rust.yml

name: Rust

on:
  push:
    branches: [ "main", "develop" ]
  pull_request:
    branches: [ "develop" ]

env:
  CARGO_TERM_COLOR: always
  RUSTC_WRAPPER: sccache
  SCCACHE_CACHE_SIZE: 1G
  COVERAGE_IGNORE_REGEX: '(^|.*/)(tests?/.*|generated/.*|\.sqlx/.*)$'

jobs:
  unit-tests:
    runs-on: ubuntu-latest
    strategy:
      fail-fast: false
      matrix:
        rust: [stable]

    services:
      postgres:
        image: postgres:14-alpine
        env:
          POSTGRES_USER: synapse
          POSTGRES_PASSWORD: synapse
          POSTGRES_DB: synapse_test
        options: >-
          --health-cmd pg_isready
          --health-interval 10s
          --health-timeout 5s
          --health-retries 5
        ports:
          - 5432:5432

    steps:
    - uses: actions/checkout@v4

    - name: Install Rust toolchain
      uses: dtolnay/rust-toolchain@v1
      with:
        toolchain: ${{ matrix.rust }}
        components: rustfmt, clippy

    - name: Install sccache
      uses: taiki-e/install-action@sccache

    - name: Cache Cargo registry and build artifacts
      uses: actions/cache@v4
      with:
        path: |
          ~/.cargo/registry/index/
          ~/.cargo/registry/cache/
          ~/.cargo/git/db/
          target/
        key: ${{ runner.os }}-${{ matrix.rust }}-cargo-${{ hashFiles('**/Cargo.lock') }}
        restore-keys: |
          ${{ runner.os }}-${{ matrix.rust }}-cargo-
          ${{ runner.os }}-cargo-

    - name: Check formatting
      if: matrix.rust == 'stable'
      run: cargo fmt --all -- --check

    - name: Install sqlx-cli
      uses: taiki-e/install-action@v2
      with:
        tool: sqlx-cli@0.7.4

    - name: Check migration safety
      if: matrix.rust == 'stable'
      run: ./scripts/check-migration-safety.sh migrations


    - name: Run migrations
      run: sqlx migrate run
      env:
        DATABASE_URL: postgres://synapse:synapse@localhost:5432/synapse_test

    - name: Run clippy
      if: matrix.rust == 'stable'
      run: cargo clippy -- -D warnings
      env:
        DATABASE_URL: postgres://synapse:synapse@localhost:5432/synapse_test

    - name: Build
      run: cargo build --verbose
      env:
        DATABASE_URL: postgres://synapse:synapse@localhost:5432/synapse_test

    - name: Run unit tests
      run: cargo test --lib --bins --verbose
      env:
        DATABASE_URL: postgres://synapse:synapse@localhost:5432/synapse_test



  integration-tests:
    runs-on: ubuntu-latest
    strategy:
      fail-fast: false
      matrix:
        rust: [stable]

    services:
      postgres:
        image: postgres:14-alpine
        env:
          POSTGRES_USER: synapse
          POSTGRES_PASSWORD: synapse
          POSTGRES_DB: synapse_test
        options: >-
          --health-cmd pg_isready
          --health-interval 10s
          --health-timeout 5s
          --health-retries 5
        ports:
          - 5432:5432
      redis:
        image: redis:7-alpine
        options: >-
          --health-cmd "redis-cli ping"
          --health-interval 10s
          --health-timeout 5s
          --health-retries 5
        ports:
          - 6379:6379

    steps:
    - uses: actions/checkout@v4

    - name: Install Rust toolchain
      uses: dtolnay/rust-toolchain@v1
      with:
        toolchain: ${{ matrix.rust }}

    - name: Cache Cargo registry and build artifacts
      uses: actions/cache@v4
      with:
        path: |
          ~/.cargo/registry/index/
          ~/.cargo/registry/cache/
          ~/.cargo/git/db/
          target/
        key: ${{ runner.os }}-${{ matrix.rust }}-cargo-${{ hashFiles('**/Cargo.lock') }}
        restore-keys: |
          ${{ runner.os }}-${{ matrix.rust }}-cargo-
          ${{ runner.os }}-cargo-

    - name: Install sccache
      uses: taiki-e/install-action@sccache

    - name: Install sqlx-cli
      uses: taiki-e/install-action@v2
      with:
        tool: sqlx-cli@0.7.4


