ci.yml

name: CI

on:
  push:
    branches: [main, master]
  pull_request:

env:
  CARGO_TERM_COLOR: always
  RUSTFLAGS: "-D warnings"
  SQLX_OFFLINE: "true"

jobs:
  fmt:
    name: rustfmt
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: dtolnay/rust-toolchain@stable
        with:
          components: rustfmt
      - run: cargo fmt --all -- --check

  clippy:
    name: clippy
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: dtolnay/rust-toolchain@stable
        with:
          components: clippy
      - uses: Swatinem/rust-cache@v2
      - run: cargo clippy --workspace --all-targets -- -D warnings

  test:
    name: test
    runs-on: ubuntu-latest
    services:
      postgres:
        image: postgres:15
        env:
          POSTGRES_USER: postgres
          POSTGRES_PASSWORD: postgres
          POSTGRES_DB: rust_api_starter_test
        ports: ["5432:5432"]
        options: >-
          --health-cmd pg_isready
          --health-interval 10s
          --health-timeout 5s
          --health-retries 5
    env:
      DATABASE_URL: postgres://postgres:postgres@localhost:5432/rust_api_starter_test
      JWT_SECRET: test-secret-that-is-at-least-thirty-two-characters-long
      APP_ENV: test
    steps:
      - uses: actions/checkout@v4
      - uses: dtolnay/rust-toolchain@stable
      - uses: Swatinem/rust-cache@v2
      - run: cargo test --workspace --all-features

  i18n:
    name: i18n parity
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - name: check locales have matching keys
        run: |
          set -euo pipefail
          cd locales
          for file in en/*.ftl; do
            base=$(basename "$file")
            diff <(grep -E '^[a-zA-Z][a-zA-Z0-9-]*\s*=' "en/$base" | awk -F= '{print $1}' | tr -d ' ' | sort) \
                 <(grep -E '^[a-zA-Z][a-zA-Z0-9-]*\s*=' "ar/$base" | awk -F= '{print $1}' | tr -d ' ' | sort) \
              || { echo "key mismatch in $base"; exit 1; }
          done

  audit:
    name: cargo audit
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: dtolnay/rust-toolchain@stable
      - uses: rustsec/audit-check@v2
        with:
          token: ${{ secrets.GITHUB_TOKEN }}

  build:
    name: build release
    runs-on: ubuntu-latest
    needs: [fmt, clippy]
    steps:
      - uses: actions/checkout@v4
      - uses: dtolnay/rust-toolchain@stable
      - uses: Swatinem/rust-cache@v2
      - run: cargo build --release --bin rust-api-starter
      - name: Upload binary artifact
        uses: actions/upload-artifact@v4
        with:
          name: rust-api-starter-linux-amd64
          path: target/release/rust-api-starter
          if-no-files-found: error
          retention-days: 7