ci.yml

name: CI

on:
  push:
    branches: [master, develop]
  pull_request:

defaults:
  run:
    shell: bash

env:
  PUB_ENVIRONMENT: bot.github

jobs:
  analysis:
    name: Analysis
    runs-on: ubuntu-latest
    timeout-minutes: 20

    steps:
      - name: Checkout Repository
        uses: actions/checkout@v6

      - name: Set Up Flutter
        uses: subosito/flutter-action@v2
        with:
          channel: stable
          cache: true

      - name: Flutter Version Info
        run: flutter doctor -v

      - name: Cache Pub Dependencies
        uses: actions/cache@v5
        with:
          path: |
            ~/.pub-cache
            .dart_tool
          key: ${{ runner.os }}-pub-${{ hashFiles('**/pubspec.yaml') }}
          restore-keys: |
            ${{ runner.os }}-pub-

      - name: Install Melos
        run: |
          flutter pub global activate melos
          echo "$HOME/.pub-cache/bin" >> $GITHUB_PATH

      - name: Bootstrap Workspace with Melos
        run: melos bootstrap

      - name: Lint Code
        run: melos analyze

  formatting:
    name: Formatting
    needs: analysis
    runs-on: ubuntu-latest
    timeout-minutes: 20

    steps:
      - name: Checkout Repository
        uses: actions/checkout@v6

      - name: Set Up Flutter
        uses: subosito/flutter-action@v2
        with:
          channel: stable
          cache: true

      - name: Cache Pub Dependencies
        uses: actions/cache@v5
        with:
          path: |
            ~/.pub-cache
            .dart_tool
          key: ${{ runner.os }}-pub-${{ hashFiles('**/pubspec.yaml') }}
          restore-keys: |
            ${{ runner.os }}-pub-

      - name: Install Melos
        run: |
          flutter pub global activate melos
          echo "$HOME/.pub-cache/bin" >> $GITHUB_PATH

      - name: Bootstrap Workspace with Melos
        run: melos bootstrap

      - name: Check Code Formatting
        run: melos format --output none --set-exit-if-changed

  unit_tests:
    name: Unit Tests
    needs: formatting
    runs-on: ubuntu-latest
    timeout-minutes: 20
    defaults:
      run:
        working-directory: flutter_secure_storage

    steps:
      - name: Checkout Repository
        uses: actions/checkout@v6

      - name: Set Up Flutter
        uses: subosito/flutter-action@v2
        with:
          channel: stable
          cache: true

      - name: Cache Pub Dependencies
        uses: actions/cache@v5
        with:
          path: |
            ~/.pub-cache
            flutter_secure_storage/.dart_tool
          key: ${{ runner.os }}-pub-${{ hashFiles('**/pubspec.yaml') }}
          restore-keys: |
            ${{ runner.os }}-pub-

      - name: Install Dependencies
        run: flutter pub get

      - name: Run Unit Tests with Coverage
        run: flutter test --coverage

      - name: Upload Coverage Report
        uses: actions/upload-artifact@v7
        with:
          name: coverage-report
          path: flutter_secure_storage/coverage/lcov.info

      - name: Upload Flutter Coverage to Codecov
        uses: codecov/codecov-action@v6
        with:
          token: ${{ secrets.CODECOV_TOKEN }}
          files: flutter_secure_storage/coverage/lcov.info
          flags: flutter
          name: codecov-flutter
          fail_ci_if_error: true

  unit_tests_android:
    name: Android Unit Tests
    needs: formatting
    runs-on: ubuntu-latest
    timeout-minutes: 30

    steps:
      - name: Checkout Repository
        uses: actions/checkout@v6

      - name: Set Up JDK 17
        uses: actions/setup-java@v5
        with:
          distribution: "temurin"
          java-version: "17"

      - name: Set Up Flutter
        uses: subosito/flutter-action@v2
        with:
          channel: stable
          cache: true

      - name: Build Example App (generates native build files)
        working-directory: flutter_secure_storage/example
        run: flutter build apk --debug

      - name: Run Android Unit Tests with Coverage
        working-directory: flutter_secure_storage/example/android
        run: ./gradlew :flutter_secure_storage:jacocoTestReport

