ci.yml

name: CI

on:
  workflow_dispatch:
    inputs:
      version:
        description: 'Version of Kotlin binary to publish to TBD Artifactory. For example "1.0.0-SNAPSHOT". If not supplied, will default to "commit-$shortSHA-SNAPSHOT" where $shortSHA is the shortform commit SHA. Must end in "-SNAPSHOT".'
        required: false
        default: "0.0.0-SNAPSHOT"
  push:
    branches:
      - main
  pull_request:
  workflow_call:
    inputs:
      version:
        description: 'Version of Kotlin binary to publish to TBD Artifactory. For example "1.0.0-SNAPSHOT". If not supplied, will default to "commit-$shortSHA-SNAPSHOT" where $shortSHA is the shortform commit SHA. Must end in "-SNAPSHOT".'
        required: true
        type: string

env:
  CARGO_TERM_COLOR: always
  RUSTFLAGS: "-Dwarnings"
  TBDEX_SDK_LOG_LEVEL: debug

jobs:
  test:
    permissions:
      id-token: write
    strategy:
      matrix:
        os: [ubuntu-latest, macos-latest, windows-latest]
    runs-on: ${{ matrix.os }}
    steps:
      - uses: actions/checkout@v4
        with:
          submodules: true
      - name: Install Rust 1.74.0
        run: rustup toolchain install 1.74.0
      - name: Set Rust 1.74.0 as default
        run: rustup default 1.74.0
      - name: Test
        run: |
          rustup component add llvm-tools-preview
          cargo install grcov
          cargo test --package tbdex
        env:
          RUSTFLAGS: -Cinstrument-coverage
          LLVM_PROFILE_FILE: tbdex-rs-%p-%m.profraw
      - name: Upload test coverage to Codecov
        uses: codecov/codecov-action@v4.5.0
        with:
          use_oidc: true
          files: "*.profraw"

  lint:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - name: Init Hermit
        uses: cashapp/activate-hermit@v1
        with:
          cache: true
      - name: Setup
        run: just setup
      - name: Lint
        run: just lint

  rust-test:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - name: Init Hermit
        uses: cashapp/activate-hermit@v1
        with:
          cache: true
      - name: Setup
        run: just setup
      - name: Test
        run: just test

  build_aarch64_apple_darwin:
    runs-on: macos-latest
    name: Build aarch64-apple-darwin target
    steps:
      - uses: actions/checkout@v4
      - name: Install Rust 1.74.0
        run: rustup toolchain install 1.74.0
      - name: Set Rust 1.74.0 as default
        run: rustup default 1.74.0
      - name: Run Build Script
        run: |
          cd bindings/tbdex_uniffi/libtargets/aarch64_apple_darwin
          ./build
          if cargo tree | grep -q ring; then
            echo "::error title=ring library found in compiled binary::The ring library has unclear licensing and we are not sure if it can be put in the compiled binary"
            exit 1
          fi
      - name: Upload .dylib
        uses: actions/upload-artifact@v4.0.0
        with:
          name: aarch64-apple-darwin-dylib
          path: bound/kt/src/main/resources/libtbdex_uniffi_aarch64_apple_darwin.dylib

  build_x86_64_apple_darwin:
    runs-on: macos-12
    name: Build x86_64-apple-darwin target
    steps:
      - uses: actions/checkout@v4
      - name: Install Rust 1.74.0
        run: rustup toolchain install 1.74.0
      - name: Set Rust 1.74.0 as default
        run: rustup default 1.74.0
      - name: Run Build Script
        run: |
          cd bindings/tbdex_uniffi/libtargets/x86_64_apple_darwin
          ./build
          if cargo tree | grep -q ring; then
            echo "::error title=ring library found in compiled binary::The ring library has unclear licensing and we are not sure if it can be put in the compiled binary"
            exit 1
          fi
      - name: Upload .dylib
        uses: actions/upload-artifact@v4.0.0
        with:
          name: x86_64-apple-darwin-dylib
          path: bound/kt/src/main/resources/libtbdex_uniffi_x86_64_apple_darwin.dylib

