gobby-code 1.3.3

fn count_run_step(workflow: &str, command: &str) -> usize {
    workflow
        .lines()
        .filter(|line| line.trim() == format!("run: {command}"))
        .count()
}

const RELEASE_WORKFLOWS: [(&str, &str); 3] = [
    (
        "gcode",
        include_str!("../../../.github/workflows/release-gcode.yml"),
    ),
    (
        "ghook",
        include_str!("../../../.github/workflows/release-ghook.yml"),
    ),
    (
        "gwiki",
        include_str!("../../../.github/workflows/release-gwiki.yml"),
    ),
];

const GH_RELEASE_CREATE: &str = r#"gh release create "$tag" "${assets[@]}" --repo "$GITHUB_REPOSITORY" --generate-notes --verify-tag"#;
const TAIKI_INSTALL_ACTION_SHA: &str = "f5b277aa8941a90c16bc1cd6ab9363e0502b7d31";
const ACTIONS_CHECKOUT_SHA: &str = "34e114876b0b11c390a56381ad16ebd13914f8d5";
const DTOLNAY_RUST_TOOLCHAIN_SHA: &str = "29eef336d9b2848a0b548edc03f92a220660cdb8";
const ACTIONS_CACHE_SHA: &str = "0057852bfaa89a56745cba8c7296529d2fc39830";
const ACTIONS_UPLOAD_ARTIFACT_SHA: &str = "ea165f8d65b6e75b540449e92b4886f43607fa02";

fn release_upload_marker(workflow: &str) -> Option<usize> {
    workflow
        .find("softprops/action-gh-release")
        .or_else(|| workflow.find("gh release create"))
}

#[test]
fn release_workflows_have_one_default_and_one_no_default_check() {
    // Crates with a library target run doctests with and without default
    // features. The binary-only crate (gobby-hooks) has no lib target, so
    // `cargo test --doc -p <pkg>` errors
    // with "no library targets found" and must NOT appear in their workflows.
    let lib_cases = [(
        include_str!("../../../.github/workflows/release-gcode.yml"),
        "gobby-code",
    )];
    let bin_cases = [(
        include_str!("../../../.github/workflows/release-ghook.yml"),
        "gobby-hooks",
    )];

    for (workflow, package) in lib_cases.iter().chain(bin_cases.iter()).copied() {
        assert_eq!(
            count_run_step(
                workflow,
                &format!("cargo clippy -p {package} -- -D warnings")
            ),
            1,
            "{package} default clippy step count"
        );
        assert_eq!(
            count_run_step(
                workflow,
                &format!("cargo clippy -p {package} --no-default-features -- -D warnings")
            ),
            1,
            "{package} no-default clippy step count"
        );
        assert_eq!(
            count_run_step(
                workflow,
                &format!("cargo nextest run --profile ci -p {package}")
            ),
            1,
            "{package} default test step count"
        );
        assert_eq!(
            count_run_step(
                workflow,
                &format!("cargo nextest run --profile ci -p {package} --no-default-features")
            ),
            1,
            "{package} no-default test step count"
        );
    }

    for (workflow, package) in lib_cases {
        assert_eq!(
            count_run_step(workflow, &format!("cargo test --doc -p {package}")),
            1,
            "{package} default doctest step count"
        );
        assert_eq!(
            count_run_step(
                workflow,
                &format!("cargo test --doc -p {package} --no-default-features")
            ),
            1,
            "{package} no-default doctest step count"
        );
    }

    for (workflow, package) in bin_cases {
        assert_eq!(
            count_run_step(workflow, &format!("cargo test --doc -p {package}")),
            0,
            "{package} is binary-only and must not run doctests"
        );
        assert_eq!(
            count_run_step(
                workflow,
                &format!("cargo test --doc -p {package} --no-default-features")
            ),
            0,
            "{package} is binary-only and must not run doctests (no default features)"
        );
    }
}

