server-test.yml

name: Server Test

# ============================================
# サーバーテストワークフロー
# - 単体テスト（xUnit）
# - 統合テスト（Testcontainers + PostgreSQL）
# - コードカバレッジレポート
# - 脆弱性パッケージ検査
# ============================================

on:
  # 手動実行
  workflow_dispatch:

  # PR 時に自動実行（サーバー関連ファイル変更時）
  pull_request:
    branches: [main, develop]
    paths:
      - 'src/Game.Server/**'
      - 'src/Game.Shared/**'
      - 'src/Game.Realtime/**'
      - 'test/Game.Server.Tests/**'
      - 'test/Game.Realtime.Tests/**'
      - '.github/workflows/server-test.yml'

permissions:
  contents: read
  pull-requests: write

concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

env:
  DOTNET_VERSION: '9.0.x'
  DOTNET_NOLOGO: true
  DOTNET_CLI_TELEMETRY_OPTOUT: true

jobs:
  # ============================================
  # 脆弱性パッケージ検査
  # ============================================
  vulnerability-check:
    name: Vulnerability Check
    runs-on: ubuntu-latest
    timeout-minutes: 5

    steps:
      - name: Checkout repository
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2

      - name: Setup .NET
        uses: actions/setup-dotnet@c2fa09f4bde5ebb9d1777cf28262a3eb3db3ced7 # v5.2.0
        with:
          dotnet-version: ${{ env.DOTNET_VERSION }}

      - name: Restore packages
        run: dotnet restore src/Game.Server/Game.Server.csproj

      - name: Check for vulnerable packages
        run: |
          OUTPUT=$(dotnet list src/Game.Server/Game.Server.csproj package --vulnerable --include-transitive 2>&1)
          echo "$OUTPUT"
          if echo "$OUTPUT" | grep -q "has the following vulnerable packages"; then
            echo ""
            echo "::error::Vulnerable packages detected. Update affected packages or review the vulnerabilities."
            exit 1
          fi
          echo "No vulnerable packages found."

  # ============================================
  # 単体テスト（高速・Dockerなし）
  # ============================================
  unit-tests:
    name: Unit Tests
    runs-on: ubuntu-latest
    timeout-minutes: 10

    steps:
      - name: Checkout repository
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2

      - name: Setup .NET
        uses: actions/setup-dotnet@c2fa09f4bde5ebb9d1777cf28262a3eb3db3ced7 # v5.2.0
        with:
          dotnet-version: ${{ env.DOTNET_VERSION }}

      - name: Cache NuGet packages
        uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
        with:
          path: ~/.nuget/packages
          key: ${{ runner.os }}-nuget-${{ hashFiles('**/*.csproj', '**/Directory.Packages.props') }}
          restore-keys: |
            ${{ runner.os }}-nuget-

      - name: Restore dependencies
        run: |
          dotnet restore test/Game.Server.Tests/Game.Server.Tests.csproj
          dotnet restore test/Game.Realtime.Tests/Game.Realtime.Tests.csproj

      - name: Build
        run: |
          dotnet build test/Game.Server.Tests/Game.Server.Tests.csproj --no-restore --configuration Release
          dotnet build test/Game.Realtime.Tests/Game.Realtime.Tests.csproj --no-restore --configuration Release

      - name: Run unit tests
        run: |
          dotnet test test/Game.Server.Tests/Game.Server.Tests.csproj \
            --no-build \
            --configuration Release \
            --filter "FullyQualifiedName!~Integration" \
            --logger "trx;LogFileName=unit-test-results.trx" \
            --results-directory TestResults \
            --collect:"XPlat Code Coverage" \
            -- DataCollectionRunSettings.DataCollectors.DataCollector.Configuration.Format=opencover

          dotnet test test/Game.Realtime.Tests/Game.Realtime.Tests.csproj \
            --no-build \
            --configuration Release \
            --filter "FullyQualifiedName!~Integration" \
            --logger "trx;LogFileName=realtime-unit-test-results.trx" \
            --results-directory TestResults \
            --collect:"XPlat Code Coverage" \
            -- DataCollectionRunSettings.DataCollectors.DataCollector.Configuration.Format=opencover

      - name: Upload test results
        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
        if: always()
        with:
          name: Unit-Test-Results
          path: TestResults/
          retention-days: 7

