donutbrowser/.github/workflows/lint-rs.yml

# Installs Rust and checks formatting + linting

name: Lint Rust

on:
  workflow_call:
  push:
    branches:
      - main
    tags:
      - "v*"
  pull_request:
    paths-ignore:
      - "src/**"
      - "nodecar/**"
      - "package.json"
      - "pnpm-lock.yaml"
      - "yarn.lock"
      - "README.md"
      - ".github/workflows/lint-js.yml"
      - ".github/workflows/osv.yml"
      - "next.config.js"
      - "tailwind.config.js"
      - "tsconfig.json"
      - "biome.json"

permissions:
  contents: read

jobs:
  build:
    strategy:
      matrix:
        os: [macos-latest, ubuntu-22.04]

    runs-on: ${{ matrix.os }}

    steps:
      - name: Disable git core.autocrlf on Windows
        if: matrix.os == 'windows-latest'
        run: git config --global core.autocrlf false

      - name: Checkout repository code
        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 #v6.0.1

      - name: Set up pnpm package manager
        uses: pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061 #v4.2.0
        with:
          run_install: false

      - name: Set up Node.js
        uses: actions/setup-node@395ad3262231945c25e8478fd5baf05154b1d79f #v6.1.0
        with:
          node-version-file: .node-version
          cache: "pnpm"

      - name: Install Rust toolchain
        uses: dtolnay/rust-toolchain@e97e2d8cc328f1b50210efc529dca0028893a2d9 #master
        with:
          toolchain: stable
          components: rustfmt, clippy

      - name: Install cargo-audit
        run: cargo install cargo-audit

      - name: Install banderole
        run: cargo install banderole

      - name: Install dependencies (Ubuntu only)
        if: matrix.os == 'ubuntu-22.04'
        run: |
          sudo apt-get update
          sudo apt install libwebkit2gtk-4.1-dev build-essential curl wget file libxdo-dev libssl-dev libayatana-appindicator3-dev librsvg2-dev

      - name: Install frontend dependencies
        run: pnpm install --frozen-lockfile

      - name: Build nodecar binary
        shell: bash
        working-directory: ./nodecar
        run: |
          if [[ "${{ matrix.os }}" == "ubuntu-22.04" ]]; then
            pnpm run build:linux-x64
          elif [[ "${{ matrix.os }}" == "macos-latest" ]]; then
            pnpm run build:mac-aarch64
          elif [[ "${{ matrix.os }}" == "windows-latest" ]]; then
            pnpm run build:win-x64
          fi

      # TODO: replace with an integration test that fetches everything from rust
      # - name: Download Camoufox for testing
      #   run: npx camoufox-js fetch
      #   continue-on-error: true

      - name: Copy nodecar binary to Tauri binaries
        shell: bash
        run: |
          mkdir -p src-tauri/binaries
          if [[ "${{ matrix.os }}" == "ubuntu-22.04" ]]; then
            cp nodecar/nodecar-bin src-tauri/binaries/nodecar-x86_64-unknown-linux-gnu
          elif [[ "${{ matrix.os }}" == "macos-latest" ]]; then
            cp nodecar/nodecar-bin src-tauri/binaries/nodecar-aarch64-apple-darwin
          elif [[ "${{ matrix.os }}" == "windows-latest" ]]; then
            cp nodecar/nodecar-bin.exe src-tauri/binaries/nodecar-x86_64-pc-windows-msvc.exe
          fi

      - name: Build frontend
        run: pnpm next build

      - name: Get host target
        id: host_target
        shell: bash
        run: |
          HOST_TARGET=$(rustc -vV | sed -n 's|host: ||p')
          echo "target=${HOST_TARGET}" >> $GITHUB_OUTPUT
          echo "Host target: ${HOST_TARGET}"

      - name: Build donut-proxy sidecar
        shell: bash
        working-directory: ./src-tauri
        run: cargo build --bin donut-proxy

      - name: Copy donut-proxy binary to Tauri binaries
        shell: bash
        run: |
          mkdir -p src-tauri/binaries
          HOST_TARGET="${{ steps.host_target.outputs.target }}"
          if [[ "$HOST_TARGET" == *"windows"* ]]; then
            cp src-tauri/target/debug/donut-proxy.exe src-tauri/binaries/donut-proxy-${HOST_TARGET}.exe
          else
            cp src-tauri/target/debug/donut-proxy src-tauri/binaries/donut-proxy-${HOST_TARGET}
            chmod +x src-tauri/binaries/donut-proxy-${HOST_TARGET}
          fi

      - name: Run rustfmt check
        run: cargo fmt --all -- --check
        working-directory: src-tauri

      - name: Run clippy check and deny warnings
        run: cargo clippy --all-targets --all-features -- -D warnings -D clippy::all
        working-directory: src-tauri

      - name: Run Rust tests
        run: cargo test
        working-directory: src-tauri

      - name: Run cargo audit security check
        run: cargo audit
        working-directory: src-tauri