  build_x86_64_unknown_linux_gnu:
    runs-on: ubuntu-latest
    name: Build x86_64-unknown-linux-gnu target
    steps:
      - uses: actions/checkout@v4
      - name: Install Rust 1.74.0
        run: rustup toolchain install 1.74.0
      - name: Set Rust 1.74.0 as default
        run: rustup default 1.74.0
      - name: Run Build Script
        run: |
          cd bindings/tbdex_uniffi/libtargets/x86_64_unknown_linux_gnu
          ./build
          if cargo tree | grep -q ring; then
            echo "::error title=ring library found in compiled binary::The ring library has unclear licensing and we are not sure if it can be put in the compiled binary"
            exit 1
          fi
      - name: Upload .so
        uses: actions/upload-artifact@v4.0.0
        with:
          name: x86_64-unknown-linux-gnu-so
          path: bound/kt/src/main/resources/libtbdex_uniffi_x86_64_unknown_linux_gnu.so

  build_x86_64_unknown_linux_musl:
    runs-on: ubuntu-latest
    name: Build x86_64-unknown-linux-musl target
    steps:
      - uses: actions/checkout@v4
      - name: Install Rust 1.74.0
        run: rustup toolchain install 1.74.0
      - name: Set Rust 1.74.0 as default
        run: rustup default 1.74.0
      - name: Run Build Script
        run: |
          cd bindings/tbdex_uniffi/libtargets/x86_64_unknown_linux_musl
          ./build
          if cargo tree | grep -q ring; then
            echo "::error title=ring library found in compiled binary::The ring library has unclear licensing and we are not sure if it can be put in the compiled binary"
            exit 1
          fi
      - name: Upload .so
        uses: actions/upload-artifact@v4.0.0
        with:
          name: x86_64-unknown-linux-musl-so
          path: bound/kt/src/main/resources/libtbdex_uniffi_x86_64_unknown_linux_musl.so

  build_x86_64_pc_windows_msvc:
    runs-on: windows-latest
    name: Build x86_64-pc-windows-msvc target
    steps:
      - uses: actions/checkout@v2
      - name: Install Rust
        run: rustup toolchain install stable
      - name: Add MSVC target
        run: rustup target add x86_64-pc-windows-msvc
      - name: Build the library
        run: |
          cargo build --target x86_64-pc-windows-msvc --release --package tbdex_uniffi
          if (-not (Test-Path -Path "bound/kt/src/main/resources")) {
            New-Item -ItemType Directory -Path "bound/kt/src/main/resources"
          }
          cp target/x86_64-pc-windows-msvc/release/tbdex_uniffi.dll bound/kt/src/main/resources/tbdex_uniffi_x86_64_pc_windows_msvc.dll
        shell: powershell
      - name: Upload .dll
        uses: actions/upload-artifact@v4.0.0
        with:
          name: x86_64-pc-windows-msvc-dll
          path: bound/kt/src/main/resources/tbdex_uniffi_x86_64_pc_windows_msvc.dll

  kotlin-build-test-deploy-snapshot:
    needs:
      - build_aarch64_apple_darwin
      - build_x86_64_apple_darwin
      - build_x86_64_unknown_linux_gnu
      - build_x86_64_unknown_linux_musl
      - build_x86_64_pc_windows_msvc
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
        with:
          submodules: true
      - name: Set up JDK 11
        uses: actions/setup-java@v3
        with:
          distribution: "adopt"
          java-version: "11"

      # Cache Maven repo
      - uses: actions/cache@v3
        with:
          path: ~/.m2/repository
          key: ${{ runner.os }}-maven-${{ hashFiles('**/pom.xml') }}
          restore-keys: |
            ${{ runner.os }}-maven-