      - name: Upload Android Coverage to Codecov
        uses: codecov/codecov-action@v6
        with:
          token: ${{ secrets.CODECOV_TOKEN }}
          files: flutter_secure_storage/android/build/reports/jacoco/jacocoTestReport/jacocoTestReport.xml
          flags: android
          name: codecov-android
          fail_ci_if_error: true

  unit_tests_web:
    name: Web Unit Tests
    needs: formatting
    runs-on: ubuntu-latest
    timeout-minutes: 20

    steps:
      - name: Checkout Repository
        uses: actions/checkout@v6

      - name: Set Up Flutter
        uses: subosito/flutter-action@v2
        with:
          channel: stable
          cache: true

      - name: Install Dependencies
        working-directory: flutter_secure_storage_web
        run: flutter pub get

      - name: Run Web Unit Tests
        working-directory: flutter_secure_storage_web
        run: flutter test --platform chrome

  unit_tests_windows:
    name: Windows Unit Tests
    needs: formatting
    runs-on: windows-latest
    timeout-minutes: 30

    steps:
      - name: Checkout Repository
        uses: actions/checkout@v6

      - name: Set Up Flutter
        uses: subosito/flutter-action@v2
        with:
          channel: stable
          cache: true

      - name: Install Dependencies
        working-directory: flutter_secure_storage_windows
        run: flutter pub get

      - name: Run Windows Unit Tests with Coverage
        working-directory: flutter_secure_storage_windows
        run: flutter test --coverage

      - name: Upload Windows Coverage to Codecov
        uses: codecov/codecov-action@v6
        with:
          token: ${{ secrets.CODECOV_TOKEN }}
          files: flutter_secure_storage_windows/coverage/lcov.info
          flags: windows
          name: codecov-windows
          fail_ci_if_error: true

  native_tests_windows:
    name: Windows Native Tests
    needs: formatting
    runs-on: windows-latest
    timeout-minutes: 30

    steps:
      - name: Checkout Repository
        uses: actions/checkout@v6

      - name: Set Up Flutter
        uses: subosito/flutter-action@v2
        with:
          channel: stable
          cache: true

      - name: Install Melos
        shell: pwsh
        run: |
          flutter pub global activate melos
          Add-Content $env:GITHUB_PATH "$env:PUB_CACHE\bin"

      - name: Bootstrap Workspace with Melos
        shell: pwsh
        run: melos bootstrap

      - name: Build Windows Example and Native Tests
        working-directory: flutter_secure_storage/example
        run: flutter build windows --debug

      - name: Run Native Windows Tests
        working-directory: flutter_secure_storage/example
        shell: pwsh
        run: |
          ctest --test-dir build/windows/x64/plugins/flutter_secure_storage_windows `
            --output-on-failure `
            -C Debug

  integration_tests_windows:
    name: Windows Integration Tests
    needs: [unit_tests, unit_tests_windows]
    runs-on: windows-latest
    timeout-minutes: 20

    steps:
      - name: Checkout Repository
        uses: actions/checkout@v6

      - name: Set Up Flutter
        uses: subosito/flutter-action@v2
        with:
          channel: stable
          cache: true

      - name: Install Melos
        shell: pwsh
        run: |
          flutter pub global activate melos
          Add-Content $env:GITHUB_PATH "$env:PUB_CACHE\bin"

      - name: Bootstrap Workspace with Melos
        shell: pwsh
        run: melos bootstrap

      - name: Build Windows Example App
        working-directory: flutter_secure_storage/example
        run: flutter build windows --debug

      - name: Run Windows Integration Tests
        working-directory: flutter_secure_storage/example
        run: flutter test integration_test/windows_test.dart -d windows

  native_tests_linux:
    name: Linux Native Tests
    needs: formatting
    runs-on: ubuntu-latest
    timeout-minutes: 30

    steps:
      - name: Checkout Repository
        uses: actions/checkout@v6

      - name: Set Up Flutter
        uses: subosito/flutter-action@v2
        with:
          channel: stable
          cache: true

      - name: Install Linux Build Dependencies
        run: |
          sudo apt-get update -y
          sudo apt-get install -y clang cmake ninja-build pkg-config \
            libgtk-3-dev libblkid-dev liblzma-dev libsecret-1-dev \
            gnome-keyring dbus-x11

      - name: Install Melos
        run: |
          flutter pub global activate melos
          echo "$HOME/.pub-cache/bin" >> $GITHUB_PATH

      - name: Bootstrap Workspace with Melos
        run: melos bootstrap

      - name: Build Linux Example and Native Tests
        working-directory: flutter_secure_storage/example
        run: flutter build linux --debug

