rust.yml

name: Rust bindings

on:
  push:
    branches:
      - main
  release:
    types: [published]
  pull_request:
    branches:
      - "**"

permissions:
  id-token: write
  contents: read

jobs:
  fuzz_targets:
    name: Run fuzzers
    runs-on: ubuntu-latest
    env:
      CARGO_PROFILE_RELEASE_LTO: false
    steps:
      - uses: actions/checkout@v4
      - uses: dtolnay/rust-toolchain@nightly

      - name: Install cargo-fuzz
        run: cargo +nightly install cargo-fuzz

      - name: Cargo fuzz
        run: |
          cd rust-bindings
          cargo fuzz list | xargs -I "%" sh -c "cargo +nightly fuzz run % -- -max_total_time=600 || exit 255"

  build_crate:
    name: Build crate
    runs-on: ubuntu-latest
    strategy:
      fail-fast: false

    steps:
      - uses: actions/checkout@v4
        with:
          fetch-depth: 0

      - name: Set up Rust
        uses: dtolnay/rust-toolchain@stable
        with:
          components: rustfmt, clippy

      - name: Rustfmt
        run: cargo fmt -- --files-with-diff --check

      - name: Clippy
        run: cargo clippy

      - name: Tests
        run: cargo test && cargo test --release

      - name: Build
        run: cargo build --release

      - name: Prepare for publish
        run: |
          mkdir rust-bindings/cpp
          cp -r src lib tests uint128_t python-bindings c-bindings CMakeLists.txt rust-bindings/cpp

      - name: Publish to crates.io (dry run)
        # We use `--allow-dirty` because the `cpp` folder is copied into the working directory.
        # This is necessary because the `cpp` folder is not part of the crate otherwise.
        run: cargo publish --dry-run -p chiapos --allow-dirty

      - name: Upload crate artifacts
        uses: actions/upload-artifact@v4
        with:
          name: crate
          path: ./target/package/*-*.crate

      - name: Set Env
        uses: Chia-Network/actions/setjobenv@main
        env:
          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}

      - name: Publish to crates.io
        if: env.RELEASE == 'true'
        env:
          CARGO_REGISTRY_TOKEN: ${{ secrets.cargo_registry_token }}
        # See comment above for why `--allow-dirty` is used.
        run: cargo publish -p chiapos --allow-dirty