name: Lint & Type Check

on:
  push:
    branches: [ 'main' ]
  pull_request:
    branches: [ '*' ]
  workflow_dispatch:


jobs:
  lint:
    name: Lint ${{ matrix.name }}
    runs-on: ubuntu-latest

    permissions:
      pull-requests: write
      contents: read

    strategy:
      fail-fast: false
      matrix:
        include:
          # Python (ruff) - Beginner
          - name: caesar-cipher
            type: ruff
            path: PROJECTS/beginner/caesar-cipher
          - name: keylogger
            type: ruff
            path: PROJECTS/beginner/keylogger
          - name: dns-lookup
            type: ruff
            path: PROJECTS/beginner/dns-lookup
          - name: metadata-scrubber-tool
            type: ruff
            path: PROJECTS/beginner/metadata-scrubber-tool
          - name: network-traffic-analyzer
            type: ruff
            path: PROJECTS/beginner/network-traffic-analyzer
          - name: base64-tool
            type: ruff
            path: PROJECTS/beginner/base64-tool
          - name: c2-beacon-backend
            type: ruff
            path: PROJECTS/beginner/c2-beacon/backend
          # Python (ruff) - Intermediate
          - name: api-security-scanner-backend
            type: ruff
            path: PROJECTS/intermediate/api-security-scanner/backend
          - name: siem-dashboard-backend
            type: ruff
            path: PROJECTS/intermediate/siem-dashboard/backend
          # Python (ruff) - Advanced
          - name: bug-bounty-platform-backend
            type: ruff
            path: PROJECTS/advanced/bug-bounty-platform/backend
          - name: encrypted-p2p-chat-backend
            type: ruff
            path: PROJECTS/advanced/encrypted-p2p-chat/backend
          - name: api-rate-limiter
            type: ruff
            path: PROJECTS/advanced/api-rate-limiter
          - name: ai-threat-detection-backend
            type: ruff
            path: PROJECTS/advanced/ai-threat-detection/backend
          # Biome (frontend)
          - name: bug-bounty-platform-frontend
            type: biome
            path: PROJECTS/advanced/bug-bounty-platform/frontend
          - name: c2-beacon-frontend
            type: biome
            path: PROJECTS/beginner/c2-beacon/frontend
          - name: api-security-scanner-frontend
            type: biome
            path: PROJECTS/intermediate/api-security-scanner/frontend
          - name: siem-dashboard-frontend
            type: biome
            path: PROJECTS/intermediate/siem-dashboard/frontend
          - name: encrypted-p2p-chat-frontend
            type: biome
            path: PROJECTS/advanced/encrypted-p2p-chat/frontend
          # Go
          - name: simple-vulnerability-scanner
            type: go
            path: PROJECTS/beginner/simple-vulnerability-scanner
          - name: docker-security-audit
            type: go
            path: PROJECTS/intermediate/docker-security-audit
          - name: secrets-scanner
            type: go
            path: PROJECTS/intermediate/secrets-scanner

    defaults:
      run:
        working-directory: ${{ matrix.path }}

    steps:
    - name: Checkout code
      uses: actions/checkout@v4

    # Ruff Setup
    - name: Set up Python
      if: matrix.type == 'ruff'
      uses: actions/setup-python@v5
      with:
        python-version: '3.12'

    - name: Install ruff
      if: matrix.type == 'ruff'
      run: pip install ruff

    # Biome Setup
    - name: Setup Node.js
      if: matrix.type == 'biome'
      uses: actions/setup-node@v4
      with:
        node-version: '20'

    - name: Setup pnpm
      if: matrix.type == 'biome'
      uses: pnpm/action-setup@v4
      with:
        version: latest

    - name: Cache pnpm store
      if: matrix.type == 'biome'
      uses: actions/cache@v4
      with:
        path: ~/.local/share/pnpm/store/v10
        key: ${{ runner.os }}-pnpm-${{ matrix.name }}-${{ hashFiles(format('{0}/pnpm-lock.yaml', matrix.path)) }}
        restore-keys: |
          ${{ runner.os }}-pnpm-${{ matrix.name }}-
          ${{ runner.os }}-pnpm-

    - name: Install frontend dependencies
      if: matrix.type == 'biome'
      run: pnpm install --frozen-lockfile

    # Go Setup
    - name: Setup Go
      if: matrix.type == 'go'
      uses: actions/setup-go@v5
      with:
        go-version-file: ${{ matrix.path }}/go.mod
        cache-dependency-path: ${{ matrix.path }}/go.sum

    - name: Install golangci-lint
      if: matrix.type == 'go'
      run: go install github.com/golangci/golangci-lint/v2/cmd/golangci-lint@latest

    # Ruff Linting
    - name: Run ruff
      if: matrix.type == 'ruff'
      id: ruff
      run: |
        echo "Running ruff check..."
        if ruff check . > ruff-output.txt 2>&1; then
          echo "RUFF_PASSED=true" >> $GITHUB_ENV
          echo "No ruff errors found!"
        else
          echo "RUFF_PASSED=false" >> $GITHUB_ENV
          echo "Ruff found issues"
        fi
        cat ruff-output.txt
      continue-on-error: true

