Merge pull request #1248 from Mkalbani/feat/1036-1038-1051-1054-webso… #742
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: CI | |
| on: | |
| push: | |
| branches: [main] | |
| pull_request: | |
| branches: [main] | |
| # Advisories are published continuously, so a lockfile that was clean at | |
| # merge time can become vulnerable without anything in the repo changing. | |
| # This re-runs the audit weekly against the committed Cargo.lock. | |
| schedule: | |
| - cron: "0 6 * * 1" | |
| env: | |
| CARGO_TERM_COLOR: always | |
| defaults: | |
| run: | |
| working-directory: contracts # 👈 all cargo commands run in contracts/ | |
| jobs: | |
| format: | |
| name: Format Check | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Read pinned toolchain | |
| id: toolchain | |
| run: echo "channel=$(grep -m1 '^channel' rust-toolchain.toml | cut -d'"' -f2)" >> "$GITHUB_OUTPUT" | |
| - name: Install Rust toolchain | |
| uses: dtolnay/rust-toolchain@master | |
| with: | |
| toolchain: ${{ steps.toolchain.outputs.channel }} | |
| components: rustfmt | |
| - name: Check formatting | |
| run: cargo fmt --all -- --check | |
| clippy: | |
| name: Clippy Lint | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Read pinned toolchain | |
| id: toolchain | |
| run: echo "channel=$(grep -m1 '^channel' rust-toolchain.toml | cut -d'"' -f2)" >> "$GITHUB_OUTPUT" | |
| - name: Install Rust toolchain | |
| uses: dtolnay/rust-toolchain@master | |
| with: | |
| toolchain: ${{ steps.toolchain.outputs.channel }} | |
| components: clippy | |
| - name: Cache cargo registry | |
| uses: actions/cache@v4 | |
| with: | |
| path: | | |
| ~/.cargo/registry | |
| ~/.cargo/git | |
| contracts/target | |
| key: ${{ runner.os }}-cargo-${{ hashFiles('contracts/Cargo.lock') }} | |
| restore-keys: | | |
| ${{ runner.os }}-cargo- | |
| - name: Run clippy | |
| run: cargo clippy --all-targets --all-features -- -D warnings | |
| test: | |
| name: Test Suite | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Read pinned toolchain | |
| id: toolchain | |
| run: echo "channel=$(grep -m1 '^channel' rust-toolchain.toml | cut -d'"' -f2)" >> "$GITHUB_OUTPUT" | |
| - name: Install Rust toolchain | |
| uses: dtolnay/rust-toolchain@master | |
| with: | |
| toolchain: ${{ steps.toolchain.outputs.channel }} | |
| - name: Cache cargo registry | |
| uses: actions/cache@v4 | |
| with: | |
| path: | | |
| ~/.cargo/registry | |
| ~/.cargo/git | |
| contracts/target | |
| key: ${{ runner.os }}-cargo-test-${{ hashFiles('contracts/Cargo.lock') }} | |
| restore-keys: | | |
| ${{ runner.os }}-cargo-test- | |
| ${{ runner.os }}-cargo- | |
| - name: Run tests | |
| run: cargo test --all --verbose | |
| build: | |
| name: Build Check | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Read pinned toolchain | |
| id: toolchain | |
| run: echo "channel=$(grep -m1 '^channel' rust-toolchain.toml | cut -d'"' -f2)" >> "$GITHUB_OUTPUT" | |
| - name: Install Rust toolchain | |
| uses: dtolnay/rust-toolchain@master | |
| with: | |
| toolchain: ${{ steps.toolchain.outputs.channel }} | |
| - name: Cache cargo registry | |
| uses: actions/cache@v4 | |
| with: | |
| path: | | |
| ~/.cargo/registry | |
| ~/.cargo/git | |
| contracts/target | |
| key: ${{ runner.os }}-cargo-build-${{ hashFiles('contracts/Cargo.lock') }} | |
| restore-keys: | | |
| ${{ runner.os }}-cargo-build- | |
| ${{ runner.os }}-cargo- | |
| - name: Build all crates | |
| run: cargo build --all --verbose | |
| build-wasm: | |
