aitbc/.gitea/workflows/smart-contract-tests.yml

name: smart-contract-tests

on:
  push:
    branches: [ main, develop ]
    paths:
      - 'contracts/**'
      - 'packages/solidity/**'
      - '.gitea/workflows/smart-contract-tests.yml'
  pull_request:
    branches: [ main, develop ]
    paths:
      - 'contracts/**'
      - 'packages/solidity/**'
      - '.gitea/workflows/smart-contract-tests.yml'
  workflow_dispatch:

jobs:
  test-solidity-contracts:
    runs-on: debian
    
    strategy:
      matrix:
        project:
          - name: "aitbc-token"
            path: "packages/solidity/aitbc-token"
            config: "hardhat.config.ts"
          - name: "contracts-root"
            path: "contracts"
            config: "foundry.toml"
    
    steps:
      - name: Setup workspace
        run: |
          echo "=== SOLIDITY CONTRACTS TESTS SETUP ==="
          echo "Current PWD: $(pwd)"
          echo "Forcing absolute workspace path..."
          
          # Clean and create isolated workspace
          rm -rf /opt/aitbc/solidity-workspace
          mkdir -p /opt/aitbc/solidity-workspace
          cd /opt/aitbc/solidity-workspace
          
          # Ensure no git lock files exist
          find . -name "*.lock" -delete 2>/dev/null || true
          
          echo "Workspace PWD: $(pwd)"
          echo "Cloning repository..."
          git clone https://gitea.bubuit.net/oib/aitbc.git repo
          
          cd repo
          echo "Repo PWD: $(pwd)"
          echo "Files in repo:"
          ls -la
          
          echo "=== SOLIDITY PROJECT: ${{ matrix.project.name }} ==="
          echo "Project path: ${{ matrix.project.path }}"
          echo "Config file: ${{ matrix.project.config }}"

      - name: Setup Node.js
        run: |
          cd /opt/aitbc/solidity-workspace/repo/${{ matrix.project.path }}
          echo "Current Node.js version: $(node -v)"
          echo "Using installed Node.js version - no installation needed"
          
          # Verify Node.js is available
          if ! command -v node >/dev/null 2>&1; then
            echo "❌ Node.js not found - please install Node.js first"
            exit 1
          fi
          
          echo "✅ Node.js $(node -v) is available and ready"

      - name: Install Foundry
        if: matrix.project.config == 'foundry.toml'
        run: |
          echo "=== INSTALLING FOUNDRY ==="
          cd /opt/aitbc/solidity-workspace/repo/${{ matrix.project.path }}
          
          # Install foundryup
          curl -L https://foundry.paradigm.xyz | bash
          
          # Source the shell environment
          source ~/.bashrc 2>/dev/null || source ~/.zshrc 2>/dev/null || true
          
          # Add to PATH explicitly
          export PATH="$HOME/.foundry/bin:$PATH"
          echo 'export PATH="$HOME/.foundry/bin:$PATH"' >> ~/.bashrc
          
          # Install foundry
          foundryup --version nightly
          
          # Update PATH again and verify
          export PATH="$HOME/.foundry/bin:$PATH"
          
          # Verify installation
          if ! command -v forge >/dev/null 2>&1; then
            echo "❌ Forge not found, trying alternative installation..."
            # Try direct installation
            curl -L https://github.com/foundry-rs/foundry/releases/download/nightly/foundryup-linux-amd64 -o foundryup
            chmod +x foundryup
            ./foundryup --version nightly
            export PATH="$HOME/.foundry/bin:$PATH"
          fi
          
          forge --version
          cast --version
          echo "✅ Foundry tools installed successfully"

      - name: Install Hardhat Dependencies
        if: matrix.project.config == 'hardhat.config.ts'
        run: |
          echo "=== INSTALLING HARDHAT DEPENDENCIES ==="
          cd /opt/aitbc/solidity-workspace/repo/${{ matrix.project.path }}
          