      - name: Start D-Bus Session and Unlock Keyring
        run: |
          eval $(dbus-launch --sh-syntax)
          echo "DBUS_SESSION_BUS_ADDRESS=$DBUS_SESSION_BUS_ADDRESS" >> $GITHUB_ENV
          echo "DBUS_SESSION_BUS_PID=$DBUS_SESSION_BUS_PID" >> $GITHUB_ENV
          echo "" | gnome-keyring-daemon --unlock --daemonize --components=secrets

      - name: Run Native Linux Tests
        working-directory: flutter_secure_storage/example/build/linux/x64/debug/plugins/flutter_secure_storage_linux
        run: ctest --output-on-failure

  integration_tests_linux:
    name: Linux Integration Tests
    needs: [unit_tests, native_tests_linux]
    runs-on: ubuntu-latest
    timeout-minutes: 30

    steps:
      - name: Checkout Repository
        uses: actions/checkout@v6

      - name: Set Up Flutter
        uses: subosito/flutter-action@v2
        with:
          channel: stable
          cache: true

      - name: Install Linux Build Dependencies
        run: |
          sudo apt-get update -y
          sudo apt-get install -y clang cmake ninja-build pkg-config \
            libgtk-3-dev libblkid-dev liblzma-dev libsecret-1-dev \
            gnome-keyring dbus-x11 xvfb

      - name: Install Melos
        run: |
          flutter pub global activate melos
          echo "$HOME/.pub-cache/bin" >> $GITHUB_PATH

      - name: Bootstrap Workspace with Melos
        run: melos bootstrap

      - name: Start D-Bus Session and Unlock Keyring
        run: |
          eval $(dbus-launch --sh-syntax)
          echo "DBUS_SESSION_BUS_ADDRESS=$DBUS_SESSION_BUS_ADDRESS" >> $GITHUB_ENV
          echo "DBUS_SESSION_BUS_PID=$DBUS_SESSION_BUS_PID" >> $GITHUB_ENV
          echo "" | gnome-keyring-daemon --unlock --daemonize --components=secrets

      - name: Run Linux Integration Tests
        working-directory: flutter_secure_storage/example
        run: xvfb-run flutter test integration_test/linux_test.dart -d linux

  integration_tests_android:
    name: Android Tests
    needs: [unit_tests, unit_tests_android]
    runs-on: ubuntu-latest
    timeout-minutes: 30
    strategy:
      matrix:
        include:
          - api-level: 23
            target: default
            arch: x86
            flutter-version: "3.32.x"
          - api-level: 24
            target: default
            arch: x86_64
            flutter-version: ""
          - api-level: 36
            target: google_apis
            arch: x86_64
            flutter-version: ""

    steps:
      - name: Checkout Repository
        uses: actions/checkout@v6

      - name: Free Disk Space
        run: |
          sudo rm -rf /usr/share/dotnet
          sudo rm -rf /opt/ghc
          df -h

      - name: Set Up JDK 17
        uses: actions/setup-java@v5
        with:
          distribution: "temurin"
          java-version: "17"

      - name: Set Up Flutter
        uses: subosito/flutter-action@v2
        with:
          flutter-version: ${{ matrix.flutter-version || '' }}
          channel: stable
          cache: true

      - name: Enable KVM
        run: |
          echo 'KERNEL=="kvm", GROUP="kvm", MODE="0666", OPTIONS+="static_node=kvm"' | sudo tee /etc/udev/rules.d/99-kvm4all.rules
          sudo udevadm control --reload-rules
          sudo udevadm trigger --name-match=kvm

#      - name: Cache Gradle
#        uses: gradle/actions/setup-gradle@v5

      - name: Cache AVD
        uses: actions/cache@v5
        id: avd-cache
        with:
          path: |
            ~/.android/avd/*
            ~/.android/adb*
          key: avd-${{ matrix.api-level }}-${{ matrix.arch }}

      - name: Create AVD Snapshot
        if: steps.avd-cache.outputs.cache-hit != 'true'
        uses: reactivecircus/android-emulator-runner@v2
        with:
          api-level: ${{ matrix.api-level }}
          target: ${{ matrix.target }}
          arch: ${{ matrix.arch }}
          force-avd-creation: false
          emulator-options: -no-window -gpu swiftshader_indirect -noaudio -no-boot-anim -camera-back none
          disable-animations: false
          script: echo "Generated AVD snapshot for caching."

