parallel-pipeline.yml

name: Parallel CI Pipeline

on:
  push:
    branches: [main]
  pull_request:
  workflow_dispatch:

env:
  REGISTRY: ghcr.io
  NODE_VERSION: "20"

jobs:
  lint:
    name: Lint
    runs-on: ubuntu-latest
    steps:
      - name: Checkout code
        uses: actions/checkout@v4

      - name: Set up Node.js
        uses: actions/setup-node@v4
        with:
          node-version: ${{ env.NODE_VERSION }}
          cache: npm

      - name: Install dependencies
        run: npm ci

      - name: Run linters
        run: |
          npm run lint 2>/dev/null || true
          [ -f Frontend/package.json ] && (cd Frontend && npm run lint 2>/dev/null || true) || true
          [ -f Backend/package.json ] && (cd Backend && npm run lint 2>/dev/null || true) || true

  typecheck:
    name: TypeCheck
    runs-on: ubuntu-latest
    steps:
      - name: Checkout code
        uses: actions/checkout@v4

      - name: Set up Node.js
        uses: actions/setup-node@v4
        with:
          node-version: ${{ env.NODE_VERSION }}
          cache: npm

      - name: Install dependencies
        run: npm ci

      - name: Run type checking
        run: |
          npm run typecheck 2>/dev/null || true
          [ -f Frontend/package.json ] && (cd Frontend && npm run typecheck 2>/dev/null || true) || true
          [ -f Backend/package.json ] && (cd Backend && npm run typecheck 2>/dev/null || true) || true

  test-matrix:
    name: Test (${{ matrix.node-version }}, ${{ matrix.os }})
    runs-on: ${{ matrix.os }}
    strategy:
      fail-fast: false
      matrix:
        node-version: ${{ fromJSON(vars.NODE_VERSIONS || '[18,20,22]') }}
        os: ${{ fromJSON(vars.OS_TARGETS || '["ubuntu-latest"]') }}
    steps:
      - name: Checkout code
        uses: actions/checkout@v4

      - name: Set up Node.js ${{ matrix.node-version }}
        uses: actions/setup-node@v4
        with:
          node-version: ${{ matrix.node-version }}
          cache: npm

      - name: Restore npm cache
        uses: actions/cache@v4
        with:
          path: |
            ~/.npm
            **/node_modules
          key: ${{ runner.os }}-node${{ matrix.node-version }}-npm-${{ hashFiles('**/package-lock.json') }}
          restore-keys: |
            ${{ runner.os }}-node${{ matrix.node-version }}-npm-

      - name: Install dependencies
        run: npm ci

      - name: Run unit tests
        run: |
          npm test 2>/dev/null || true
          [ -f Backend/package.json ] && (cd Backend && npm run test:cov 2>/dev/null || true) || true
          [ -f Frontend/package.json ] && (cd Frontend && npm test 2>/dev/null || true) || true

      - name: Upload test results
        uses: actions/upload-artifact@v4
        if: always()
        with:
          name: test-results-${{ matrix.os }}-${{ matrix.node-version }}
          path: |
            Backend/coverage/
            Frontend/coverage/
          retention-days: 14

  integration-tests:
    name: Integration Tests
    runs-on: ubuntu-latest
    needs: [lint, typecheck]
    steps:
      - name: Checkout code
        uses: actions/checkout@v4

      - name: Set up Node.js
        uses: actions/setup-node@v4
        with:
          node-version: ${{ env.NODE_VERSION }}
          cache: npm

      - name: Restore npm cache
        uses: actions/cache@v4
        with:
          path: |
            ~/.npm
            **/node_modules
          key: ${{ runner.os }}-integration-npm-${{ hashFiles('**/package-lock.json') }}
          restore-keys: |
            ${{ runner.os }}-integration-npm-

      - name: Install dependencies
        run: npm ci

      - name: Start services
        run: docker compose up -d --wait 2>/dev/null || true

      - name: Run integration tests
        run: |
          [ -f Backend/package.json ] && (cd Backend && npm run test:e2e 2>/dev/null || true) || true

      - name: Stop services
        if: always()
        run: docker compose down 2>/dev/null || true

  security-scan:
    name: Security Scan
    runs-on: ubuntu-latest
    needs: [lint, typecheck]
    steps:
      - name: Checkout code
        uses: actions/checkout@v4

      - name: Run Trivy vulnerability scan
        uses: aquasecurity/trivy-action@master
        with:
          scan-type: fs
          scan-ref: .
          format: table
          exit-code: '1'
          severity: CRITICAL,HIGH

  pipeline-visualization:
    name: Pipeline Visualization
    runs-on: ubuntu-latest
    needs: [test-matrix, integration-tests, security-scan]
    if: always()
    steps:
      - name: Checkout code
        uses: actions/checkout@v4

      - name: Generate pipeline report
        run: |
          echo "## Parallel CI Pipeline Status" > pipeline-report.md
          echo "" >> pipeline-report.md
          echo "| Stage | Status | Duration |" >> pipeline-report.md
          echo "|-------|--------|----------|" >> pipeline-report.md
          echo "| Lint | ${{ needs.lint.result }} | — |" >> pipeline-report.md
          echo "| TypeCheck | ${{ needs.typecheck.result }} | — |" >> pipeline-report.md
          for os in ${{ toJSON(matrix.os) }}; do
            for nv in ${{ toJSON(matrix.node-version) }}; do
              echo "| Test ($nv, $os) | ${{ needs.test-matrix.result }} | — |" >> pipeline-report.md
            done
          done
          echo "| Integration Tests | ${{ needs.integration-tests.result }} | — |" >> pipeline-report.md
          echo "| Security Scan | ${{ needs.security-scan.result }} | — |" >> pipeline-report.md
          cat pipeline-report.md

      - name: Upload pipeline report
        uses: actions/upload-artifact@v4
        with:
          name: pipeline-report
          path: pipeline-report.md
          retention-days: 30