| name: Build WASM | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Read pinned toolchain | |
| id: toolchain | |
| run: echo "channel=$(grep -m1 '^channel' rust-toolchain.toml | cut -d'"' -f2)" >> "$GITHUB_OUTPUT" | |
| - name: Install Rust toolchain | |
| uses: dtolnay/rust-toolchain@master | |
| with: | |
| toolchain: ${{ steps.toolchain.outputs.channel }} | |
| targets: wasm32-unknown-unknown | |
| - name: Cache cargo registry | |
| uses: actions/cache@v4 | |
| with: | |
| path: | | |
| ~/.cargo/registry | |
| ~/.cargo/git | |
| contracts/target | |
| key: ${{ runner.os }}-cargo-wasm-${{ hashFiles('contracts/Cargo.lock') }} | |
| restore-keys: | | |
| ${{ runner.os }}-cargo-wasm- | |
| ${{ runner.os }}-cargo- | |
| # Every crate declares a cdylib crate-type and a #[contract] entrypoint, | |
| # so all five are deployable and all five must be size-checked. | |
| - name: Build all contracts to WASM | |
| run: cargo build --workspace --target wasm32-unknown-unknown --release --verbose | |
| - name: Check WASM size budgets | |
| run: ./scripts/check-wasm-size.sh | tee "$GITHUB_STEP_SUMMARY" | |
| - name: Upload WASM artifacts | |
| uses: actions/upload-artifact@v4 | |
| with: | |
| name: contract-wasm | |
| path: contracts/target/wasm32-unknown-unknown/release/*.wasm | |
| if-no-files-found: error | |
| retention-days: 14 | |
| wasm-size-delta: | |
| name: WASM Size Delta | |
| runs-on: ubuntu-latest | |
| # Only meaningful on a pull request, where there is a base to compare to. | |
| if: github.event_name == 'pull_request' | |
| permissions: | |
| contents: read | |
| pull-requests: write | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Read pinned toolchain | |
| id: toolchain | |
| run: echo "channel=$(grep -m1 '^channel' rust-toolchain.toml | cut -d'"' -f2)" >> "$GITHUB_OUTPUT" | |
| - name: Install Rust toolchain | |
| uses: dtolnay/rust-toolchain@master | |
| with: | |
| toolchain: ${{ steps.toolchain.outputs.channel }} | |
| targets: wasm32-unknown-unknown | |
| - name: Cache cargo registry | |
| uses: actions/cache@v4 | |
| with: | |
| path: | | |
| ~/.cargo/registry | |
| ~/.cargo/git | |
| contracts/target | |
| key: ${{ runner.os }}-cargo-wasm-${{ hashFiles('contracts/Cargo.lock') }} | |
| restore-keys: | | |
| ${{ runner.os }}-cargo-wasm- | |
| ${{ runner.os }}-cargo- | |
| - name: Measure this branch | |
| run: | | |
| cargo build --workspace --target wasm32-unknown-unknown --release | |
| ./scripts/check-wasm-size.sh --json > /tmp/head-sizes.json | |
| cat /tmp/head-sizes.json | |
| - name: Measure the base branch | |
| run: | | |
| git stash --include-untracked || true | |
| git fetch origin "${{ github.base_ref }}" --depth=1 | |
| git checkout "origin/${{ github.base_ref }}" -- . | |
| cargo build --workspace --target wasm32-unknown-unknown --release | |
| ./scripts/check-wasm-size.sh --json > /tmp/base-sizes.json || echo '{}' > /tmp/base-sizes.json | |
| cat /tmp/base-sizes.json | |
| - name: Build the delta table | |
| id: delta | |
| run: | | |
| python3 - <<'PY' > /tmp/delta.md | |
| import json | |
| with open('/tmp/head-sizes.json') as f: | |
| head = json.load(f) | |
| try: | |
| with open('/tmp/base-sizes.json') as f: | |
| base = json.load(f) | |
| except Exception: | |
| base = {} | |
| rows = [] | |
| for name in sorted(head): | |
| now = head[name] | |
| before = base.get(name) | |
| if before is None: | |
| rows.append(f"| `{name}` | — | {now} | new |") | |
| continue | |
| diff = now - before | |
