pezkuwi-sdk/.github/workflows/release-srtool.yml

name: Srtool build

env:
  SUBWASM_VERSION: 0.21.0
  TOML_CLI_VERSION: 0.2.4

on:
  workflow_call:
    inputs:
      excluded_runtimes:
        type: string
      build_opts:
        type: string
      profile:
        type: string
      chain:
        type: string
      runtime_dir:
        type: string
    outputs:
      published_runtimes:
        value: ${{ jobs.find-runtimes.outputs.runtime }}

permissions:
    id-token: write
    attestations: write
    contents: read

jobs:
  find-runtimes:
      name: Scan repo pezkuwichain/pezkuwi-sdk
      outputs:
        runtime: ${{ steps.get_runtimes_list.outputs.runtime }}
      runs-on: ubuntu-latest
      steps:
        - name: Checkout
          uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4.0.0
          with:
            fetch-depth: 0

        - name: Install tooling
          run: |
            URL=https://github.com/chevdor/toml-cli/releases/download/v${{ env.TOML_CLI_VERSION }}/toml_linux_amd64_v${{ env.TOML_CLI_VERSION }}.deb
            curl -L $URL --output toml.deb
            sudo dpkg -i toml.deb
            toml --version; jq --version

        - name: Scan and get runtimes list
          id: get_runtimes_list
          env:
            EXCLUDED_RUNTIMES: ${{ inputs.excluded_runtimes }}:"bizinikiwi-test"
            CHAIN: ${{ inputs.chain }}
            RUNTIME_DIR: ${{ inputs.runtime_dir }}
          run: |
            . ./.github/scripts/common/lib.sh

            echo "Github workspace: ${{ github.workspace }}"
            echo "Current folder: $(pwd)"; ls -al
            ls -al

            if [ "$CHAIN" == "all" ]; then
              MATRIX=$(find_runtimes | tee runtimes_list.json)
              echo $MATRIX
              echo "runtime=$MATRIX" >> $GITHUB_OUTPUT
            else
              if [ -n "$RUNTIME_DIR" ]; then
                # Create a custom matrix with specific chain and runtime_dir
                MATRIX='{"include":[{"chain":"'$CHAIN'","crate":"'$CHAIN'-runtime","runtime_dir":"'$RUNTIME_DIR'"}]}'
              else
                echo "RUNTIME_DIR is not set"
                exit 1
              fi
              echo $MATRIX
              echo "runtime=$MATRIX" >> $GITHUB_OUTPUT
            fi

  srtool:
    runs-on: ubuntu-latest
    needs:
      - find-runtimes
    strategy:
      fail-fast: false
      matrix: ${{ fromJSON(needs.find-runtimes.outputs.runtime) }}

    steps:
      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4.0.0
        with:
          fetch-depth: 0

      - name: Srtool build
        id: srtool_build
        uses: chevdor/srtool-actions@48e9baed50ca414936dfac59d34d8b9bbe581abd # v0.9.2
        env:
          BUILD_OPTS: ${{ inputs.build_opts }}
        with:
          chain: ${{ matrix.chain }}
          runtime_dir: ${{ matrix.runtime_dir }}
          profile: ${{ inputs.profile }}

      - name: Summary
        run: |
          echo '${{ steps.srtool_build.outputs.json }}' | jq > ${{ matrix.chain }}-srtool-digest.json
          cat ${{ matrix.chain }}-srtool-digest.json
          echo "Compact Runtime: ${{ steps.srtool_build.outputs.wasm }}"
          echo "Compressed Runtime: ${{ steps.srtool_build.outputs.wasm_compressed }}"

      - name: Generate artifact attestation
        uses: actions/attest-build-provenance@977bb373ede98d70efdf65b84cb5f73e068dcc2a # v3.0.0
        with:
          subject-path:  ${{ steps.srtool_build.outputs.wasm }}

      # We now get extra information thanks to subwasm
      - name: Install subwasm
        run: |
          wget https://github.com/chevdor/subwasm/releases/download/v${{ env.SUBWASM_VERSION }}/subwasm_linux_amd64_v${{ env.SUBWASM_VERSION }}.deb
          sudo dpkg -i subwasm_linux_amd64_v${{ env.SUBWASM_VERSION }}.deb
          subwasm --version

      - name: Show Runtime information
        shell: bash
        run: |
          subwasm info ${{ steps.srtool_build.outputs.wasm }}
          subwasm info ${{ steps.srtool_build.outputs.wasm_compressed }}
          subwasm --json info ${{ steps.srtool_build.outputs.wasm }} > ${{ matrix.chain }}-info.json
          subwasm --json info ${{ steps.srtool_build.outputs.wasm_compressed }} > ${{ matrix.chain }}-compressed-info.json

      - name: Extract the metadata
        shell: bash
        run: |
          subwasm meta ${{ steps.srtool_build.outputs.wasm }}
          subwasm --json meta ${{ steps.srtool_build.outputs.wasm }} > ${{ matrix.chain }}-metadata.json

      - name: Check the metadata diff
        shell: bash
        # the following subwasm call will error for chains that are not known and/or live, that includes shell for instance
        run: |
          subwasm diff ${{ steps.srtool_build.outputs.wasm }} --chain-b ${{ matrix.chain }} || \
            echo "Subwasm call failed, check the logs. This is likely because ${{ matrix.chain }} is not known by subwasm" | \
            tee ${{ matrix.chain }}-diff.txt

      - name: Archive Subwasm results
        uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
        with:
          name: ${{ matrix.chain }}-runtime
          path: |
            ${{ matrix.chain }}-info.json
            ${{ matrix.chain }}-compressed-info.json
            ${{ matrix.chain }}-metadata.json
            ${{ matrix.chain }}-diff.txt
            ${{ steps.srtool_build.outputs.wasm }}
            ${{ steps.srtool_build.outputs.wasm_compressed }}
            ${{ matrix.chain }}-srtool-digest.json