name: Checks

on:
  push:
    branches:
      - main
  pull_request:
    types: [opened, synchronize, reopened, ready_for_review]
  merge_group:

concurrency:
  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
  cancel-in-progress: true

permissions: {}

jobs:
  isdraft:
    uses: ./.github/workflows/reusable-isdraft.yml
  preflight:
    needs: isdraft
    uses: ./.github/workflows/reusable-preflight.yml

  cargo-clippy:
    runs-on: ${{ needs.preflight.outputs.RUNNER }}
    needs: [preflight]
    if: ${{ needs.preflight.outputs.changes_rust }}
    timeout-minutes: 90
    container:
      image: ${{ needs.preflight.outputs.IMAGE }}
      volumes:
        - /cache/cargo-target/pezkuwi-sdk:/cache/target
    env:
      RUSTFLAGS: "-D warnings"
      SKIP_WASM_BUILD: 1
      CARGO_INCREMENTAL: 0
      CARGO_TARGET_DIR: /cache/target
      WASM_BUILD_WORKSPACE_HINT: ${{ github.workspace }}
    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4.1.7
      - name: Disable forklift cache wrapper
        run: echo "RUSTC_WRAPPER=" >> $GITHUB_ENV

      - name: Rust Cache
        uses: Swatinem/rust-cache@779680da715d629ac1d338a641029a2f4372abb5 # v2.8.2
        with:
          shared-key: clippy
          cache-on-failure: true

      - name: script
        id: required
        run: |
          git config --global --add safe.directory '*'
          cargo clippy --all-targets --all-features --locked --workspace --quiet \
            --exclude pezpallet-revive-eth-rpc \
            --exclude pezkuwi-zombienet-sdk-tests

  check-try-runtime:
    runs-on: ${{ needs.preflight.outputs.RUNNER }}
    needs: [preflight, cargo-clippy]
    if: ${{ always() && !cancelled() && needs.preflight.outputs.changes_rust }}
    timeout-minutes: 90
    container:
      image: ${{ needs.preflight.outputs.IMAGE }}
      volumes:
        - /cache/cargo-target/pezkuwi-sdk:/cache/target
    env:
      SKIP_WASM_BUILD: 1
      CARGO_INCREMENTAL: 0
      CARGO_TARGET_DIR: /cache/target
    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4.1.7
      - name: Disable forklift cache wrapper
        run: echo "RUSTC_WRAPPER=" >> $GITHUB_ENV

      - name: Rust Cache
        uses: Swatinem/rust-cache@779680da715d629ac1d338a641029a2f4372abb5 # v2.8.2
        with:
          shared-key: try-runtime
          cache-on-failure: true

      - name: script
        id: required
        run: |
          git config --global --add safe.directory '*'
          cargo check --locked --all --features try-runtime --quiet
          # Check that teyrchain-template will compile with `try-runtime` feature flag.
          cargo check --locked -p teyrchain-template-node --features try-runtime
          # experimental code may rely on try-runtime and vice-versa
          cargo check --locked --all --features try-runtime,experimental --quiet

  check-core-crypto-features:
    runs-on: ${{ needs.preflight.outputs.RUNNER }}
    needs: [preflight]
    if: ${{ needs.preflight.outputs.changes_rust }}
    timeout-minutes: 30
    container:
      image: ${{ needs.preflight.outputs.IMAGE }}
    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4.1.7
      - name: Disable forklift cache wrapper
        run: echo "RUSTC_WRAPPER=" >> $GITHUB_ENV

      - name: Install wasm32v1-none target
        run: rustup target add wasm32v1-none

      - name: script
        id: required
        run: |
          cd bizinikiwi/primitives/core
          ./check-features-variants.sh
          cd -
          cd bizinikiwi/primitives/application-crypto
          ./check-features-variants.sh
          cd -
          cd bizinikiwi/primitives/keyring
          ./check-features-variants.sh
          cd -
  # name of this job must be unique across all workflows
  # otherwise GitHub will mark all these jobs as required
  confirm-required-checks-passed:
    runs-on: ubuntu-latest
    name: All checks passed
    # If any new job gets added, be sure to add it to this array
    needs: [cargo-clippy, check-try-runtime, check-core-crypto-features]
    if: always() && !cancelled()
    steps:
      - run: |
          tee resultfile <<< '${{ toJSON(needs) }}'
          FAILURES=$(cat resultfile | grep '"result": "failure"' | wc -l)
          if [ $FAILURES -gt 0 ]; then
            echo "### At least one required job failed ❌" >> $GITHUB_STEP_SUMMARY
            exit 1
          else
            echo '### Good job! All the required jobs passed 🚀' >> $GITHUB_STEP_SUMMARY
          fi