      - name: Publish test results
        uses: dorny/test-reporter@a43b3a5f7366b97d083190328d2c652e1a8b6aa2 # v3.0.0
        if: always()
        with:
          name: Unit Test Report
          path: TestResults/*.trx
          reporter: dotnet-trx

  # ============================================
  # 統合テスト（Testcontainers + PostgreSQL）
  # ============================================
  integration-tests:
    name: Integration Tests
    runs-on: ubuntu-latest
    timeout-minutes: 20
    # 単体テスト成功後に実行
    needs: unit-tests

    steps:
      - name: Checkout repository
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2

      - name: Setup .NET
        uses: actions/setup-dotnet@c2fa09f4bde5ebb9d1777cf28262a3eb3db3ced7 # v5.2.0
        with:
          dotnet-version: ${{ env.DOTNET_VERSION }}

      - name: Cache NuGet packages
        uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
        with:
          path: ~/.nuget/packages
          key: ${{ runner.os }}-nuget-${{ hashFiles('**/*.csproj', '**/Directory.Packages.props') }}
          restore-keys: |
            ${{ runner.os }}-nuget-

      - name: Restore dependencies
        run: dotnet restore test/Game.Server.Tests/Game.Server.Tests.csproj

      - name: Build
        run: dotnet build test/Game.Server.Tests/Game.Server.Tests.csproj --no-restore --configuration Release

      - name: Run integration tests
        run: |
          dotnet test test/Game.Server.Tests/Game.Server.Tests.csproj \
            --no-build \
            --configuration Release \
            --filter "FullyQualifiedName~Integration" \
            --logger "trx;LogFileName=integration-test-results.trx" \
            --results-directory TestResults \
            --collect:"XPlat Code Coverage" \
            -- DataCollectionRunSettings.DataCollectors.DataCollector.Configuration.Format=opencover
        env:
          # Testcontainers 設定
          TESTCONTAINERS_RYUK_DISABLED: false
          DOCKER_HOST: unix:///var/run/docker.sock

      - name: Upload test results
        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
        if: always()
        with:
          name: Integration-Test-Results
          path: TestResults/
          retention-days: 7

      - name: Publish test results
        uses: dorny/test-reporter@a43b3a5f7366b97d083190328d2c652e1a8b6aa2 # v3.0.0
        if: always()
        with:
          name: Integration Test Report
          path: TestResults/*.trx
          reporter: dotnet-trx

  # ============================================
  # コードカバレッジレポート
  # ============================================
  coverage-report:
    name: Coverage Report
    runs-on: ubuntu-latest
    needs: [unit-tests, integration-tests]
    if: always() && (needs.unit-tests.result == 'success' || needs.integration-tests.result == 'success')

    steps:
      - name: Checkout repository
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2

      - name: Download unit test coverage
        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
        with:
          name: Unit-Test-Results
          path: TestResults/Unit
        continue-on-error: true

      - name: Download integration test coverage
        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
        with:
          name: Integration-Test-Results
          path: TestResults/Integration
        continue-on-error: true

      - name: Setup .NET
        uses: actions/setup-dotnet@c2fa09f4bde5ebb9d1777cf28262a3eb3db3ced7 # v5.2.0
        with:
          dotnet-version: ${{ env.DOTNET_VERSION }}

      - name: Install ReportGenerator
        run: dotnet tool install --global dotnet-reportgenerator-globaltool

      - name: Generate coverage report
        run: |
          # カバレッジファイルを検索
          coverage_files=$(find TestResults -name "coverage.opencover.xml" -o -name "coverage.cobertura.xml" | tr '\n' ';')

          if [ -n "$coverage_files" ]; then
            reportgenerator \
              -reports:"$coverage_files" \
              -targetdir:CoverageReport \
              -reporttypes:"Html;MarkdownSummaryGithub;XmlSummary;Badges" \
              -assemblyfilters:"+Game.Server;+Game.Shared;+Game.Realtime;+Game.Realtime.Shared" \
              -classfilters:"-*Migrations*"

            # サマリーを GitHub Step Summary に出力
            if [ -f "CoverageReport/SummaryGithub.md" ]; then
              cat CoverageReport/SummaryGithub.md >> $GITHUB_STEP_SUMMARY
            fi
          else
            echo "No coverage files found" >> $GITHUB_STEP_SUMMARY
          fi

