submodule-tests.yml

name: submodule-tests

on:
  pull_request:
    branches: [dev, master, code-optimization]
    types: [opened, synchronize, reopened]
  schedule:
    - cron: "0 18 * * *"
  workflow_dispatch:

permissions:
  contents: read

jobs:
  submodule-gate:
    name: Submodule Gate / Core Reference
    if: github.event_name == 'pull_request'
    runs-on: ubuntu-latest
    timeout-minutes: 45

    steps:
      - uses: actions/checkout@v6
        with:
          fetch-depth: 0

      - uses: actions/setup-python@v6
        with:
          python-version: "3.11"

      - name: Detect submodule changes
        id: detect
        env:
          BASE_SHA: ${{ github.event.pull_request.base.sha }}
          HEAD_SHA: ${{ github.event.pull_request.head.sha }}
        run: |
          GITLINKS=$(git diff --raw "$BASE_SHA..$HEAD_SHA" | awk '$2 == "160000"' | wc -l | tr -d ' ')
          echo "count=$GITLINKS" >> "$GITHUB_OUTPUT"

      - name: Checkout changed submodule graph
        if: steps.detect.outputs.count != '0'
        uses: actions/checkout@v6
        with:
          submodules: recursive
          fetch-depth: 1

      - name: Validate core-reference in isolated environments
        id: validation
        if: steps.detect.outputs.count != '0'
        continue-on-error: true
        run: |
          python scripts/ci/submodule_validation.py \
            --profile core-reference \
            --artifacts-dir submodule-artifacts/core-reference

      - name: Record not-applicable evidence
        if: steps.detect.outputs.count == '0'
        run: |
          mkdir -p submodule-artifacts
          printf '{"result":"not-applicable","reason":"no gitlink change"}\n' > submodule-artifacts/not-applicable.json

      - name: Upload submodule validation artifacts
        if: always()
        uses: actions/upload-artifact@v7
        with:
          name: submodule-validation-pr-${{ github.event.pull_request.number }}
          # Keep the durable phase evidence, not the disposable virtualenvs
          # and wheel build directories.  Uploading those transient files can
          # exhaust the artifact action's Node heap on diagnostic runs.
          path: |
            submodule-artifacts/**/submodule-validation.json
            submodule-artifacts/**/submodule-validation.junit.xml
            submodule-artifacts/**/submodule-validation.md
            submodule-artifacts/**/logs/**
          if-no-files-found: error
          retention-days: 30

      - name: Publish gate summary
        if: always()
        run: |
          {
            echo "## Submodule Gate / Core Reference"
            echo ""
            if [ "${{ steps.detect.outputs.count }}" = "0" ]; then
              echo "- Result: **not-applicable** (no gitlink change)"
            else
              echo "- Result: **${{ steps.validation.outcome }}**"
              echo "- Evidence: JSON, JUnit, Markdown index, and per-phase logs are attached."
            fi
          } >> "$GITHUB_STEP_SUMMARY"

      - name: Fail changed-submodule PR when core reference fails
        if: steps.detect.outputs.count != '0' && steps.validation.outcome != 'success'
        run: exit 1

  # 迭代07：子仓 lint 与 format 分别按仓分片，并维持 report-only。
  # 截至 2026-09-20：lint 存量 10 项、format 涉及 452 个文件。
  # 两项需分别清零、稳定 CI、独立回滚后，才分别升级为 blocking。
  # 滚动棘轮由 .github/workflows/tests.yml 的 quality-ratchet job 承担。
  discover-submodules:
    name: Discover submodules
    runs-on: ubuntu-latest
    timeout-minutes: 5

    outputs:
      modules: ${{ steps.list.outputs.modules }}

    steps:
      - uses: actions/checkout@v6
        with:
          fetch-depth: 1

      - name: List bt_api_* checkouts
        id: list
        run: |
          MODULES=$(ls -d bt_api/bt_api_* 2>/dev/null | xargs -n1 basename | sort | paste -sd, -)
          MODULES_JSON=$(printf '%s' "$MODULES" | python3 -c \
            'import json,sys; print(json.dumps([m for m in sys.stdin.read().strip().split(",") if m]))')
          echo "modules=$MODULES_JSON" >> "$GITHUB_OUTPUT"
          echo "Discovered submodules: $MODULES_JSON"

  submodule-lint:
    name: Submodule Lint / ${{ matrix.module }}
    needs: discover-submodules
    runs-on: ubuntu-latest
    timeout-minutes: 10
    # report-only：lint 存量清零并满足上方独立升级条件后再改为阻塞。
    continue-on-error: true

    strategy:
      fail-fast: false
      matrix:
        module: ${{ fromJSON(needs.discover-submodules.outputs.modules) }}

    steps:
      - uses: actions/checkout@v6
        with:
          submodules: recursive
          fetch-depth: 1

      - uses: actions/setup-python@v6
        with:
          python-version: "3.11"
          cache: pip
          cache-dependency-path: pyproject.toml

      - name: Install ruff
        run: |
          python -m pip install --upgrade pip
          pip install "ruff==0.16.2"

      - name: Ruff lint (${{ matrix.module }})
        run: ruff check bt_api/${{ matrix.module }}

  submodule-format:
    name: Submodule Format / ${{ matrix.module }}
    needs: discover-submodules
    runs-on: ubuntu-latest
    timeout-minutes: 10
    # report-only：format 存量清零并满足上方独立升级条件后再改为阻塞。
    continue-on-error: true

    strategy:
      fail-fast: false
      matrix:
        module: ${{ fromJSON(needs.discover-submodules.outputs.modules) }}

    steps:
      - uses: actions/checkout@v6
        with:
          submodules: recursive
          fetch-depth: 1

      - uses: actions/setup-python@v6
        with:
          python-version: "3.11"
          cache: pip
          cache-dependency-path: pyproject.toml

      - name: Install ruff
        run: |
          python -m pip install --upgrade pip
          pip install "ruff==0.16.2"

      - name: Ruff format check (${{ matrix.module }})
        run: ruff format --check bt_api/${{ matrix.module }}

  submodule-diagnostic:
    name: Submodule Diagnostic / All Profiles
    if: github.event_name == 'schedule' || github.event_name == 'workflow_dispatch'
    runs-on: ubuntu-latest
    timeout-minutes: 120

    steps:
      - uses: actions/checkout@v6
        with:
          submodules: recursive
          fetch-depth: 1

      - uses: actions/setup-python@v6
        with:
          python-version: "3.11"

      - name: Validate core-reference pilot
        id: core
        continue-on-error: true
        run: |
          python scripts/ci/submodule_validation.py \
            --profile core-reference \
            --artifacts-dir submodule-artifacts/core-reference

      - name: Run all-profile diagnostic evidence
        if: always()
        run: |
          python scripts/ci/submodule_validation.py \
            --profile all \
            --diagnostic \
            --artifacts-dir submodule-artifacts/all

      - name: Upload diagnostic artifacts
        if: always()
        uses: actions/upload-artifact@v7
        with:
          name: submodule-validation-diagnostic-${{ github.run_id }}
          # Retain reports and logs while excluding transient venvs and wheels.
          path: |
            submodule-artifacts/**/submodule-validation.json
            submodule-artifacts/**/submodule-validation.junit.xml
            submodule-artifacts/**/submodule-validation.md
            submodule-artifacts/**/logs/**
          if-no-files-found: error
          retention-days: 30

      - name: Fail scheduled pilot when core reference fails
        if: steps.core.outcome != 'success'
        run: exit 1