sdk-python.yml

name: Python SDK Build & Test

on:
  push:
    branches: [ main, develop ]
    paths: [ 'sdk/python/**', '.github/workflows/sdk-python.yml' ]
  pull_request:
    branches: [ main ]
    paths: [ 'sdk/python/**', '.github/workflows/sdk-python.yml' ]
  release:
    types: [ published ]

jobs:
  build:
    runs-on: ${{ matrix.os }}
    strategy:
      matrix:
        os: [ubuntu-latest, windows-latest, macos-latest]
        python-version: ['3.10', '3.11', '3.12']
        
    steps:
    - name: Checkout
      uses: actions/checkout@v4

    - name: Setup Python ${{ matrix.python-version }}
      uses: actions/setup-python@v5
      with:
        python-version: ${{ matrix.python-version }}

    - name: Install build tools
      run: |
        python -m pip install --upgrade pip
        pip install hatch

    - name: Build package
      run: hatch build
      working-directory: sdk/python

    - name: Install package
      run: pip install dist/*.whl
      working-directory: sdk/python

    - name: Run tests
      run: hatch run test
      working-directory: sdk/python

    - name: Upload coverage
      if: matrix.os == 'ubuntu-latest' && matrix.python-version == '3.11'
      uses: codecov/codecov-action@v4
      with:
        directory: ./sdk/python/coverage
        flags: sdk-python
        name: codecov-sdk-python

  lint:
    runs-on: ubuntu-latest
    
    steps:
    - name: Checkout
      uses: actions/checkout@v4

    - name: Setup Python
      uses: actions/setup-python@v5
      with:
        python-version: '3.11'

    - name: Install dependencies
      run: |
        python -m pip install --upgrade pip
        pip install hatch

    - name: Lint with ruff
      run: hatch run lint:check
      working-directory: sdk/python

    - name: Type check with mypy
      run: hatch run lint:mypy
      working-directory: sdk/python

    - name: Check formatting with black
      run: hatch run lint:fmt-check
      working-directory: sdk/python

  test-extras:
    runs-on: ubuntu-latest
    strategy:
      matrix:
        extra: [analytics]
        
    steps:
    - name: Checkout
      uses: actions/checkout@v4

    - name: Setup Python
      uses: actions/setup-python@v5
      with:
        python-version: '3.11'

    - name: Install with extras
      run: |
        python -m pip install --upgrade pip
        pip install -e ".[dev,${{ matrix.extra }}]"
      working-directory: sdk/python

    - name: Test extra functionality
      run: |
        python -c "
        import eventstream_ffxiv
        
        # Test analytics extra
        if '${{ matrix.extra }}' == 'analytics':
            import duckdb
            import pandas as pd
            print('Analytics dependencies work')
        "

  security:
    runs-on: ubuntu-latest
    
    steps:
    - name: Checkout
      uses: actions/checkout@v4

    - name: Setup Python
      uses: actions/setup-python@v5
      with:
        python-version: '3.11'

    - name: Install safety
      run: pip install safety bandit

    - name: Check dependencies for vulnerabilities
      run: |
        pip install hatch
        hatch dep show requirements > requirements.txt
        safety check -r requirements.txt
      working-directory: sdk/python

    - name: Run bandit security linter
      run: bandit -r eventstream_ffxiv/ -f json -o bandit-results.json
      working-directory: sdk/python
      continue-on-error: true

    - name: Upload security results
      uses: actions/upload-artifact@v4
      if: always()
      with:
        name: security-results
        path: sdk/python/bandit-results.json

  publish:
    needs: [build, lint, test-extras, security]
    runs-on: ubuntu-latest
    if: github.event_name == 'release'
    
    steps:
    - name: Checkout
      uses: actions/checkout@v4

    - name: Setup Python
      uses: actions/setup-python@v5
      with:
        python-version: '3.11'

    - name: Install build tools
      run: |
        python -m pip install --upgrade pip
        pip install hatch

    - name: Build package
      run: hatch build
      working-directory: sdk/python

    - name: Publish to PyPI
      run: hatch publish -u __token__ -a ${{ secrets.PYPI_API_TOKEN }}
      working-directory: sdk/python

  integration-test:
    runs-on: ubuntu-latest
    
    steps:
    - name: Checkout
      uses: actions/checkout@v4

    - name: Setup Python
      uses: actions/setup-python@v5
      with:
        python-version: '3.11'

    - name: Install package
      run: |
        python -m pip install --upgrade pip
        pip install hatch
        hatch build
        pip install dist/*.whl
      working-directory: sdk/python

    - name: Test integration with mock WebSocket server
      run: |
        python -c "
        import asyncio
        import eventstream_ffxiv
        
        async def test():
            # Test connection timeout handling
            try:
                await eventstream_ffxiv.connect('ws://localhost:9999', timeout=1)
                assert False, 'Should have timed out'
            except (ConnectionError, asyncio.TimeoutError):
                print('Connection timeout handling works')
            
            # Test schema validation
            from eventstream_ffxiv.schemas import EventEnvelope
            envelope = EventEnvelope(
                v=1, seq=1, ts='2025-01-01T00:00:00Z',
                mono=12345, encounterId='test', shard='local-1',
                type='actionHit', data={}
            )
            print('Schema validation works')
        
        asyncio.run(test())
        "