ci.yml

name: CI

on:
  push:
    branches:
      - main
  pull_request:
    branches:
      - main

permissions:
  contents: read

jobs:
  # ── Soroban ABI golden-vector drift guard ────────────────────────────────
  golden-vectors:
    name: Soroban ABI golden vectors
    runs-on: ubuntu-latest
    # Run whenever contracts or backend builder code changes
    if: |
      github.event_name == 'push' ||
      contains(toJson(github.event.pull_request.changed_files), 'contracts/') ||
      contains(toJson(github.event.pull_request.changed_files), 'backend/src/soroban/') ||
      contains(toJson(github.event.pull_request.changed_files), 'backend/src/tx/')
    defaults:
      run:
        working-directory: backend
    steps:
      - uses: actions/checkout@v4

      - uses: actions/setup-node@v4
        with:
          node-version: 22

      - run: npm install

      - name: Run golden-vector encoding tests
        run: npx jest --testPathPattern="golden-vectors" --no-coverage

      - name: Verify vectors are up-to-date (no uncommitted drift)
        run: |
          npx ts-node ../scripts/refresh-vectors.ts
          if ! git diff --exit-code backend/src/soroban/golden-vectors.json; then
            echo "::error::golden-vectors.json is stale. Run 'npm run refresh-vectors' locally, review the diff, and commit the updated file."
            exit 1
          fi

  # ── Smart contract ────────────────────────────────────────────────────────
  contract:
    name: Contract (Rust / Soroban)
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: actions/setup-node@v4
        with:
          node-version: '20'
      - name: Determine package manager
        id: pkgmgr
        run: |
          if [ -f pnpm-lock.yaml ]; then
            echo "manager=pnpm" >> "$GITHUB_OUTPUT"
          elif [ -f package-lock.json ]; then
            echo "manager=npm" >> "$GITHUB_OUTPUT"
          elif [ -f yarn.lock ]; then
            echo "manager=yarn" >> "$GITHUB_OUTPUT"
          else
            echo "manager=npm" >> "$GITHUB_OUTPUT"
          fi
      - name: Setup pnpm when needed
        if: steps.pkgmgr.outputs.manager == 'pnpm'
        uses: pnpm/action-setup@v2
        with:
          version: 8
      - name: Cache node modules
        uses: actions/cache@v4
        with:
          path: |
            node_modules
            ~/.pnpm-store
          key: ${{ runner.os }}-node-${{ steps.pkgmgr.outputs.manager }}-${{ hashFiles('**/package-lock.json', '**/pnpm-lock.yaml', '**/yarn.lock') }}
          restore-keys: ${{ runner.os }}-node-${{ steps.pkgmgr.outputs.manager }}-
      - name: Cache .next cache
        uses: actions/cache@v4
        with:
          path: .next/cache
          key: ${{ runner.os }}-next-cache-${{ hashFiles('**/package-lock.json', '**/pnpm-lock.yaml', '**/yarn.lock') }}
          restore-keys: ${{ runner.os }}-next-cache-
      - name: Install dependencies
        run: |
          if [ "${{ steps.pkgmgr.outputs.manager }}" = "pnpm" ]; then
            pnpm install --frozen-lockfile
          else
            npm ci
          fi
      - name: Lint (fail on warnings)
        run: |
          if [ "${{ steps.pkgmgr.outputs.manager }}" = "pnpm" ]; then
            pnpm eslint --max-warnings=0 .
          else
            npm run lint -- --max-warnings=0
          fi
      - name: TypeScript compile
        run: |
          if [ "${{ steps.pkgmgr.outputs.manager }}" = "pnpm" ]; then
            pnpm tsc --noEmit
          else
            npm run build --if-present -- --noEmit
          fi
      - name: Build
        run: |
          if [ "${{ steps.pkgmgr.outputs.manager }}" = "pnpm" ]; then
            pnpm build
          else
            npm run build
          fi

  unit-tests:
    name: Unit tests
    runs-on: ubuntu-latest
    defaults:
      run:
        working-directory: backend

    env:
      REDIS_HOST: 127.0.0.1
      REDIS_PORT: 6379
      NODE_ENV: test

    steps:
      - uses: actions/checkout@v4

      # Install Redis directly on the runner — avoids Docker Hub rate limits entirely
      - name: Start Redis
        run: |
          sudo apt-get update -qq
          sudo apt-get install -y redis-server
          sudo systemctl start redis-server
          redis-cli ping

      - uses: actions/setup-node@v4
        with:
          node-version: '20'
      - name: Install dependencies
        run: npm ci
      - name: Run unit tests
        run: npm test

  e2e-tests:
    name: Playwright E2E tests
    runs-on: ubuntu-latest
    needs: quality-build
    steps:
      - uses: actions/checkout@v4
      - uses: actions/setup-node@v4
        with:
          node-version: '20'
      - name: Install dependencies
        run: npm ci
      - name: Install Playwright browsers
        run: npx playwright install --with-deps
      - name: Run Playwright tests
        run: npx playwright test --reporter=html
        continue-on-error: true
      - name: Upload Playwright artifacts on failure
        if: failure()
        uses: actions/upload-artifact@v3
        with:
          name: playwright-failure-${{ github.run_id }}
          path: |
            test-results
            playwright-report
            traces
            .playwright/traces