rust.yml

name: Rust CI

on:
  push:
    paths:
      - '**/*.rs'
      - 'Cargo.toml'
      - 'Cargo.lock'
      - 'rust-toolchain.toml'
      - 'frontend-panel/package.json'
      - 'frontend-panel/generated/openapi.json'
      - 'frontend-panel/src/services/api.generated.ts'
      - 'scripts/coverage-summary.mjs'
      - '.github/workflows/rust.yml'
    branches: [master]
  pull_request:
    paths:
      - '**/*.rs'
      - 'Cargo.toml'
      - 'Cargo.lock'
      - 'rust-toolchain.toml'
      - 'frontend-panel/package.json'
      - 'frontend-panel/generated/openapi.json'
      - 'frontend-panel/src/services/api.generated.ts'
      - 'scripts/coverage-summary.mjs'
      - '.github/workflows/rust.yml'
    branches: [master, develop]

concurrency:
  group: rust-${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

env:
  CARGO_TERM_COLOR: always
  # CI runners perform one clean build per job. Incremental artifacts consume
  # substantial disk without providing the local edit-compile feedback benefit.
  CARGO_INCREMENTAL: "0"
  # The local dev profile favors maximum parallel code generation. CI runners
  # have fewer cores, so keep test artifacts smaller and cheaper to link.
  CARGO_PROFILE_TEST_CODEGEN_UNITS: "16"
  CARGO_PROFILE_TEST_DEBUG: "0"

permissions:
  contents: read

jobs:
  format-and-clippy:
    name: Format and Clippy
    runs-on: ubuntu-latest
    timeout-minutes: 60
    steps:
      - uses: actions/checkout@v6

      - name: Setup Rust toolchain
        uses: dtolnay/rust-toolchain@stable
        with:
          components: rustfmt, clippy

      - name: Format check
        run: cargo fmt -- --check

      - name: Install media processing dependencies
        run: sudo apt-get update && sudo apt-get install -y libvips-tools ffmpeg

      - name: Cache Rust build artifacts
        uses: Swatinem/rust-cache@v2
        with:
          shared-key: clippy-v1

      - name: Clippy
        run: cargo clippy --workspace --all-targets --all-features -- -D warnings

  openapi-sdk-drift:
    name: OpenAPI and generated SDK drift
    runs-on: ubuntu-latest
    timeout-minutes: 60
    steps:
      - uses: actions/checkout@v6

      - name: Setup Rust toolchain
        uses: dtolnay/rust-toolchain@stable

      - name: Install media processing dependencies
        run: sudo apt-get update && sudo apt-get install -y libvips-tools ffmpeg

      - name: Cache Rust build artifacts
        uses: Swatinem/rust-cache@v2
        with:
          shared-key: openapi-v1

      - name: Generate OpenAPI specification
        run: cargo test --features openapi --test generate_openapi

      - name: Setup bun
        uses: oven-sh/setup-bun@v2

      - name: Setup Node.js
        uses: actions/setup-node@v6
        with:
          node-version: 24

      - name: Install frontend dependencies
        working-directory: frontend-panel
        run: bun install --frozen-lockfile

      - name: Generate TypeScript SDK
        working-directory: frontend-panel
        run: bun run generate-api

      - name: Verify generated files are up to date
        run: |
          git diff --exit-code -- \
            frontend-panel/generated/openapi.json \
            frontend-panel/src/services/api.generated.ts

  coverage:
    name: Tests and coverage
    runs-on: ubuntu-latest
    timeout-minutes: 120
    steps:
      - uses: actions/checkout@v6

      - name: Setup Rust toolchain
        uses: dtolnay/rust-toolchain@stable
        with:
          components: llvm-tools-preview

      - name: Install media processing dependencies
        run: sudo apt-get update && sudo apt-get install -y libvips-tools ffmpeg

      - name: Install cargo-llvm-cov
        uses: taiki-e/install-action@v2
        with:
          tool: cargo-llvm-cov

      - name: Prepare coverage output directory
        run: mkdir -p coverage/rust

      - name: Setup bun
        uses: oven-sh/setup-bun@v2

      - name: Run tests with coverage
        run: cargo llvm-cov --workspace --no-fail-fast --lcov --output-path coverage/rust/lcov.info

      - name: Generate HTML coverage report
        if: success()
        run: cargo llvm-cov report --html --output-dir coverage/rust/html

      - name: Publish coverage summary
        if: always() && hashFiles('coverage/rust/lcov.info') != ''
        run: bun scripts/coverage-summary.mjs "Rust" coverage/rust/lcov.info

      - name: Upload coverage reports to Codecov
        if: always() && hashFiles('coverage/rust/lcov.info') != ''
        uses: codecov/codecov-action@v7
        with:
          files: coverage/rust/lcov.info
          flags: rust
          name: rust-backend
          token: ${{ secrets.CODECOV_TOKEN }}
          fail_ci_if_error: true
          verbose: true

      - name: Upload coverage artifacts
        if: always()
        uses: actions/upload-artifact@v7
        with:
          name: rust-coverage
          if-no-files-found: ignore
          path: coverage/rust

  integration-backends:
    name: Integration tests (${{ matrix.backend }})
    runs-on: ubuntu-latest
    timeout-minutes: 120
    strategy:
      fail-fast: false
      matrix:
        backend: [postgres, mysql]
    env:
      ASTER_TEST_DATABASE_BACKEND: ${{ matrix.backend }}
      # 复用 testcontainers 容器，测试间共享 Postgres/MySQL 实例
      TESTCONTAINERS_REUSE_ENABLED: "true"
    steps:
      - uses: actions/checkout@v6

      - name: Setup Rust toolchain
        uses: dtolnay/rust-toolchain@stable

      - name: Install media processing dependencies
        run: sudo apt-get update && sudo apt-get install -y libvips-tools ffmpeg

      - name: Cache Rust build artifacts
        uses: Swatinem/rust-cache@v2
        with:
          shared-key: integration-v2

      # testcontainers 使用的 Docker 在 ubuntu-latest 上预装
      - name: Verify Docker availability
        run: docker version

      # 只跑集成测试（tests/ 下的），单元测试已在 coverage job 中覆盖
      - name: Run integration tests against ${{ matrix.backend }}
        run: cargo test --tests --no-fail-fast