#[test]
fn release_gcore_uses_workspace_validation() {
    let workflow = include_str!("../../../.github/workflows/release-gcore.yml");

    assert_eq!(
        count_run_step(
            workflow,
            "cargo clippy -p gobby-core --all-targets -- -D warnings"
        ),
        1,
        "gobby-core release default clippy step count"
    );
    assert_eq!(
        count_run_step(
            workflow,
            "cargo clippy -p gobby-core --all-targets --no-default-features -- -D warnings"
        ),
        1,
        "gobby-core release no-default clippy step count"
    );
    assert_eq!(
        count_run_step(workflow, "cargo nextest run --profile ci --workspace"),
        1,
        "gobby-core release default test step count"
    );
    assert_eq!(
        count_run_step(
            workflow,
            "cargo nextest run --profile ci --workspace --no-default-features"
        ),
        1,
        "gobby-core release no-default test step count"
    );
    assert_eq!(
        count_run_step(workflow, "cargo test --doc --workspace"),
        1,
        "gobby-core release default doctest step count"
    );
    assert_eq!(
        count_run_step(
            workflow,
            "cargo test --doc --workspace --no-default-features"
        ),
        1,
        "gobby-core release no-default doctest step count"
    );
}

#[test]
fn release_workflows_use_github_cli_release_creation() {
    for (tool, workflow) in RELEASE_WORKFLOWS {
        assert!(
            !workflow.contains("softprops/action-gh-release"),
            "release-{tool}.yml should use the GitHub CLI instead of softprops"
        );
        assert!(
            workflow.contains("GH_TOKEN: ${{ github.token }}"),
            "release-{tool}.yml should authenticate gh with github.token"
        );
        assert!(
            !workflow.contains("GITHUB_RELEASE_TOKEN"),
            "release-{tool}.yml should use GH_TOKEN instead of custom auth env"
        );
        assert!(
            !workflow.contains("gh auth login --with-token"),
            "release-{tool}.yml should let gh consume GH_TOKEN directly"
        );
        assert!(
            workflow.contains(GH_RELEASE_CREATE),
            "release-{tool}.yml should create the release with repo context, assets, generated notes, and tag verification"
        );
        assert!(
            workflow.contains(&format!(
                "assets=({tool}-*.tar.gz {tool}-*.zip {tool}-*.tar.gz.sha256 {tool}-*.zip.sha256)"
            )),
            "release-{tool}.yml should include archive-specific checksum files in the gh release asset array"
        );
    }
}

#[test]
fn ci_workflow_pins_taiki_install_actions_by_sha() {
    let workflow = include_str!("../../../.github/workflows/ci.yml");

    assert_eq!(
        workflow.matches("taiki-e/install-action@nextest").count(),
        0
    );
    assert_eq!(
        workflow
            .matches("taiki-e/install-action@cargo-llvm-cov")
            .count(),
        0
    );
    assert_eq!(
        workflow
            .matches(&format!(
                "taiki-e/install-action@{TAIKI_INSTALL_ACTION_SHA}"
            ))
            .count(),
        4
    );
    assert!(workflow.contains("tool: nextest"));
    assert!(workflow.contains("tool: cargo-llvm-cov"));
}

#[test]
fn ci_workflow_pins_core_actions_by_sha() {
    let workflow = include_str!("../../../.github/workflows/ci.yml");

    assert_eq!(
        workflow
            .matches(&format!("actions/checkout@{ACTIONS_CHECKOUT_SHA}"))
            .count(),
        3
    );
    assert_eq!(workflow.matches("actions/checkout@v4").count(), 0);
    assert_eq!(workflow.matches("persist-credentials: false").count(), 3);

    assert_eq!(
        workflow
            .matches(&format!(
                "dtolnay/rust-toolchain@{DTOLNAY_RUST_TOOLCHAIN_SHA}"
            ))
            .count(),
        3
    );
    assert_eq!(workflow.matches("dtolnay/rust-toolchain@stable").count(), 0);
    assert_eq!(workflow.matches("toolchain: stable").count(), 3);

    assert_eq!(
        workflow
            .matches(&format!("actions/cache@{ACTIONS_CACHE_SHA}"))
            .count(),
        3
    );
    assert_eq!(workflow.matches("actions/cache@v4").count(), 0);

    assert_eq!(
        workflow
            .matches(&format!(
                "actions/upload-artifact@{ACTIONS_UPLOAD_ARTIFACT_SHA}"
            ))
            .count(),
        1
    );
    assert_eq!(workflow.matches("actions/upload-artifact@v4").count(), 0);
}

