ci.yml

name: CI

on:
  push:
    branches: [main]
  pull_request:

# Cancel superseded runs on the same ref to keep the queue short.
concurrency:
  group: ci-${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

env:
  CARGO_TERM_COLOR: always

jobs:
  # Style gate: rustfmt defaults, no local overrides.
  fmt:
    name: rustfmt
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: dtolnay/rust-toolchain@stable
        with:
          components: rustfmt
      - run: cargo fmt --check

  # Clippy is a gate, not advice. It sat advisory long enough to accumulate
  # thirty findings, two of which were the MSRV lint telling us the declared
  # minimum was false. Lints that are genuinely not worth acting on are
  # allowed by name at their site, with a reason, so this stays meaningful.
  clippy:
    name: clippy
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: dtolnay/rust-toolchain@stable
        with:
          components: clippy
      - uses: Swatinem/rust-cache@v2
      - run: cargo clippy --all-targets -- -D warnings

  # Build on the version the manifests advertise. Without this the declared
  # MSRV is a claim nobody checks, and it drifted by eight minor versions.
  msrv:
    name: MSRV
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - name: Read rust-version from Cargo.toml
        id: msrv
        run: |
          version="$(sed -n 's/^rust-version = "\(.*\)"/\1/p' Cargo.toml | head -1)"
          test -n "$version"
          echo "version=$version" >> "$GITHUB_OUTPUT"
      - uses: dtolnay/rust-toolchain@master
        with:
          toolchain: ${{ steps.msrv.outputs.version }}
      - uses: Swatinem/rust-cache@v2
      # Check, not test: the dev-dependencies are free to want a newer
      # toolchain than the published crate does.
      - run: cargo check --all-features

  # Primary supported platform: full build + test suite.
  linux:
    name: Linux (build + test)
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: dtolnay/rust-toolchain@stable
      - uses: Swatinem/rust-cache@v2
      - name: cargo build
        run: cargo build --all-targets
      - name: cargo test
        run: cargo test --no-fail-fast

  # macOS is the primary development platform, but CI coverage matters for
  # contributors and because APFS is case-insensitive by default — closer to
  # Windows than Linux for path-identity behavior.
  macos:
    name: macOS (build + test)
    runs-on: macos-latest
    steps:
      - uses: actions/checkout@v4
      - uses: dtolnay/rust-toolchain@stable
      - uses: Swatinem/rust-cache@v2
      - name: cargo build
        run: cargo build --all-targets
      - name: cargo test
        run: cargo test --no-fail-fast

  # Gate release packagers: archive, checksum, and metadata tests require
  # only stdlib Python, without rebuilding Rust.
  packaging:
    name: packaging (Homebrew and Linux)
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - name: Packaging tests
        run: python3 -m unittest discover -s scripts -p '*_test.py' -v

  # Windows support status lives in docs/windows.md. The fixtures are
  # cross-platform: fake forge CLIs are sh scripts launched through .cmd shims
  # (Git for Windows provides sh on the runners), and the GitHub API transport
  # is exercised against a local HTTP stub.
  windows:
    name: Windows (build + test)
    runs-on: windows-latest
    steps:
      - uses: actions/checkout@v4
      - uses: dtolnay/rust-toolchain@stable
      - uses: Swatinem/rust-cache@v2
      - name: cargo build
        run: cargo build --all-targets
      - name: cargo test
        run: cargo test --no-fail-fast