    # Biome Linting
    - name: Run Biome
      if: matrix.type == 'biome'
      id: biome
      run: |
        echo "Running Biome check..."
        if npx @biomejs/biome check . > biome-output.txt 2>&1; then
          echo "BIOME_PASSED=true" >> $GITHUB_ENV
          echo "No Biome errors found!"
        else
          echo "BIOME_PASSED=false" >> $GITHUB_ENV
          echo "Biome found issues!"
        fi
        cat biome-output.txt
      continue-on-error: true

    # Go Linting
    - name: Run golangci-lint
      if: matrix.type == 'go'
      id: golangci
      run: |
        echo "Running golangci-lint..."
        if golangci-lint run > golangci-output.txt 2>&1; then
          echo "GOLANGCI_PASSED=true" >> $GITHUB_ENV
          echo "No golangci-lint errors found!"
        else
          echo "GOLANGCI_PASSED=false" >> $GITHUB_ENV
          echo "golangci-lint found issues!"
        fi
        cat golangci-output.txt
      continue-on-error: true

    # Create Summary for Ruff
    - name: Create Ruff Lint Summary
      if: matrix.type == 'ruff' && github.event_name == 'pull_request'
      run: |
        {
          echo "## Lint Results: ${{ matrix.name }}"
          echo ''

          if [[ "${{ env.RUFF_PASSED }}" == "true" ]]; then
            echo '### Ruff: **Passed**'
            echo 'No ruff issues found.'
          else
            echo '### Ruff: **Issues Found**'
            echo '<details><summary>View ruff output</summary>'
            echo ''
            echo '```'
            head -100 ruff-output.txt
            echo '```'
            echo '</details>'
          fi
          echo ''

          if [[ "${{ env.RUFF_PASSED }}" == "true" ]]; then
            echo '---'
            echo '### All checks passed!'
          else
            echo '---'
            echo '### Review the issues above'
          fi
          echo ''
          echo "<!-- lint-check-${{ matrix.name }}-marker -->"
        } > lint-report.md

    # Create Summary for Biome
    - name: Create Biome Lint Summary
      if: matrix.type == 'biome' && github.event_name == 'pull_request'
      run: |
        {
          echo "## Lint Results: ${{ matrix.name }}"
          echo ''

          if [[ "${{ env.BIOME_PASSED }}" == "true" ]]; then
            echo '### Biome: **Passed**'
            echo 'No Biome issues found.'
          else
            echo '### Biome: **Issues Found**'
            echo '<details><summary>View Biome output</summary>'
            echo ''
            echo '```'
            head -100 biome-output.txt
            echo '```'
            echo '</details>'
          fi
          echo ''

          if [[ "${{ env.BIOME_PASSED }}" == "true" ]]; then
            echo '---'
            echo '### All checks passed!'
          else
            echo '---'
            echo '### Review the issues above'
          fi
          echo ''
          echo "<!-- lint-check-${{ matrix.name }}-marker -->"
        } > lint-report.md

    # Create Summary for Go
    - name: Create Go Lint Summary
      if: matrix.type == 'go' && github.event_name == 'pull_request'
      run: |
        {
          echo "## Lint Results: ${{ matrix.name }}"
          echo ''

          if [[ "${{ env.GOLANGCI_PASSED }}" == "true" ]]; then
            echo '### golangci-lint: **Passed**'
            echo 'No golangci-lint issues found.'
          else
            echo '### golangci-lint: **Issues Found**'
            echo '<details><summary>View golangci-lint output</summary>'
            echo ''
            echo '```'
            head -100 golangci-output.txt
            echo '```'
            echo '</details>'
          fi
          echo ''

          if [[ "${{ env.GOLANGCI_PASSED }}" == "true" ]]; then
            echo '---'
            echo '### All checks passed!'
          else
            echo '---'
            echo '### Review the issues above'
          fi
          echo ''
          echo "<!-- lint-check-${{ matrix.name }}-marker -->"
        } > lint-report.md

    # Post PR Comment
    - name: Post PR Comment
      if: github.event_name == 'pull_request'
      uses: peter-evans/create-or-update-comment@v4
      with:
        issue-number: ${{ github.event.pull_request.number }}
        body-path: ${{ matrix.path }}/lint-report.md
        edit-mode: replace
        comment-tag: lint-check-${{ matrix.name }}

    # Exit with proper status
    - name: Check lint status
      run: |
        if [[ "${{ matrix.type }}" == "ruff" ]]; then
          if [[ "${{ env.RUFF_PASSED }}" == "false" ]]; then
            echo "Ruff lint checks failed"
            exit 1
          fi
        elif [[ "${{ matrix.type }}" == "biome" ]]; then
          if [[ "${{ env.BIOME_PASSED }}" == "false" ]]; then
            echo "Biome lint checks failed"
            exit 1
          fi
        elif [[ "${{ matrix.type }}" == "go" ]]; then
          if [[ "${{ env.GOLANGCI_PASSED }}" == "false" ]]; then
            echo "Go lint checks failed"
            exit 1
          fi
        fi
        echo "All lint checks passed"