error-strict-ci.yml

name: Error Strict CI

on:
  push:
    branches: [main, master, dev]
    paths:
      - ".github/workflows/error-strict-ci.yml"
      - "CMakeLists.txt"
      - "cmake/**"
      - "include/**"
      - "src/**"
      - "test/**"
      - "README.md"
      - "CHANGELOG.md"
      - "vix.json"
  pull_request:
    branches: [main, master, dev]
    paths:
      - ".github/workflows/error-strict-ci.yml"
      - "CMakeLists.txt"
      - "cmake/**"
      - "include/**"
      - "src/**"
      - "test/**"
      - "README.md"
      - "CHANGELOG.md"
      - "vix.json"
  workflow_dispatch:

permissions:
  contents: read

env:
  DEPS: >
    build-essential
    cmake
    ninja-build
    clang
    llvm
    lld
    g++
    cppcheck
    clang-tidy
    valgrind
    pkg-config
    git
  BUILD_JOBS: 2

jobs:
  build-test-sanitized:
    name: Sanitized Build and Tests (${{ matrix.compiler }})
    runs-on: ubuntu-latest
    strategy:
      fail-fast: false
      matrix:
        compiler: [clang, gcc]

    steps:
      - name: Checkout error repository
        uses: actions/checkout@v4
        with:
          fetch-depth: 0

      - name: Install dependencies
        run: |
          sudo apt-get update -y
          sudo apt-get install -y $DEPS

      - name: Select compiler
        run: |
          if [ "${{ matrix.compiler }}" = "clang" ]; then
            echo "CC=clang" >> "$GITHUB_ENV"
            echo "CXX=clang++" >> "$GITHUB_ENV"
          else
            echo "CC=gcc" >> "$GITHUB_ENV"
            echo "CXX=g++" >> "$GITHUB_ENV"
          fi

      - name: Configure
        run: |
          cmake -G Ninja -S . -B build-sanitize \
            -DCMAKE_BUILD_TYPE=Debug \
            -DCMAKE_EXPORT_COMPILE_COMMANDS=ON \
            -DVIX_ERROR_BUILD_TESTS=ON \
            -DVIX_ENABLE_SANITIZERS=ON

      - name: Build
        run: |
          cmake --build build-sanitize -j"${BUILD_JOBS}"

      - name: Print executables
        run: |
          echo "---- executables ----"
          find build-sanitize -type f -executable | sort || true

      - name: Run ctest
        run: |
          set -e
          cd build-sanitize
          if ctest --output-on-failure --timeout 90; then
            echo "All discovered tests passed."
          else
            echo "::warning::Some tests failed or no tests were discovered."
            test -f Testing/Temporary/LastTest.log && cat Testing/Temporary/LastTest.log || true
            exit 0
          fi

  static-analysis:
    name: Static Analysis
    runs-on: ubuntu-latest

    steps:
      - name: Checkout error repository
        uses: actions/checkout@v4
        with:
          fetch-depth: 0

      - name: Install dependencies
        run: |
          sudo apt-get update -y
          sudo apt-get install -y $DEPS

      - name: Configure for analysis
        run: |
          cmake -G Ninja -S . -B build-analyze \
            -DCMAKE_BUILD_TYPE=Debug \
            -DCMAKE_EXPORT_COMPILE_COMMANDS=ON \
            -DVIX_ERROR_BUILD_TESTS=ON \
            -DVIX_ENABLE_SANITIZERS=OFF

      - name: Run clang-tidy on source files
        run: |
          set +e
          find src test -name '*.cpp' -print0 2>/dev/null | xargs -0 -r -n1 -P2 clang-tidy -p build-analyze
          STATUS=$?
          if [ $STATUS -ne 0 ]; then
            echo "::warning::clang-tidy reported issues."
          else
            echo "clang-tidy completed successfully."
          fi
          exit 0

      - name: Run cppcheck on headers and sources
        run: |
          set +e
          cppcheck \
            --enable=all \
            --std=c++20 \
            --inconclusive \
            --quiet \
            --suppress=missingIncludeSystem \
            include/ src/ test/
          STATUS=$?
          if [ $STATUS -ne 0 ]; then
            echo "::warning::cppcheck reported issues."
          else
            echo "cppcheck completed successfully."
          fi
          exit 0

  valgrind:
    name: Valgrind Checks
    runs-on: ubuntu-latest
    timeout-minutes: 30

    steps:
      - name: Checkout error repository
        uses: actions/checkout@v4
        with:
          fetch-depth: 0

      - name: Install dependencies
        run: |
          sudo apt-get update -y
          sudo apt-get install -y $DEPS

      - name: Configure valgrind build
        run: |
          cmake -G Ninja -S . -B build-valgrind \
            -DCMAKE_BUILD_TYPE=Debug \
            -DVIX_ERROR_BUILD_TESTS=ON \
            -DVIX_ENABLE_SANITIZERS=OFF

      - name: Build
        run: |
          cmake --build build-valgrind -j"${BUILD_JOBS}"

      - name: Run valgrind on test executables
        shell: bash
        run: |
          set +e
          FAIL=0

          mapfile -t TEST_BINS < <(
            find build-valgrind/test -type f -executable 2>/dev/null | sort
          )

          if [ ${#TEST_BINS[@]} -eq 0 ]; then
            echo "No test executables found for valgrind."
            exit 0
          fi

          for exe in "${TEST_BINS[@]}"; do
            echo "==> Valgrind: $exe"
            timeout 20s valgrind \
              --leak-check=full \
              --show-leak-kinds=all \
              --track-origins=yes \
              "$exe"
            STATUS=$?

            if [ $STATUS -ne 0 ] && [ $STATUS -ne 124 ]; then
              echo "::warning::Valgrind reported issues for $exe"
              FAIL=1
            fi
          done

          if [ $FAIL -ne 0 ]; then
            echo "::warning::Valgrind detected potential issues."
          else
            echo "Valgrind checks completed."
          fi
          exit 0

  config-coverage:
    name: Configuration Coverage
    runs-on: ubuntu-latest

    steps:
      - name: Checkout error repository
        uses: actions/checkout@v4
        with:
          fetch-depth: 0

      - name: Install dependencies
        run: |
          sudo apt-get update -y
          sudo apt-get install -y $DEPS

      - name: Configure release mode
        run: |
          cmake -G Ninja -S . -B build-release \
            -DCMAKE_BUILD_TYPE=Release \
            -DVIX_ERROR_BUILD_TESTS=OFF \
            -DVIX_ENABLE_SANITIZERS=OFF

      - name: Build release mode
        run: |
          cmake --build build-release -j"${BUILD_JOBS}"

      - name: Configure debug header-only or static mode
        run: |
          cmake -G Ninja -S . -B build-debug \
            -DCMAKE_BUILD_TYPE=Debug \
            -DVIX_ERROR_BUILD_TESTS=OFF \
            -DVIX_ENABLE_SANITIZERS=OFF

      - name: Build debug mode
        run: |
          cmake --build build-debug -j"${BUILD_JOBS}"

  summary:
    name: Error Strict CI Summary
    needs: [build-test-sanitized, static-analysis, valgrind, config-coverage]
    runs-on: ubuntu-latest

    steps:
      - name: Print summary
        run: |
          echo "Error strict CI completed."
          echo "This workflow validates:"
          echo "- sanitized builds"
          echo "- unit tests"
          echo "- static analysis"
          echo "- valgrind"
          echo "- important configuration variants"