name: Continuous Integration

on:
  push:
    branches:
    - master
  pull_request:
    branches:
    - master
env:
  CARGO_TERM_COLOR: always

jobs:
  build:
    runs-on: self-hosted
    permissions:
      contents: read
      deployments: write
      pull-requests: write
    env:
      RUSTC_WRAPPER: /usr/bin/sccache
      CARGO_INCREMENTAL: 0
      SCCACHE_DIR: /var/lib/github-actions/.cache

    steps:
    - uses: actions/checkout@v3

    - name: 🔧 Clear wasm-bindgen cache
      run: rm -r ~/.cache/.wasm-pack

    - name: 🔧 Set up Node
      uses: actions/setup-node@v3
      with:
        node-version: '16'

    - name: 🚧 Install Node dependencies
      run: |
        cd frontend
        npm ci

    - name: 🔼 Update Rust to latest stable
      run: |
        rustc --version
        rustup update stable
        rustc --version

    - name: 🌐 Build Graphite web code
      env:
        NODE_ENV: production
      run: |
        cd frontend
        mold -run npm run build

    - name: Publish
      id: cloudflare
      uses: cloudflare/pages-action@1
      continue-on-error: true
      with:
        apiToken: ${{ secrets.CLOUDFLARE_API_TOKEN }}
        accountId: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}
        projectName: graphite-dev # e.g. 'my-project'
        directory: frontend/dist # e.g. 'dist'
        gitHubToken: ${{ secrets.GITHUB_TOKEN }}

    - name: 👕 Lint Graphite web formatting
      env:
        NODE_ENV: production
      run: |
        cd frontend
        # npm run lint
        echo "💥 Frontend linting is temporarily disabled until it can be set up again with Svelte 💥"

    - name: 🔬 Check Rust formatting
      run: |
        mold -run cargo fmt --all -- --check

    - name: 🦀 Build Rust code
      run: |
        mold -run cargo build

    - name: 🧪 Run Rust tests
      run: |
        mold -run cargo nextest run

        #miri:
        #  runs-on: self-hosted
        #
        #  steps:
        #  - uses: actions/checkout@v3
        #
        #  - name: 🧪 Run Rust miri
        #    run: |
        #      mold -run cargo +nightly miri nextest run -j32

  cargo-deny:
    runs-on: ubuntu-latest

    strategy:
      matrix:
        checks:
          - 'crate security advisories'
          - 'crate license compatibility'

    # Prevent sudden announcement of a new advisory from failing ci:
    continue-on-error: ${{ matrix.checks == 'crate security advisories' }}

    steps:
    - uses: actions/checkout@v3

    - uses: EmbarkStudios/cargo-deny-action@v1
      if: matrix.checks == 'crate security advisories'
      with:
        command: check advisories

    - uses: EmbarkStudios/cargo-deny-action@v1
      if: matrix.checks == 'crate license compatibility'
      with:
        command: check bans licenses sources