      - name: Resolve Snapshot Version
        id: resolve_version
        run: |
          # Version resolution: use provided
          if [ -n "${{ github.event.inputs.version }}" ]; then
            if [[ "${{ github.event.inputs.version }}" != *-SNAPSHOT ]]; then
              resolvedVersion="${{ github.event.inputs.version }}-SNAPSHOT"
            else
              resolvedVersion="${{ github.event.inputs.version }}"
            fi
          # Otherwise, construct a version for deployment in form X.Y.Z-commit-$shortSHA-SNAPSHOT
          else
            longSHA=$(git rev-parse --verify HEAD)
            shortSHA=$(echo "${longSHA:0:7}")
            resolvedVersion="commit-$shortSHA-SNAPSHOT"
            echo "Requesting deployment as version: $resolvedVersion"
          fi

          echo "Resolved SNAPSHOT Version: $resolvedVersion"
          echo "resolved_version=$resolvedVersion" >> $GITHUB_OUTPUT

      # Download and package the native binaries
      - name: Download MacOS aarch64 Native Library
        uses: actions/download-artifact@v4.1.7
        with:
          name: aarch64-apple-darwin-dylib
          path: bound/kt/src/main/resources/
      - name: Download MacOS x86_64 Native Library
        uses: actions/download-artifact@v4.1.7
        with:
          name: x86_64-apple-darwin-dylib
          path: bound/kt/src/main/resources/
      - name: Download Linux x86_64 GNU Native Library
        uses: actions/download-artifact@v4.1.7
        with:
          name: x86_64-unknown-linux-gnu-so
          path: bound/kt/src/main/resources/
      - name: Download Linux x86_64 MUSL Native Library
        uses: actions/download-artifact@v4.1.7
        with:
          name: x86_64-unknown-linux-musl-so
          path: bound/kt/src/main/resources/
      - name: Download Windows x86_64 MSVC Native Library
        uses: actions/download-artifact@v4.1.7
        with:
          name: x86_64-pc-windows-msvc-dll
          path: bound/kt/src/main/resources/

      - name: Deploy Snapshot / Verify
        id: kotlin_test_snapshot
        run: |

          # cd into the Kotlin project
          cd bound/kt/

          # Set newly resolved version in POM config
          mvn \
            versions:set \
            --batch-mode \
            -DnewVersion=${{ steps.resolve_version.outputs.resolved_version }}

          # Only attempt to publish artifact if we have credentials
          if [ -n "${{ secrets.ARTIFACTORY_PASSWORD }}" ]; then
            # Maven deploy lifecycle will build, run tests, verify, sign, and deploy
            mvn deploy --batch-mode --settings .maven_settings.xml -P sign-artifacts
          else
            # Otherwise, Maven verify lifecycle will build, run tests, and verify
            mvn verify --batch-mode
          fi

        env:
          ARTIFACTORY_USERNAME: ${{ secrets.ARTIFACTORY_USERNAME }}
          ARTIFACTORY_PASSWORD: ${{ secrets.ARTIFACTORY_PASSWORD }}
          SIGN_KEY_PASS: ${{ secrets.GPG_SECRET_PASSPHRASE }}
          SIGN_KEY: ${{ secrets.GPG_SECRET_KEY }}

      - name: Execute Kotlin Spec Test Vector Report
        id: spec_report_tbdex_core_kt
        if: always() && steps.kotlin_test_snapshot.conclusion != 'skipped'
        uses: TBD54566975/sdk-report-runner/.github/actions/specs-report@main
        with:
          junit-report-paths: bound/kt/target/surefire-reports/*.xml
          spec-path: tbdex
          suite-name-regex: TbdexTestVector
          feature-regex: tbdex\.sdk\.\w+\.TbdexTestVectors(\w+)Test
          vector-regex: (\w+)
          fail-on-missing-vectors: false
          fail-on-failed-test-cases: true
          comment-on-pr: true
          package-name: tbdex-core-kt
          git-token: ${{ secrets.GITHUB_TOKEN }}

      - name: Upload Kotlin Test Results
        uses: actions/upload-artifact@v4.0.0
        with:
          name: kotlin-test-results
          path: bound/kt/target/surefire-reports/*.xml

