name: CI

on:
  push:
    branches: [ main, develop ]
  pull_request:
    branches: [ main, develop ]

jobs:
  test:
    runs-on: ubuntu-latest
    
    strategy:
      matrix:
        node-version: [18.x, 20.x]
    
    steps:
      # 1. 코드 체크아웃
      - name: Checkout code
        uses: actions/checkout@v4
      
      # 2. Node.js 설정
      - name: Setup Node.js $
        uses: actions/setup-node@v4
        with:
          node-version: $
          cache: 'npm'
      
      # 3. 의존성 설치
      - name: Install dependencies
        run: npm ci
      
      # 4. 린트 검사
      - name: Run linter
        run: npm run lint
      
      # 5. 단위 테스트
      - name: Run unit tests
        run: npm test
      
      # 6. 코드 커버리지
      - name: Upload coverage to Codecov
        uses: codecov/codecov-action@v3
        with:
          files: ./coverage/coverage-final.json
          fail_ci_if_error: true
  
  e2e-test:
    runs-on: ubuntu-latest
    needs: test
    
    steps:
      - uses: actions/checkout@v4
      
      - name: Setup Node.js
        uses: actions/setup-node@v4
        with:
          node-version: 20.x
      
      - name: Install dependencies
        run: npm ci
      
      # 7. Playwright 설치
      - name: Install Playwright
        run: npx playwright install --with-deps
      
      # 8. E2E 테스트
      - name: Run E2E tests
        run: npm run test:e2e
      
      # 9. 테스트 실패 시 스크린샷 업로드
      - name: Upload test results
        if: failure()
        uses: actions/upload-artifact@v3
        with:
          name: playwright-report
          path: playwright-report/
          retention-days: 30
  
  security-scan:
    runs-on: ubuntu-latest
    needs: test
    
    steps:
      - uses: actions/checkout@v4
      
      # 10. 보안 취약점 스캔
      - name: Run security audit
        run: npm audit --audit-level=moderate
      
      # 11. SAST (정적 분석)
      - name: Run CodeQL Analysis
        uses: github/codeql-action/init@v2
        with:
          languages: javascript
      
      - name: Perform CodeQL Analysis
        uses: github/codeql-action/analyze@v2

name: Build and Push Docker Image

on:
  push:
    branches: [ main ]

env:
  REGISTRY: ghcr.io
  IMAGE_NAME: $

jobs:
  build-and-push:
    runs-on: ubuntu-latest
    permissions:
      contents: read
      packages: write
    
    steps:
      - name: Checkout
        uses: actions/checkout@v4
      
      # 1. Docker Buildx 설정
      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3
      
      # 2. GitHub Container Registry 로그인
      - name: Log in to Container Registry
        uses: docker/login-action@v3
        with:
          registry: $
          username: $
          password: $
      
      # 3. 메타데이터 추출
      - name: Extract metadata
        id: meta
        uses: docker/metadata-action@v5
        with:
          images: $/$
          tags: |
            type=ref,event=branch
            type=sha,prefix=-
            type=semver,pattern=
      
      # 4. Docker 이미지 빌드 및 푸시
      - name: Build and push
        uses: docker/build-push-action@v5
        with:
          context: .
          push: true
          tags: $
          labels: $
          cache-from: type=gha
          cache-to: type=gha,mode=max

name: Deploy to Production

on:
  push:
    branches: [ main ]

jobs:
  deploy:
    runs-on: ubuntu-latest
    environment: production
    
    steps:
      - name: Checkout
        uses: actions/checkout@v4
      
      # 1. AWS 자격증명 설정
      - name: Configure AWS credentials
        uses: aws-actions/configure-aws-credentials@v4
        with:
          aws-access-key-id: $
          aws-secret-access-key: $
          aws-region: ap-northeast-2
      
      # 2. ECR 로그인
      - name: Login to Amazon ECR
        id: login-ecr
        uses: aws-actions/amazon-ecr-login@v2
      
      # 3. Docker 이미지 빌드 및 푸시
      - name: Build and push image to ECR
        id: build-image
        env:
          ECR_REGISTRY: $
          ECR_REPOSITORY: my-app
          IMAGE_TAG: $
        run: |
          docker build -t $ECR_REGISTRY/$ECR_REPOSITORY:$IMAGE_TAG .
          docker push $ECR_REGISTRY/$ECR_REPOSITORY:$IMAGE_TAG
          echo "image=$ECR_REGISTRY/$ECR_REPOSITORY:$IMAGE_TAG" >> $GITHUB_OUTPUT
      
      # 4. ECS 태스크 정의 업데이트
      - name: Fill in the new image ID in the ECS task definition
        id: task-def
        uses: aws-actions/amazon-ecs-render-task-definition@v1
        with:
          task-definition: task-definition.json
          container-name: my-app
          image: $
      
      # 5. ECS 서비스 배포
      - name: Deploy to Amazon ECS
        uses: aws-actions/amazon-ecs-deploy-task-definition@v1
        with:
          task-definition: $
          service: my-app-service
          cluster: my-app-cluster
          wait-for-service-stability: true
      
      # 6. Slack 알림
      - name: Notify Slack
        if: always()
        uses: 8398a7/action-slack@v3
        with:
          status: $
          text: 'Deployment to production: $'
          webhook_url: $

name: Blue-Green Deployment

on:
  workflow_dispatch:
    inputs:
      environment:
        description: 'Target environment'
        required: true
        type: choice
        options:
          - blue
          - green

jobs:
  deploy:
    runs-on: ubuntu-latest
    
    steps:
      - name: Checkout
        uses: actions/checkout@v4
      
      - name: Configure AWS credentials
        uses: aws-actions/configure-aws-credentials@v4
        with:
          aws-access-key-id: $
          aws-secret-access-key: $
          aws-region: ap-northeast-2
      
      # 1. Blue 또는 Green 환경에 배포
      - name: Deploy to $ environment
        run: |
          echo "Deploying to $ environment"
          aws ecs update-service \
            --cluster my-cluster \
            --service my-app-$ \
            --force-new-deployment
      
      # 2. 헬스 체크
      - name: Wait for deployment
        run: |
          aws ecs wait services-stable \
            --cluster my-cluster \
            --services my-app-$
      
      # 3. 스모크 테스트
      - name: Run smoke tests
        run: |
          ENDPOINT="https://$.example.com"
          curl -f $ENDPOINT/health || exit 1
          
      # 4. 트래픽 전환 (수동 승인 필요)
      - name: Switch traffic
        if: inputs.environment == 'green' && success()
        run: |
          echo "Ready to switch traffic to green"
          # Route53이나 ALB 설정 변경

name: Deploy to Environment

on:
  push:
    branches: [ main, develop ]

jobs:
  determine-environment:
    runs-on: ubuntu-latest
    outputs:
      environment: $
    steps:
      - id: set-env
        run: |
          if [[ "$" == "refs/heads/main" ]]; then
            echo "environment=production" >> $GITHUB_OUTPUT
          else
            echo "environment=development" >> $GITHUB_OUTPUT
          fi
  
  deploy:
    needs: determine-environment
    runs-on: ubuntu-latest
    environment: $
    
    steps:
      - name: Checkout
        uses: actions/checkout@v4
      
      - name: Deploy to $
        run: |
          echo "Deploying to $"
          
          # 환경별 설정 파일 사용
          cp .env.$ .env
          
          # 배포 스크립트 실행
          ./deploy.sh $