessage —
      # no Pulsar, no network.
      # The conformance runner also writes results.json (ADR-0032) to BQ_CONFORMANCE_RESULTS.
      - name: Test with coverage gate (>=90% line)
        env:
          BQ_CONFORMANCE_RESULTS: ${{ runner.temp }}/results.json
        run: dotnet test -c Release /p:CollectCoverage=true /p:CoverletOutputFormat=cobertura /p:Threshold=90 /p:ThresholdType=line /p:ThresholdStat=total

      - name: Upload conformance results
        if: ${{ always() }}
        uses: actions/upload-artifact@v4
        with:
          name: conformance-results
          path: ${{ runner.temp }}/results.json
          if-no-files-found: warn

  conformance:
    name: Conformance suite in sync
    runs-on: ubuntu-latest
    env:
      BQ_CONFORMANCE_VERSION: 1.8.0
      # sha256 of that release's fetch.sh: the script runs on the runner, so it is pinned rather
      # than trusted from a mutable tag. Bump together with BQ_CONFORMANCE_VERSION.
      BQ_FETCH_SH_SHA256: 8bb6ba567b288fb0ac71a70fd17041b2503df119e01998d76fdad372570bf849
    steps:
      - uses: actions/checkout@v5
      - name: Verify vendored conformance matches the pinned release asset
        run: |
          curl --fail --silent --show-error --location --output "$RUNNER_TEMP/fetch.sh" \
            "https://raw.githubusercontent.com/BabelQueue/conformance/v${BQ_CONFORMANCE_VERSION}/fetch.sh"
          echo "${BQ_FETCH_SH_SHA256}  $RUNNER_TEMP/fetch.sh" | sha256sum -c -
          bash "$RUNNER_TEMP/fetch.sh" --check "$BQ_CONFORMANCE_VERSION" "tests/BabelQueue.Pulsar.Tests/conformance"

  ci-green:
    name: CI green
    runs-on: ubuntu-latest
    needs: [test, conformance]
    if: ${{ always() }}
    steps:
      - name: Fail if any required job did not pass
        run: |
          if ${{ contains(needs.*.result, 'failure') || contains(needs.*.result, 'cancelled') }}; then
            echo "A required job failed or was cancelled."
            exit 1
          fi