schemaCheck/.gitea/workflows/cache-schema-check.yaml

name: 缓存序列化结构检查
run-name: ${{ gitea.actor }}的缓存结构检查

on:
  push:
  workflow_dispatch:

env:
  # cache-schema-checker 私库坐标：com.codechecker:cache-schema-checker:1.0.0
  CACHE_SCHEMA_CHECKER_VERSION: "1.0.0"
  CACHE_SCHEMA_CHECKER_REPO_URL: "http://192.168.3.25:18081/nexus/repository/maven-releases"

jobs:
  cache-schema-check:
    if: ${{ gitea.ref != 'refs/heads/pre' && gitea.ref != 'refs/heads/dev' && gitea.ref != 'refs/heads/master-2.0' }}
    runs-on: jdk11
    steps:
      # 浅克隆当前 tip；对比基准用 push before（覆盖一次 push 的多 commit 累计 diff）
      # 不必全量历史：只需能 git show before / after 两边的文件内容
      - name: 检出代码
        run: |
          git config --global http.sslVerify false
          REPO_URL="https://${{ gitea.token }}@git.niujiekeji.com/${{ gitea.repository }}.git"
          BRANCH="${{ gitea.ref_name }}"
          NEW_SHA="${{ gitea.sha }}"

          git clone --depth 1 --single-branch --branch "${BRANCH}" "${REPO_URL}" .
          git checkout -B "${BRANCH}" "${NEW_SHA}"

          echo "${NEW_SHA}" > /tmp/cache-schema-new-sha.txt

      - name: 检查配置文件
        run: |
          if [ ! -f .gitea/config/cache-schema-check-config.yaml ]; then
            echo "错误: 缺少 .gitea/config/cache-schema-check-config.yaml"
            exit 1
          fi
          # 顶层总开关 enabled: false 时跳过后续步骤（与 notify.enabled 区分，仅匹配行首）
          if grep -Eq '^enabled:[[:space:]]*false([[:space:]]|#|$)' .gitea/config/cache-schema-check-config.yaml; then
            echo "总开关 enabled=false，跳过缓存结构检查"
            touch /tmp/cache-schema-check.skip
          fi

      - name: 从 Nexus 私库下载 cache-schema-checker
        run: |
          if [ -f /tmp/cache-schema-check.skip ]; then
            echo "总开关已关闭，跳过下载"
            exit 0
          fi

          GROUP_PATH="com/codechecker/cache-schema-checker"
          JAR_NAME="cache-schema-checker-${CACHE_SCHEMA_CHECKER_VERSION}.jar"
          JAR_URL="${CACHE_SCHEMA_CHECKER_REPO_URL}/${GROUP_PATH}/${CACHE_SCHEMA_CHECKER_VERSION}/${JAR_NAME}"
          JAR_PATH="/tmp/${JAR_NAME}"

          echo "下载: ${JAR_URL}"
          if command -v curl >/dev/null 2>&1; then
            curl -fsSL -o "${JAR_PATH}" "${JAR_URL}"
          elif command -v wget >/dev/null 2>&1; then
            wget -q -O "${JAR_PATH}" "${JAR_URL}"
          else
            echo "错误: Runner 缺少 curl 或 wget，无法从 Nexus 下载 jar"
            exit 1
          fi

          if [ ! -s "${JAR_PATH}" ]; then
            echo "错误: 下载失败或文件为空: ${JAR_PATH}"
            exit 1
          fi

          ls -lh "${JAR_PATH}"

      - name: 验证 JDK
        run: |
          if [ -f /tmp/cache-schema-check.skip ]; then
            echo "总开关已关闭，跳过"
            exit 0
          fi
          echo "Java: $(java -version 2>&1 | head -1)"

      - name: 执行缓存序列化结构检测
        env:
          # push 前 tip；新分支首次 push 时为全 0。workflow_dispatch 可能为空，下方会回退。
          PUSH_BEFORE: ${{ gitea.event.before }}
        run: |
          if [ -f /tmp/cache-schema-check.skip ]; then
            echo "总开关已关闭，跳过检测"
            exit 0
          fi

          NEW_SHA=$(cat /tmp/cache-schema-new-sha.txt)
          OLD_SHA="${PUSH_BEFORE}"

          # 新分支首次 push（before 全 0）→ 跳过
          if [ -z "$OLD_SHA" ] || echo "$OLD_SHA" | grep -Eq '^0+$'; then
            # 手动触发：无 before，回退为 HEAD~1（加深 1 层后取父提交）
            if [ "${{ gitea.event_name }}" = "workflow_dispatch" ]; then
              git fetch --deepen 1 || true
              OLD_SHA=$(git rev-parse HEAD~1 2>/dev/null || echo "")
              if [ -z "$OLD_SHA" ]; then
                echo "手动触发且无父提交，跳过检测"
                exit 0
              fi
              echo "workflow_dispatch：无 push before，回退使用 HEAD~1=${OLD_SHA}"
            else
              echo "新分支首次 push（before 为空/全 0），跳过检测"
              exit 0
            fi
          fi

          if [ "$OLD_SHA" = "$NEW_SHA" ]; then
            echo "before 与 after 相同，无需检测"
            exit 0
          fi

          # 确保 before 提交对象可读（按 SHA 浅取，无需全量历史）
          ensure_commit() {
            local sha="$1"
            if git cat-file -e "${sha}^{commit}" 2>/dev/null; then
              return 0
            fi
            echo "本地缺少 ${sha}，尝试按 SHA 浅取…"
            if git fetch --depth 1 origin "${sha}"; then
              git cat-file -e "${sha}^{commit}" 2>/dev/null && return 0
            fi
            # 兜底：逐步 deepen（应对部分服务端不允许直接 fetch SHA）
            for d in 10 30 50 100; do
              echo "deepen ${d}…"
              git fetch --deepen "${d}" || true
              if git cat-file -e "${sha}^{commit}" 2>/dev/null; then
                return 0
              fi
            done
            return 1
          }

          if ! ensure_commit "$OLD_SHA"; then
            echo "错误: 无法获取 push 前 tip ${OLD_SHA}，请检查 shallow/权限"
            exit 2
          fi
          if ! ensure_commit "$NEW_SHA"; then
            echo "错误: 无法解析当前 tip ${NEW_SHA}"
            exit 2
          fi

          echo "对比区间: ${OLD_SHA} → ${NEW_SHA}"
          COMMIT_COUNT=$(git rev-list --count "${OLD_SHA}..${NEW_SHA}" 2>/dev/null || echo "?")
          echo "本次 push 累计 commit 数（约）: ${COMMIT_COUNT}"

          COMMIT_TIME=$(git log -1 --format=%cd --date=format:'%Y-%m-%d %H:%M:%S' "${NEW_SHA}")

          java -jar "/tmp/cache-schema-checker-${CACHE_SCHEMA_CHECKER_VERSION}.jar" \
            --config .gitea/config/cache-schema-check-config.yaml \
            --repo-root . \
            --old-sha "$OLD_SHA" \
            --new-sha "$NEW_SHA" \
            --branch "${{ gitea.ref_name }}" \
            --modifier "${{ gitea.actor }}" \
            --modify-time "$COMMIT_TIME"