name: CI

on:
  push:
    branches: [main]
  pull_request:
    branches: [main]

env:
  CARGO_TERM_COLOR: always
  RUSTFLAGS: "-D warnings"
  RUST_TOOLCHAIN: "1.86"
  CARGO_NET_GIT_FETCH_WITH_CLI: "true"

jobs:
  ci:
    name: Linux x86_64 (Forgejo)
    runs-on: ubuntu-latest
    steps:
      # Manual external-URL checkout — see fai/platform CI for
      # background. Lays this repo at $GITHUB_WORKSPACE.
      - name: Checkout text-extract via external URL
        run: |
          set -eu
          mkdir -p "$GITHUB_WORKSPACE"
          cd "$GITHUB_WORKSPACE"
          git init -q
          git remote add origin \
            "https://x-access-token:${GITHUB_TOKEN}@git.flemming.ws/${GITHUB_REPOSITORY}.git"
          git fetch --depth=1 origin "$GITHUB_SHA"
          git checkout -q FETCH_HEAD

      # The chain-module-sdk dependency is a git dep against a repo
      # that lives in another Forgejo org. The repo-scoped
      # GITHUB_TOKEN cannot read it, and the Forgejo instance has
      # REQUIRE_SIGNIN_VIEW=true so anonymous read is also denied.
      # MODULE_SDK_PAT is a stored secret with read access to
      # fai/module-sdk; we inject it into any outgoing
      # https://git.flemming.ws/ URL via insteadOf so cargo's git
      # fetch (driven by CARGO_NET_GIT_FETCH_WITH_CLI) authenticates
      # transparently.
      - name: Configure git URL rewrite for SDK fetch
        env:
          SDK_PAT: ${{ secrets.MODULE_SDK_PAT }}
        run: |
          git config --global \
            "url.https://x-access-token:${SDK_PAT}@git.flemming.ws/.insteadOf" \
            "https://git.flemming.ws/"

      - name: Install system dependencies
        run: |
          apt-get update -qq
          apt-get install -y --no-install-recommends \
            curl \
            ca-certificates \
            build-essential \
            pkg-config \
            libssl-dev \
            git

      - name: Install Rust toolchain
        run: |
          curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs \
            | sh -s -- -y \
              --profile minimal \
              --default-toolchain "$RUST_TOOLCHAIN" \
              --target wasm32-wasip2 \
              --component rustfmt \
              --component clippy
          echo "$HOME/.cargo/bin" >> "$GITHUB_PATH"

      - name: Cargo fmt --check
        run: cargo fmt --all -- --check

      - name: Cargo clippy
        run: cargo clippy --all-targets -- -D warnings

      - name: Cargo build (host)
        run: cargo build --all-targets

      - name: Cargo test (host)
        run: cargo test --all-targets

      - name: Cargo build (wasm32-wasip2)
        run: cargo build --release --target wasm32-wasip2