      - name: Run Integration Tests
        uses: reactivecircus/android-emulator-runner@v2
        with:
          api-level: ${{ matrix.api-level }}
          target: ${{ matrix.target }}
          arch: ${{ matrix.arch }}
          force-avd-creation: false
          emulator-options: -no-snapshot-save -no-window -gpu swiftshader_indirect -noaudio -no-boot-anim -camera-back none
          disable-animations: true
          script: flutter test integration_test
          working-directory: flutter_secure_storage/example

  integration_tests_web:
    name: Web Integration Tests
    needs: [unit_tests, unit_tests_web]
    runs-on: ubuntu-latest
    timeout-minutes: 20

    steps:
      - name: Checkout Repository
        uses: actions/checkout@v6

      - name: Set Up Flutter
        uses: subosito/flutter-action@v2
        with:
          channel: stable
          cache: true

      - name: Setup ChromeDriver
        uses: nanasess/setup-chromedriver@v2

      - name: Start ChromeDriver
        run: chromedriver --port=4444 &

      - name: Install Dependencies
        working-directory: flutter_secure_storage/example
        run: flutter pub get

      - name: Run Web Integration Tests
        working-directory: flutter_secure_storage/example
        run: |
          flutter drive \
            --driver=test_driver/app_test_test.dart \
            --target=integration_test/web_test.dart \
            -d web-server

  typecheck_swift_ios:
    name: Swift iOS Typecheck
    runs-on: macos-latest
    timeout-minutes: 5
    needs: [unit_tests, unit_tests_android]

    steps:
      - name: Checkout Repository
        uses: actions/checkout@v6

      - name: Typecheck Swift against iOS 12 minimum
        run: |
          swiftc -typecheck \
            -target arm64-apple-ios12.0 \
            -sdk "$(xcrun --sdk iphoneos --show-sdk-path)" \
            flutter_secure_storage_darwin/darwin/flutter_secure_storage_darwin/Sources/flutter_secure_storage_darwin/FlutterSecureStorage.swift

      - name: Typecheck Swift against latest iOS SDK
        run: |
          SDK_PATH="$(xcrun --sdk iphoneos --show-sdk-path)"
          SDK_VERSION="$(xcrun --sdk iphoneos --show-sdk-version)"
          swiftc -typecheck \
            -target "arm64-apple-ios${SDK_VERSION}" \
            -sdk "$SDK_PATH" \
            flutter_secure_storage_darwin/darwin/flutter_secure_storage_darwin/Sources/flutter_secure_storage_darwin/FlutterSecureStorage.swift

  native_tests_darwin:
    name: Darwin Native Tests
    runs-on: macos-latest
    timeout-minutes: 20
    needs: formatting

    steps:
      - name: Checkout Repository
        uses: actions/checkout@v6

      - name: Set Up Flutter
        uses: subosito/flutter-action@v2
        with:
          channel: stable
          cache: true

      - name: Install Melos
        run: flutter pub global activate melos

      - name: Bootstrap Melos
        run: melos bootstrap

      - name: Configure macOS Project
        working-directory: flutter_secure_storage/example
        run: flutter build macos --config-only --no-pub

      - name: Run Darwin Native Tests
        working-directory: flutter_secure_storage/example/macos
        run: |
          xcodebuild test \
            -workspace Runner.xcworkspace \
            -scheme Runner \
            -destination 'platform=macOS' \
            -only-testing RunnerTests \
            CODE_SIGNING_ALLOWED=NO

  integration_tests_ios:
    name: iOS Tests
    runs-on: macos-latest
    timeout-minutes: 30
    needs: [typecheck_swift_ios]

    env:
      SIM_OS: iOS
      SIM_OS_VERSION: "26.2"
      SIM_DEVICE: "iPhone 17"

    steps:
      - name: Checkout Repository
        uses: actions/checkout@v6

      - name: Set Up Flutter
        uses: subosito/flutter-action@v2
        with:
          channel: stable
          cache: true

      - name: Set Up Simulator
        id: simulator
        uses: futureware-tech/simulator-action@v5
        with:
          os: ${{ env.SIM_OS }}
          os_version: ${{ env.SIM_OS_VERSION }}
          model: ${{ env.SIM_DEVICE }}
          erase_before_boot: true
          wait_for_boot: true
          boot_timeout_seconds: 300
          boot_retries: 3

      - name: Install Dependencies
        working-directory: flutter_secure_storage/example
        run: flutter pub get

      - name: Run Integration Tests
        uses: nick-fields/retry@v4
        env:
          DEVICE_ID: ${{ steps.simulator.outputs.udid }}
        with:
          timeout_minutes: 5
          max_attempts: 3
          command: cd flutter_secure_storage/example && flutter test integration_test/app_test.dart -d "$DEVICE_ID" --verbose --dart-define=IS_SIMULATOR=true