          # Install npm dependencies
          npm install --legacy-peer-deps
          
          # Verify installation
          npx hardhat --version
          echo "✅ Hardhat dependencies installed successfully"

      - name: Compile Contracts (Foundry)
        if: matrix.project.config == 'foundry.toml'
        run: |
          echo "=== COMPILING FOUNDARY CONTRACTS ==="
          cd /opt/aitbc/solidity-workspace/repo/${{ matrix.project.path }}
          
          # Ensure PATH is set
          export PATH="$HOME/.foundry/bin:$PATH"
          source ~/.bashrc 2>/dev/null || true
          
          # Build contracts
          forge build
          
          # Check compilation output
          echo "Compilation artifacts:"
          ls -la out/
          
          echo "✅ Foundry contracts compiled successfully"

      - name: Compile Contracts (Hardhat)
        if: matrix.project.config == 'hardhat.config.ts'
        run: |
          echo "=== COMPILING HARDHAT CONTRACTS ==="
          cd /opt/aitbc/solidity-workspace/repo/${{ matrix.project.path }}
          
          # Compile contracts
          npm run build
          
          # Check compilation output
          echo "Compilation artifacts:"
          ls -la artifacts/
          
          echo "✅ Hardhat contracts compiled successfully"

      - name: Run Contract Tests (Foundry)
        if: matrix.project.config == 'foundry.toml'
        run: |
          echo "=== RUNNING FOUNDRY CONTRACT TESTS ==="
          cd /opt/aitbc/solidity-workspace/repo/${{ matrix.project.path }}
          
          # Ensure PATH is set
          export PATH="$HOME/.foundry/bin:$PATH"
          source ~/.bashrc 2>/dev/null || true
          
          # Run tests with verbose output
          forge test --gas-report -vv
          
          echo "✅ Foundry contract tests completed"

      - name: Run Contract Tests (Hardhat)
        if: matrix.project.config == 'hardhat.config.ts'
        run: |
          echo "=== RUNNING HARDHAT CONTRACT TESTS ==="
          cd /opt/aitbc/solidity-workspace/repo/${{ matrix.project.path }}
          
          # Run tests
          npm run test
          
          echo "✅ Hardhat contract tests completed"

      - name: Contract Security Analysis
        run: |
          echo "=== CONTRACT SECURITY ANALYSIS ==="
          cd /opt/aitbc/solidity-workspace/repo/${{ matrix.project.path }}
          
          if [ "${{ matrix.project.config }}" == "foundry.toml" ]; then
            # Ensure PATH is set
            export PATH="$HOME/.foundry/bin:$PATH"
            source ~/.bashrc 2>/dev/null || true
            
            # Run Slither if available
            if command -v slither >/dev/null 2>&1; then
              echo "Running Slither security analysis..."
              slither . --filter medium,high --json slither-report.json || echo "Slither analysis completed with warnings"
            else
              echo "Slither not available, skipping security analysis"
            fi
            
            # Run Foundry security checks
            echo "Running Foundry security checks..."
            forge test --gas-report --fail-on-revert || echo "Security tests completed"
            
          else
            # Hardhat security checks
            echo "Running Hardhat security checks..."
            npm run test 2>&1 | grep -i "revert\|error\|fail" || echo "Security checks completed"
          fi
          
          echo "✅ Contract security analysis completed"

      - name: Gas Optimization Report
        run: |
          echo "=== GAS OPTIMIZATION REPORT ==="
          cd /opt/aitbc/solidity-workspace/repo/${{ matrix.project.path }}
          
          if [ "${{ matrix.project.config }}" == "foundry.toml" ]; then
            # Ensure PATH is set
            export PATH="$HOME/.foundry/bin:$PATH"
            source ~/.bashrc 2>/dev/null || true
            