    - name: Run migrations
      run: sqlx migrate run
      env:
        DATABASE_URL: postgres://synapse:synapse@localhost:5432/synapse_test

    - name: Run integration tests
      run: cargo test --verbose -- --ignored --skip test_api_versioning_headers --skip test_invalid_signature_flow
      env:
        DATABASE_URL: postgres://synapse:synapse@localhost:5432/synapse_test
        REDIS_URL: redis://localhost:6379



  coverage:
    runs-on: ubuntu-latest
    needs:
      - unit-tests
      - integration-tests
    permissions:
      contents: read
      id-token: write

    services:
      postgres:
        image: postgres:14-alpine
        env:
          POSTGRES_USER: synapse
          POSTGRES_PASSWORD: synapse
          POSTGRES_DB: synapse_test
        options: >-
          --health-cmd pg_isready
          --health-interval 10s
          --health-timeout 5s
          --health-retries 5
        ports:
          - 5432:5432
      redis:
        image: redis:7-alpine
        options: >-
          --health-cmd "redis-cli ping"
          --health-interval 10s
          --health-timeout 5s
          --health-retries 5
        ports:
          - 6379:6379

    steps:
    - uses: actions/checkout@v4

    - name: Install Rust toolchain
      uses: dtolnay/rust-toolchain@v1
      with:
        toolchain: stable
        components: llvm-tools-preview

    - name: Cache Cargo registry and build artifacts
      uses: actions/cache@v4
      with:
        path: |
          ~/.cargo/registry/index/
          ~/.cargo/registry/cache/
          ~/.cargo/git/db/
          target/
        key: ${{ runner.os }}-coverage-cargo-${{ hashFiles('**/Cargo.lock') }}
        restore-keys: |
          ${{ runner.os }}-coverage-cargo-
          ${{ runner.os }}-cargo-

    - name: Install sccache
      uses: taiki-e/install-action@sccache

    - name: Install sqlx-cli
      uses: taiki-e/install-action@v2
      with:
        tool: sqlx-cli@0.7.4

    - name: Install cargo-llvm-cov
      uses: taiki-e/install-action@cargo-llvm-cov


    - name: Run migrations
      run: sqlx migrate run
      env:
        DATABASE_URL: postgres://synapse:synapse@localhost:5432/synapse_test

    - name: Collect coverage data
      run: |
        cargo llvm-cov clean --workspace
        cargo llvm-cov --workspace --lib --bins --no-report
        cargo llvm-cov --workspace --no-report -- --ignored --skip test_api_versioning_headers --skip test_invalid_signature_flow
        cargo llvm-cov report --html --output-dir target/llvm-cov/html --ignore-filename-regex "$COVERAGE_IGNORE_REGEX"
        cargo llvm-cov report --lcov --output-path target/llvm-cov/lcov.info --ignore-filename-regex "$COVERAGE_IGNORE_REGEX"
        cargo llvm-cov report --json --summary-only --output-path target/llvm-cov/summary.json --ignore-filename-regex "$COVERAGE_IGNORE_REGEX"
      env:
        DATABASE_URL: postgres://synapse:synapse@localhost:5432/synapse_test
        REDIS_URL: redis://localhost:6379

    - name: Upload coverage artifacts
      uses: actions/upload-artifact@v4
      with:
        name: coverage-report
        path: |
          target/llvm-cov/html/
          target/llvm-cov/lcov.info
          target/llvm-cov/summary.json
        if-no-files-found: error

    - name: Upload coverage to Codecov
      uses: codecov/codecov-action@v5
      with:
        token: ${{ secrets.CODECOV_TOKEN }}
        fail_ci_if_error: false
        files: target/llvm-cov/lcov.info
        flags: rust
        name: rust-coverage
        disable_search: true
        verbose: true

    - name: Enforce coverage thresholds
      run: |
        coverage=$(jq -r '.data[0].totals.lines.percent' target/llvm-cov/summary.json)
        echo "Line coverage: ${coverage}%"

        if awk -v c="$coverage" 'BEGIN { exit !(c < 40) }'; then
          echo "::error::Coverage ${coverage}% is below the required minimum of 40%."
          exit 1
        fi

        if awk -v c="$coverage" 'BEGIN { exit !(c < 60) }'; then
          echo "::warning::Coverage ${coverage}% is below the warning threshold of 60%."
        fi