#[test]
fn ci_workflow_runs_gcode_graph_standalone_with_backends() {
    let workflow = include_str!("../../../.github/workflows/ci.yml");

    assert!(workflow.contains("gcode-graph-standalone:"));
    assert!(workflow.contains("image: falkordb/falkordb:latest"));
    assert!(workflow.contains("REDIS_ARGS: \"--requirepass gobbyfalkor\""));
    assert!(workflow.contains(
        "GCODE_GRAPH_STANDALONE_DATABASE_URL: postgresql://gobby:gobby_dev@127.0.0.1:15432/gobby"
    ));
    assert!(workflow.contains("GCODE_GRAPH_STANDALONE_FALKOR_HOST: 127.0.0.1"));
    assert!(workflow.contains("GCODE_GRAPH_STANDALONE_FALKOR_PORT: \"16379\""));
    assert!(workflow.contains("GCODE_GRAPH_STANDALONE_FALKOR_PASSWORD: gobbyfalkor"));
    assert!(workflow.contains("docker build \\"));
    assert!(workflow.contains("--build-arg PG_SEARCH_VERSION=0.23.4 \\"));
    assert!(workflow.contains(
        "--build-arg PG_SEARCH_SHA256=6b042d61d156ca5fdcb1c417e291d90bffe3026848890be30bf6e578146b4676 \\"
    ));
    assert!(workflow.contains("docker run --detach \\"));
    assert!(workflow.contains("SELECT 1 FROM pg_extension WHERE extname='pg_search'"));
    assert!(workflow.contains("cargo run -p gobby-code -- setup \\"));
    assert!(
        workflow.contains("cargo nextest run --profile ci -p gobby-code --test graph_standalone")
    );
}

#[test]
fn release_gwiki_validates_dependencies_without_python_helper() {
    let workflow = include_str!("../../../.github/workflows/release-gwiki.yml");

    assert!(
        !workflow.contains("python3"),
        "release-gwiki.yml should validate dependencies inline without python3"
    );
    assert!(
        !workflow.contains(".github/scripts/verify-gwiki-deps.py"),
        "release-gwiki.yml should not reference the removed dependency helper"
    );
}

#[test]
fn release_workflows_generate_and_upload_archive_checksums() {
    for (tool, workflow) in RELEASE_WORKFLOWS {
        let checksum_step = workflow
            .find("name: Generate SHA-256 checksums")
            .unwrap_or_else(|| panic!("release-{tool}.yml missing checksum generation step"));
        let release_upload = release_upload_marker(workflow)
            .unwrap_or_else(|| panic!("release-{tool}.yml missing GitHub release upload"));

        assert!(
            checksum_step < release_upload,
            "release-{tool}.yml should generate checksums before release upload"
        );

        let checksum_body = &workflow[checksum_step..release_upload];
        assert!(
            checksum_body.contains(&format!("{tool}-*.tar.gz")),
            "release-{tool}.yml should generate tar.gz checksums"
        );
        assert!(
            checksum_body.contains(&format!("{tool}-*.zip")),
            "release-{tool}.yml should generate zip checksums"
        );
        assert!(
            checksum_body.contains(r#"sha256sum "$asset" > "$asset.sha256""#),
            "release-{tool}.yml should write per-asset checksum files"
        );
        assert!(
            checksum_body.contains("shell: bash"),
            "release-{tool}.yml should run checksum generation with bash"
        );

        let release_body = &workflow[release_upload..];
        assert!(
            workflow[checksum_step..].contains(&format!(
                "assets=({tool}-*.tar.gz {tool}-*.zip {tool}-*.tar.gz.sha256 {tool}-*.zip.sha256)"
            )),
            "release-{tool}.yml should add archive-specific checksum files to the gh release asset array"
        );
        assert!(
            release_body.contains(GH_RELEASE_CREATE),
            "release-{tool}.yml should upload checksum files during gh release create"
        );
    }
}