code-quality.yml

name: Code Quality Analysis

on:
  schedule:
    - cron: '0 2 * * *'
  workflow_dispatch:

jobs:
  code-quality:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4

      - name: Install UV
        uses: astral-sh/setup-uv@v4
        with:
          enable-cache: true
          cache-dependency-glob: "backend/uv.lock"

      - name: Setup Bun
        uses: oven-sh/setup-bun@v2
        with:
          bun-version-file: frontend/package.json

      - name: Verify Bun runtime
        run: bun --version

      - name: Setup Node
        uses: actions/setup-node@v4
        with:
          node-version: "24"

      - name: Install just
        uses: extractions/setup-just@v2

      - name: Install backend dependencies
        run: cd backend && uv sync --dev

      - name: Install frontend dependencies
        run: cd frontend && bun install --frozen-lockfile

      - name: Install code quality tools
        run: npm install -g jscpd fallow

      - name: Run fallow analysis (frontend — SvelteKit)
        run: cd frontend && npx fallow --format json --sarif-file fallow-results.sarif > fallow-results.json
        continue-on-error: true

      - name: Upload fallow SARIF results (frontend)
        uses: github/codeql-action/upload-sarif@v3
        if: always()
        with:
          sarif_file: frontend/fallow-results.sarif
          category: fallow-frontend

      - name: Run duplication analysis (backend only)
        run: just duplication

      - name: Run complexity analysis
        run: just complexity

      - name: Run dead code analysis (backend — Python)
        run: cd backend && uv run vulture app/ vulture_whitelist.py --min-confidence 80 2>&1 | tee ../vulture-report.txt
        continue-on-error: true

      - name: Run dead code analysis (frontend — SvelteKit)
        run: cd frontend && npx fallow dead-code --format json > ../fallow-frontend-dead-code.json
        continue-on-error: true

      - name: Check quality thresholds
        run: |
          echo "=== Quality Threshold Check ==="
          FAIL=0
          if [ -f jscpd-report/jscpd-report.html ]; then
            # Scope to the "Duplicated Lines" stat card; a bare grep for digits
            # before % matches CSS values like width:100% earlier in the HTML.
            DUP_PCT=$(grep -A1 'Duplicated Lines' jscpd-report/jscpd-report.html | grep -oP '\d+(?:\.\d+)?(?=%)' | head -1)
            if [ -z "$DUP_PCT" ]; then
              echo "::warning::Could not parse duplication percentage from jscpd report"
              DUP_PCT=0
            fi
            echo "Duplication: ${DUP_PCT}%"
            if awk "BEGIN {exit !($DUP_PCT > 20)}"; then
              echo "::error::Duplication above 20% threshold: ${DUP_PCT}%"
              FAIL=1
            fi
          else
            echo "::error::jscpd report not found — duplication analysis may have failed"
            FAIL=1
          fi
          if [ -f vulture-report.txt ]; then
            DEAD_COUNT=$(grep -c ':' vulture-report.txt 2>/dev/null | tr -d '[:space:]' || echo "0")
            echo "Dead code items (Python): ${DEAD_COUNT}"
            if [ "$DEAD_COUNT" -gt 50 ] 2>/dev/null; then
              echo "::error::Dead code items above 50 threshold: ${DEAD_COUNT}"
              FAIL=1
            fi
          else
            echo "::warning::vulture report not found — Python dead code analysis skipped"
          fi
          if [ -f fallow-frontend-dead-code.json ]; then
            SVELTE_DEAD=$(python3 -c "import json; d=json.load(open('fallow-frontend-dead-code.json')); print(len(d.get('deadCode',{}).get('unusedFiles',[])))" 2>/dev/null)
            if [ -z "$SVELTE_DEAD" ]; then
              echo "::warning::Could not parse fallow-svelte dead code JSON"
              SVELTE_DEAD=0
            fi
            echo "SvelteKit dead files: ${SVELTE_DEAD}"
            if [ "$SVELTE_DEAD" -gt 20 ] 2>/dev/null; then
              echo "::error::SvelteKit dead files above 20 threshold: ${SVELTE_DEAD}"
              FAIL=1
            fi
          else
            echo "::warning::fallow-svelte dead code results not found — SvelteKit analysis skipped"
          fi
          if [ "$FAIL" -eq 1 ]; then
            echo "::error::Quality thresholds exceeded — see annotations above"
            exit 1
          fi
          echo "All quality thresholds passed"

      - name: Upload reports
        uses: actions/upload-artifact@v4
        if: always()
        with:
          name: code-quality-reports
          path: |
            jscpd-report/
            vulture-report.txt
            frontend/fallow-results.json
            frontend/fallow-results.sarif
            fallow-frontend-dead-code.json

      - name: Create failure issue
        if: failure()
        uses: actions/github-script@v7
        with:
          script: |
            const runUrl = `${context.serverUrl}/${context.repo.owner}/${context.repo.repo}/actions/runs/${context.runId}`;
            const date = new Date().toISOString().split('T')[0];
            const existing = await github.rest.issues.listForRepo({
              owner: context.repo.owner,
              repo: context.repo.repo,
              labels: 'nightly-quality',
              state: 'open'
            });
            if (existing.data.length > 0) {
              await github.rest.issues.createComment({
                owner: context.repo.owner,
                repo: context.repo.repo,
                issue_number: existing.data[0].number,
                body: `Nightly quality check failed again on ${date}.\n[View run](${runUrl})`
              });
            } else {
              await github.rest.issues.create({
                owner: context.repo.owner,
                repo: context.repo.repo,
                title: 'Nightly code quality check failed',
                labels: ['nightly-quality'],
                body: `The nightly code quality analysis failed on ${date}.\n\n[View run](${runUrl})\n\nCheck the quality thresholds in the workflow and address the issues.`
              });
            }