      - name: Check coverage threshold
        if: success()
        run: |
          # 現在の実測値: Line 28.4%, Branch 20% (2026-04-02時点)
          # カバレッジ向上に伴い段階的に引き上げること
          THRESHOLD=20
          if [ -f "CoverageReport/Summary.xml" ]; then
            LINE_COVERAGE=$(grep -oP 'Linecoverage>\K[0-9.]+' CoverageReport/Summary.xml | head -1)
            BRANCH_COVERAGE=$(grep -oP 'Branchcoverage>\K[0-9.]+' CoverageReport/Summary.xml | head -1)

            echo "Line Coverage: ${LINE_COVERAGE:-N/A}%"
            echo "Branch Coverage: ${BRANCH_COVERAGE:-N/A}%"

            LINE_INT=${LINE_COVERAGE%.*}
            if [ "${LINE_INT:-0}" -lt "$THRESHOLD" ]; then
              echo "::error::Line coverage ${LINE_COVERAGE}% is below threshold ${THRESHOLD}%"
              exit 1
            fi
            echo "Coverage check passed: ${LINE_COVERAGE}% >= ${THRESHOLD}%"
          else
            echo "::warning::Coverage summary XML not found, skipping threshold check"
          fi

      # PRコメント投稿:
      # - marocchino/sticky-pull-request-comment: header指定でstickyコメント（上書き更新）がネイティブ対応、pathパラメータでファイル直接読込可能
      # - gh pr comment: sticky機能を自前実装する必要がありメンテナンスコスト増
      - name: Post coverage to PR
        if: github.event_name == 'pull_request' && always()
        uses: marocchino/sticky-pull-request-comment@0ea0beb66eb9baf113663a64ec522f60e49231c0 # v3.0.4
        with:
          header: coverage-report
          path: CoverageReport/SummaryGithub.md

      - name: Upload coverage report
        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
        if: always()
        with:
          name: Coverage-Report
          path: CoverageReport/
          retention-days: 7

  # ============================================
  # サマリーレポート
  # ============================================
  summary:
    name: Test Summary
    runs-on: ubuntu-latest
    needs: [unit-tests, integration-tests, coverage-report, vulnerability-check]
    if: always()

    steps:
      - name: Generate summary
        run: |
          echo "## Server Test Summary" >> $GITHUB_STEP_SUMMARY
          echo "" >> $GITHUB_STEP_SUMMARY
          echo "| Test Suite | Status |" >> $GITHUB_STEP_SUMMARY
          echo "|------------|--------|" >> $GITHUB_STEP_SUMMARY

          # Unit Tests
          if [ "${{ needs.unit-tests.result }}" == "success" ]; then
            echo "| Unit Tests | ✅ Passed |" >> $GITHUB_STEP_SUMMARY
          elif [ "${{ needs.unit-tests.result }}" == "skipped" ]; then
            echo "| Unit Tests | ⏭️ Skipped |" >> $GITHUB_STEP_SUMMARY
          else
            echo "| Unit Tests | ❌ Failed |" >> $GITHUB_STEP_SUMMARY
          fi

          # Integration Tests
          if [ "${{ needs.integration-tests.result }}" == "success" ]; then
            echo "| Integration Tests | ✅ Passed |" >> $GITHUB_STEP_SUMMARY
          elif [ "${{ needs.integration-tests.result }}" == "skipped" ]; then
            echo "| Integration Tests | ⏭️ Skipped |" >> $GITHUB_STEP_SUMMARY
          else
            echo "| Integration Tests | ❌ Failed |" >> $GITHUB_STEP_SUMMARY
          fi

          # Coverage Report
          if [ "${{ needs.coverage-report.result }}" == "success" ]; then
            echo "| Coverage Report | ✅ Generated |" >> $GITHUB_STEP_SUMMARY
          elif [ "${{ needs.coverage-report.result }}" == "skipped" ]; then
            echo "| Coverage Report | ⏭️ Skipped |" >> $GITHUB_STEP_SUMMARY
          else
            echo "| Coverage Report | ⚠️ Issues |" >> $GITHUB_STEP_SUMMARY
          fi

          # Vulnerability Check
          if [ "${{ needs.vulnerability-check.result }}" == "success" ]; then
            echo "| Vulnerability Check | ✅ No Issues |" >> $GITHUB_STEP_SUMMARY
          elif [ "${{ needs.vulnerability-check.result }}" == "skipped" ]; then
            echo "| Vulnerability Check | ⏭️ Skipped |" >> $GITHUB_STEP_SUMMARY
          else
            echo "| Vulnerability Check | ❌ Vulnerable Packages Found |" >> $GITHUB_STEP_SUMMARY
          fi