            # Generate gas report
            forge test --gas-report > gas-report.txt 2>&1 || true
            
            echo "Gas optimization summary:"
            cat gas-report.txt | grep -A 20 "Gas report" || echo "No gas report available"
            
          else
            echo "Gas optimization for Hardhat project:"
            echo "Check npm test output for gas usage information"
          fi
          
          echo "✅ Gas optimization report completed"

      - name: Check Contract Sizes
        run: |
          echo "=== CONTRACT SIZE ANALYSIS ==="
          cd /opt/aitbc/solidity-workspace/repo/${{ matrix.project.path }}
          
          if [ "${{ matrix.project.config }}" == "foundry.toml" ]; then
            # Ensure PATH is set
            export PATH="$HOME/.foundry/bin:$PATH"
            source ~/.bashrc 2>/dev/null || true
            
            # Check contract sizes
            echo "Contract bytecode sizes:"
            for contract in out/*.sol/*.json; do
              if [ -f "$contract" ]; then
                name=$(basename "$contract" .json)
                size=$(jq -r '.bytecode | length / 2' "$contract" 2>/dev/null || echo "0")
                echo "$name: $size bytes"
              fi
            done
            
          else
            echo "Contract sizes for Hardhat project:"
            ls -la artifacts/contracts/ | head -10
          fi
          
          echo "✅ Contract size analysis completed"

      - name: Upload Test Results
        if: always()
        run: |
          echo "=== UPLOADING TEST RESULTS ==="
          cd /opt/aitbc/solidity-workspace/repo/${{ matrix.project.path }}
          
          # Create results directory
          mkdir -p test-results
          
          # Copy test results
          if [ "${{ matrix.project.config }}" == "foundry.toml" ]; then
            # Ensure PATH is set
            export PATH="$HOME/.foundry/bin:$PATH"
            source ~/.bashrc 2>/dev/null || true
            
            # Foundry results
            forge test --gas-report -vv > test-results/forge-test-output.txt 2>&1 || true
            cp gas-report.txt test-results/ 2>/dev/null || true
            cp slither-report.json test-results/ 2>/dev/null || true
            
          else
            # Hardhat results
            npm run test > test-results/hardhat-test-output.txt 2>&1 || true
            cp -r artifacts/ test-results/ 2>/dev/null || true
          fi
          
          echo "Test results saved to test-results/"
          ls -la test-results/
          
          echo "✅ Test results uploaded"

  lint-solidity:
    runs-on: debian
    needs: test-solidity-contracts
    
    steps:
      - name: Setup workspace
        run: |
          echo "=== SOLIDITY LINTING SETUP ==="
          rm -rf /opt/aitbc/solidity-lint-workspace
          mkdir -p /opt/aitbc/solidity-lint-workspace
          cd /opt/aitbc/solidity-lint-workspace
          
          # Ensure no git lock files exist
          find . -name "*.lock" -delete 2>/dev/null || true
          
          git clone https://gitea.bubuit.net/oib/aitbc.git repo
          cd repo

      - name: Lint Solidity Contracts
        run: |
          echo "=== LINTING SOLIDITY CONTRACTS ==="
          
          # Lint Hardhat projects
          if [ -d "packages/solidity/aitbc-token" ]; then
            cd packages/solidity/aitbc-token
            npm install --legacy-peer-deps
            npm run lint || echo "Linting completed with warnings"
            cd ../../..
          fi
          
          # Lint Foundry projects
          if [ -f "contracts/foundry.toml" ]; then
            cd contracts
            
            # Install and setup forge for linting
            if ! command -v forge >/dev/null 2>&1; then
              curl -L https://foundry.paradigm.xyz | bash
              export PATH="$HOME/.foundry/bin:$PATH"
              source ~/.bashrc 2>/dev/null || true
              foundryup --version nightly
            fi
            
            # Ensure PATH is set
            export PATH="$HOME/.foundry/bin:$PATH"
            source ~/.bashrc 2>/dev/null || true
            
            # Format check
            forge fmt --check || echo "Formatting check completed with warnings"
            
            cd ..
          fi
          
          echo "✅ Solidity linting completed"