| pct = 0 if before == 0 else (diff / before) * 100 | |
| sign = "+" if diff > 0 else "" | |
| marker = " :warning:" if diff > 0 else (" :white_check_mark:" if diff < 0 else "") | |
| rows.append(f"| `{name}` | {before} | {now} | {sign}{diff} ({sign}{pct:.2f}%){marker} |") | |
| print("### WASM size delta") | |
| print() | |
| print("| Contract | Base | This PR | Change |") | |
| print("|---|---:|---:|---:|") | |
| print("\n".join(rows)) | |
| print() | |
| print("_Sizes in bytes, before `stellar contract optimize`. " | |
| "Budgets are in `contracts/scripts/check-wasm-size.sh`._") | |
| PY | |
| cat /tmp/delta.md >> "$GITHUB_STEP_SUMMARY" | |
| cat /tmp/delta.md | |
| # A pull_request event from a fork gets a read-only GITHUB_TOKEN whatever | |
| # the permissions block says, so commenting is best-effort. The delta is | |
| # always in the job summary above; this only adds the convenience of | |
| # having it inline on the PR when the token allows it. | |
| - name: Comment the per-contract delta | |
| if: github.event.pull_request.head.repo.full_name == github.repository | |
| continue-on-error: true | |
| uses: actions/github-script@v7 | |
| with: | |
| script: | | |
| const fs = require('fs'); | |
| const body = fs.readFileSync('/tmp/delta.md', 'utf8'); | |
| const { data: comments } = await github.rest.issues.listComments({ | |
| owner: context.repo.owner, | |
| repo: context.repo.repo, | |
| issue_number: context.issue.number, | |
| }); | |
| const existing = comments.find( | |
| (c) => c.user.type === 'Bot' && c.body.startsWith('### WASM size delta') | |
| ); | |
| if (existing) { | |
| await github.rest.issues.updateComment({ | |
| owner: context.repo.owner, | |
| repo: context.repo.repo, | |
| comment_id: existing.id, | |
| body, | |
| }); | |
| } else { | |
| await github.rest.issues.createComment({ | |
| owner: context.repo.owner, | |
| repo: context.repo.repo, | |
| issue_number: context.issue.number, | |
| body, | |
| }); | |
| } | |
| # ───────────────────────────────────────────── | |
| # BACKEND — NestJS | |
| # ───────────────────────────────────────────── | |
| backend: | |
| name: Backend (NestJS) | |
| runs-on: ubuntu-latest | |
| defaults: | |
| run: | |
| working-directory: backend | |
| steps: | |
| - name: Checkout code | |
| uses: actions/checkout@v4 | |
| - name: Setup Node.js | |
| uses: actions/setup-node@v4 | |
| with: | |
| node-version: "20" | |
| cache: "npm" | |
| cache-dependency-path: backend/package-lock.json | |
| - name: Install dependencies | |
| run: npm ci | |
| - name: Lint | |
| run: npm run lint | |
| - name: Build (TypeScript check) | |
| run: npm run build | |
| - name: Unit tests with coverage | |
| run: npm run test:cov | |
| # ───────────────────────────────────────────── | |
| # FRONTEND — Next.js | |
| # ───────────────────────────────────────────── | |
| frontend: | |
| name: Frontend (Next.js) | |
| runs-on: ubuntu-latest | |
| defaults: | |
| run: | |
| working-directory: frontend | |
| steps: | |
| - name: Checkout code | |
| uses: actions/checkout@v4 | |
| - name: Setup Node.js | |
| uses: actions/setup-node@v4 | |
| with: | |
| node-version: "20" | |
| cache: "npm" | |
| cache-dependency-path: frontend/package-lock.json | |
| - name: Install dependencies | |
| run: npm ci | |
| - name: Lint | |
| run: npm run lint | |
| - name: Build | |
| run: npm run build | |
| env: | |
| NEXT_PUBLIC_API_URL: http://localhost:3001 | |
| - name: Unit tests | |
| run: npm run test -- --passWithNoTests |