      - name: Upload tbDEX w/ Dependencies JAR
        uses: actions/upload-artifact@v4.0.0
        with:
          name: tbdex-with-dependencies-jar
          path: bound/kt/target/*-with-dependencies.jar

  kotlin-acceptance-test:
    needs: kotlin-build-test-deploy-snapshot
    strategy:
      matrix:
        os: [ubuntu-latest, macos-latest, macos-12, windows-latest]
    runs-on: ${{ matrix.os }}
    steps:
      - uses: actions/checkout@v4
        with:
          submodules: true
      - name: Set up JDK 11
        uses: actions/setup-java@v3
        with:
          distribution: "adopt"
          java-version: "11"
      - name: Download tbDEX w/ Dependencies JAR
        uses: actions/download-artifact@v4.1.7
        with:
          name: tbdex-with-dependencies-jar
          path: tests/jvm
      - name: Run Acceptance Tests (Non-Windows)
        if: matrix.os != 'windows-latest'
        shell: bash
        run: |
          cd tests/jvm
          mv *-with-dependencies.jar tbdex-with-dependencies.jar
          javac TbdexAcceptanceTest.java -cp tbdex-with-dependencies.jar
          java -classpath tbdex-with-dependencies.jar:. TbdexAcceptanceTest
      - name: Run Acceptance Tests (Windows)
        if: matrix.os == 'windows-latest'
        shell: cmd
        run: |
          cd tests/jvm
          ren *-with-dependencies.jar tbdex-with-dependencies.jar
          javac TbdexAcceptanceTest.java -cp tbdex-with-dependencies.jar
          java -classpath tbdex-with-dependencies.jar;. TbdexAcceptanceTest

  rust-test-vectors:
    runs-on: macos-latest
    steps:
      - uses: actions/checkout@v4
        with:
          submodules: true
      - name: Init Hermit
        uses: cashapp/activate-hermit@v1
        with:
          cache: true
      - name: Setup
        run: just setup
      - name: Install latest stable Rust
        run: rustup install stable && rustup default stable
      - name: Install Nextest
        run: cargo install cargo-nextest
      - name: Create nextest.toml
        run: |
          echo '[profile.ci.junit]' > nextest.toml
          echo 'path = "junit.xml"' >> nextest.toml
          echo 'store-success-output = true' >> nextest.toml
          echo 'store-failure-output = true' >> nextest.toml
      - name: Run Rust Tests
        id: rust_test
        run: |
          mkdir -p test-results
          cargo nextest run --profile ci --config-file ./nextest.toml
      - name: Modify testsuite name in XML for test runner consumption
        if: always() && steps.rust_test.conclusion != 'skipped'
        run: |
          sed -i '' 's/<testsuite name="tbdex"/<testsuite name="TbdexTestVectorsProtocolTest"/' target/nextest/ci/junit.xml
      - name: Move Test Results
        if: always() && steps.rust_test.conclusion != 'skipped'
        run: mv target/nextest/ci/junit.xml test-results/rust-test-results.xml
      - name: Execute Rust Spec Test Vector Report
        id: spec_report_tbdex_rs
        if: always() && steps.rust_test.conclusion != 'skipped'
        uses: TBD54566975/sdk-report-runner/.github/actions/specs-report@main
        with:
          junit-report-paths: test-results/rust-test-results.xml
          spec-path: tbdex
          suite-name-regex: TbdexTestVector
          feature-regex:
          vector-regex: (.+)::tbdex_test_vectors_(.+)::(.+)
          extract-feature-on-test-case-name: true
          prettify-feature: true
          fail-on-missing-vectors: false
          fail-on-failed-test-cases: true
          comment-on-pr: true
          package-name: tbdex-rs
          git-token: ${{ secrets.GITHUB_TOKEN }}
      - name: Upload Rust Test Vector Results
        uses: actions/upload-artifact@v4.0.0
        with:
          name: rust-test-results
          path: test-results/rust-test-results.xml

  typescript:
    runs-on: macos-latest
    steps:
      - uses: actions/checkout@v4
      - name: Init Hermit
        uses: cashapp/activate-hermit@v1
        with:
          cache: true
      - name: Lint
        # NOTE: only currently testing nodejs in the CI, not the browser
        # The WASM binary is build with a script in npm run build
        run: |
          cd bound/typescript
          npm install
          npm run clean
          npm run build
          npm run test:node:cjs
          npm run test:node:esm