name: Rust CI

on:
  push:
    branches: [ "main" ]
  pull_request:
    branches: [ "main" ]

concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true


jobs:
  check:
    name: Check
    runs-on: ubuntu-24.04
    steps:
      - uses: actions/checkout@v6
      - uses: actions-rust-lang/setup-rust-toolchain@v1
        with:
          toolchain: 1.96.1
      - uses: Swatinem/rust-cache@v2
      - run: |
          mkdir -p ~/.ssh
          echo "${{ secrets.MYREPO_TOKEN }}" > ~/.ssh/icarus_models_deploy_key
          chmod 600 ~/.ssh/icarus_models_deploy_key
          ssh-keyscan ${{ secrets.MYHOST }} >> ~/.ssh/known_hosts

          eval $(ssh-agent -s)
          ssh-add -v ~/.ssh/icarus_models_deploy_key

          cargo check

  test:
    name: Test Suite
    runs-on: ubuntu-24.04
    services:
      postgres:
        image: postgres:18.4-alpine
        env:
          POSTGRES_USER: ${{ secrets.DB_TEST_USER || 'testuser' }}
          POSTGRES_PASSWORD: ${{ secrets.DB_TEST_PASSWORD || 'testpassword' }}
          POSTGRES_DB: ${{ secrets.DB_TEST_NAME || 'testdb' }}
        options: >-
          --health-cmd pg_isready
          --health-interval 10s
          --health-timeout 5s
          --health-retries 5

    steps:
      - uses: actions/checkout@v6
      - uses: actions-rust-lang/setup-rust-toolchain@v1
        with:
          toolchain: 1.96.1
      - uses: Swatinem/rust-cache@v2
      - name: Verify Docker Environment
        run: |
          echo "Runner User Info:"
          id
          echo "Checking Docker Version:"
          docker --version
          echo "Checking Docker Daemon Status (info):"
          docker info
          echo "Checking Docker Daemon Status (ps):"
          docker ps -a
          echo "Docker environment check complete."
      - name: Run tests
        env:
          # Define DATABASE_URL for tests to use
          DATABASE_URL: postgresql://${{ secrets.DB_TEST_USER || 'testuser' }}:${{ secrets.DB_TEST_PASSWORD || 'testpassword' }}@postgres:5432/${{ secrets.DB_TEST_NAME || 'testdb' }}
          RUST_LOG: info # Optional: configure test log level
          SECRET_KEY: ${{ secrets.TOKEN_SECRET_KEY }}
          SSH_AUTH_SOCK: ${{ env.SSH_AUTH_SOCK }}
          ROOT_DIRECTORY: "/tmp"
        run: |
          mkdir -p ~/.ssh
          echo "${{ secrets.MYREPO_TOKEN }}" > ~/.ssh/icarus_models_deploy_key
          chmod 600 ~/.ssh/icarus_models_deploy_key
          ssh-keyscan ${{ secrets.MYHOST }} >> ~/.ssh/known_hosts

          eval $(ssh-agent -s)
          ssh-add -v ~/.ssh/icarus_models_deploy_key

          cargo test

  fmt:
    name: Rustfmt
    runs-on: ubuntu-24.04
    steps:
      - uses: actions/checkout@v6
      - uses: actions-rust-lang/setup-rust-toolchain@v1
        with:
          toolchain: 1.96.1
      - uses: Swatinem/rust-cache@v2
      - run: rustup component add rustfmt
      - run: |
          mkdir -p ~/.ssh
          echo "${{ secrets.MYREPO_TOKEN }}" > ~/.ssh/icarus_models_deploy_key
          chmod 600 ~/.ssh/icarus_models_deploy_key
          ssh-keyscan ${{ secrets.MYHOST }} >> ~/.ssh/known_hosts

          eval $(ssh-agent -s)
          ssh-add -v ~/.ssh/icarus_models_deploy_key
          cargo fmt --all -- --check

  clippy:
    name: Clippy
    runs-on: ubuntu-24.04
    steps:
      - uses: actions/checkout@v6
      - uses: actions-rust-lang/setup-rust-toolchain@v1
        with:
          toolchain: 1.96.1
      - uses: Swatinem/rust-cache@v2
      - run: rustup component add clippy
      - run: |
          mkdir -p ~/.ssh
          echo "${{ secrets.MYREPO_TOKEN }}" > ~/.ssh/icarus_models_deploy_key
          chmod 600 ~/.ssh/icarus_models_deploy_key
          ssh-keyscan ${{ secrets.MYHOST }} >> ~/.ssh/known_hosts

          eval $(ssh-agent -s)
          ssh-add -v ~/.ssh/icarus_models_deploy_key
          cargo clippy -- -D warnings

  build:
    name: build
    runs-on: ubuntu-24.04
    steps:
      - uses: actions/checkout@v6
      - uses: actions-rust-lang/setup-rust-toolchain@v1
        with:
          toolchain: 1.96.1
      - uses: Swatinem/rust-cache@v2
      - run: |
          mkdir -p ~/.ssh
          echo "${{ secrets.MYREPO_TOKEN }}" > ~/.ssh/icarus_models_deploy_key
          chmod 600 ~/.ssh/icarus_models_deploy_key
          ssh-keyscan ${{ secrets.MYHOST }} >> ~/.ssh/known_hosts

          eval $(ssh-agent -s)
          ssh-add -v ~/.ssh/icarus_models_deploy_key
          cargo build --release