ci.yml

name: CI

on:
  push:
    branches: [main]
    paths:
      - '**.lock'
      - '**.nix'
  pull_request:
    paths:
      - '**.lock'
      - '**.nix'
  workflow_dispatch:

jobs:
  eval:
    name: Evaluate packages

    runs-on: ubuntu-latest

    outputs:
      matrix: ${{ steps.evaluate.outputs.matrix }}

    steps:
      - name: Checkout repository
        uses: actions/checkout@v4

      - name: Install Nix
        uses: cachix/install-nix-action@V27

      - name: Setup cache
        uses: DeterminateSystems/magic-nix-cache-action@v8

      - name: Evaluate & output matrix
        id: evaluate
        run: |
          echo "matrix=$(nix run .#eval-matrix -- 'hydraJobs.packages')" >> "$GITHUB_OUTPUT"

  packages:
    name: Build packages.${{ matrix.attr }}
    needs: eval

    strategy:
      matrix: ${{ fromJSON(needs.eval.outputs.matrix) }}

    runs-on: ${{ matrix.os }}

    steps:
      - name: Checkout repository
        uses: actions/checkout@v4

      - name: Install Nix
        uses: cachix/install-nix-action@V27

      - name: Setup cache
        uses: DeterminateSystems/magic-nix-cache-action@v8

      - name: Run build
        run: |
          nix build --print-build-logs --show-trace '.#${{ matrix.attr }}'

  modules:
    name: Test Modules
    needs: packages

    strategy:
      fail-fast: false
      matrix:
        os: [macos-latest, ubuntu-latest]

    runs-on: ${{ matrix.os }}

    steps:
      - name: Checkout repository
        uses: actions/checkout@v4

      - name: Install Nix
        uses: cachix/install-nix-action@V27

      - name: Setup cache
        uses: DeterminateSystems/magic-nix-cache-action@v8

      - name: Run tests
        run: |
          nix run \
            --inputs-from . \
            github:Mic92/nix-fast-build -- \
            --no-nom \
            --flake ".#checks.$(nix eval --raw --impure --expr builtins.currentSystem)"

  release-gate:
    name: Release Gate
    needs: [ eval, packages, modules ]

    runs-on: ubuntu-latest

    steps:
      - name: Exit with error
        if: ${{ contains(needs.*.result, 'failure') || contains(needs.*.result, 'cancelled') }}
        run: exit 1