action.yml

name: 'Gradle Lighthouse'
description: 'Run Gradle Lighthouse audit and post results as PR comments + SARIF upload'
branding:
  icon: 'zap'
  color: 'orange'

inputs:
  gradle-args:
    description: 'Additional Gradle arguments'
    required: false
    default: ''
  fail-on-severity:
    description: 'Fail the action if issues at this severity or above exist (NONE, INFO, WARNING, ERROR, FATAL)'
    required: false
    default: 'NONE'
  upload-sarif:
    description: 'Upload SARIF results to GitHub Security tab'
    required: false
    default: 'true'
  comment-on-pr:
    description: 'Post score summary as PR comment'
    required: false
    default: 'true'
  base-report-path:
    description: 'Path to base reports for delta calculation (optional)'
    required: false
    default: '.lighthouse/base-reports'

runs:
  using: 'composite'
  steps:
    - name: Download Base Reports (Main Branch)
      if: github.event_name == 'pull_request'
      uses: actions/github-script@v9
      with:
        script: |
          try {
            const { data: runs } = await github.rest.actions.listWorkflowRuns({
              owner: context.repo.owner,
              repo: context.repo.repo,
              workflow_id: context.workflow,
              branch: context.payload.pull_request.base.ref,
              status: 'success',
              per_page: 1
            });
            if (runs.workflow_runs.length > 0) {
              const runId = runs.workflow_runs[0].id;
              const { data: artifacts } = await github.rest.actions.listWorkflowRunArtifacts({
                owner: context.repo.owner,
                repo: context.repo.repo,
                run_id: runId
              });
              const match = artifacts.artifacts.find(a => a.name === 'lighthouse-reports');
              if (match) {
                const download = await github.rest.actions.downloadArtifact({
                  owner: context.repo.owner,
                  repo: context.repo.repo,
                  artifact_id: match.id,
                  archive_format: 'zip'
                });
                const fs = require('fs');
                fs.writeFileSync('${{ github.workspace }}/base-reports.zip', Buffer.from(download.data));
                const exec = require('@actions/exec');
                await exec.exec('unzip', ['-o', '${{ github.workspace }}/base-reports.zip', '-d', '${{ inputs.base-report-path }}']);
                console.log('Successfully downloaded base reports from run ' + runId);
              }
            }
          } catch (e) {
            console.log('Could not download base reports: ' + e.message);
          }

    - name: Run Lighthouse Audit
      shell: bash
      run: |
        ./gradlew lighthouseAudit lighthouseAggregate \
          -Plighthouse.failOnSeverity=${{ inputs.fail-on-severity }} \
          -Plighthouse.baseReportDir=${{ inputs.base-report-path }} \
          ${{ inputs.gradle-args }} \
          --no-daemon --stacktrace
      env:
        TERM: xterm-256color

    - name: Upload SARIF
      if: inputs.upload-sarif == 'true' && always()
      uses: github/codeql-action/upload-sarif@v4.37.3
      with:
        sarif_file: build/reports/lighthouse/
        category: gradle-lighthouse

    - name: Find SARIF reports
      if: always()
      shell: bash
      id: reports
      run: |
        REPORT_FILES=$(find . -path '*/reports/lighthouse/*-report.sarif' | head -20)
        echo "sarif_files=$REPORT_FILES" >> $GITHUB_OUTPUT

        # Extract score from root module report
        SCORE=$(grep -o '"score": [0-9]*' build/reports/lighthouse/module-report.json 2>/dev/null | head -1 | grep -o '[0-9]*' || echo "N/A")
        echo "score=$SCORE" >> $GITHUB_OUTPUT

    - name: PR Comment
      if: inputs.comment-on-pr == 'true' && github.event_name == 'pull_request' && always()
      uses: actions/github-script@v9
      with:
        script: |
          const fs = require('fs');
          const summaryPath = 'build/reports/lighthouse/lighthouse-pr-summary.md';
          let body = '';

          if (fs.existsSync(summaryPath)) {
            body = fs.readFileSync(summaryPath, 'utf8');
          } else {
            const score = '${{ steps.reports.outputs.score }}';
            body = `## 🏗️ Gradle Lighthouse Report

            | Metric | Value |
            |--------|-------|
            | **Health Score** | ${score}/100 |
            | **Status** | ${parseInt(score) >= 70 ? '✅ Passing' : '⚠️ Needs attention'} |

            > Full report available in the [Actions artifacts](${context.serverUrl}/${context.repo.owner}/${context.repo.repo}/actions/runs/${context.runId}).
            > SARIF results uploaded to the Security tab.`;
          }

          // Find existing comment
          const { data: comments } = await github.rest.issues.listComments({
            owner: context.repo.owner,
            repo: context.repo.repo,
            issue_number: context.issue.number,
          });
          const existing = comments.find(c => c.body.includes('Gradle Lighthouse Report'));

          if (existing) {
            await github.rest.issues.updateComment({
              owner: context.repo.owner,
              repo: context.repo.repo,
              comment_id: existing.id,
              body: body
            });
          } else {
            await github.rest.issues.createComment({
              owner: context.repo.owner,
              repo: context.repo.repo,
              issue_number: context.issue.number,
              body: body
            });
          }