bindings.yml

name: Build bindings

concurrency:
  group: "${{ github.workflow }}-${{ github.ref }}"
  cancel-in-progress: true

on:
  push:
    branches:
      - main
  pull_request:

env:
  CARGO_TERM_COLOR: always
  CARGO_NET_GIT_FETCH_WITH_CLI: true
  CARGO_REGISTRIES_CRATES_IO_PROTOCOL: sparse

jobs:
  build-and-test-android:
    if: github.repository == 'wireapp/core-crypto'
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - name: Set up JDK 17
        uses: actions/setup-java@v4
        with:
          java-version: "17"
          distribution: "adopt"
      - name: Gradle Setup
        uses: gradle/actions/setup-gradle@v4
      - name: Validate Gradle wrapper
        uses: gradle/actions/wrapper-validation@v4
      - name: "Setup rust"
        uses: actions-rust-lang/setup-rust-toolchain@v1  # this implicitly caches Rust tools and build artifacts
        with:
          rustflags: ''
          target: "armv7-linux-androideabi,aarch64-linux-android,x86_64-linux-android"
      - name: Setup cargo-make
        uses: davidB/rust-cargo-make@v1
      - name: Setup Android SDK
        uses: android-actions/setup-android@v3
      - name: Install NDK 25
        run: echo "y" | sdkmanager --install "ndk;25.2.9519653"
      - name: Build Android package
        env:
          ANDROID_NDK_HOME: /usr/local/lib/android/sdk/ndk/25.2.9519653
        run: |
          cd crypto-ffi
          cargo make android
      - name: Build package
        run: |
          cd crypto-ffi/bindings
          ./gradlew android:build -x lint -x lintRelease
      - name: Enable KVM group perms
        run: |
          echo 'KERNEL=="kvm", GROUP="kvm", MODE="0666", OPTIONS+="static_node=kvm"' | sudo tee /etc/udev/rules.d/99-kvm4all.rules
          sudo udevadm control --reload-rules
          sudo udevadm trigger --name-match=kvm
      - name: Android Instrumentation Tests
        uses: reactivecircus/android-emulator-runner@v2
        with:
          api-level: 32
          arch: x86_64
          working-directory: ./crypto-ffi/bindings
          script: ./gradlew android:connectedAndroidTest

  build-and-test-jvm:
    if: github.repository == 'wireapp/core-crypto'
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - name: Set up JDK 17
        uses: actions/setup-java@v4
        with:
          java-version: "17"
          distribution: "adopt"
      - name: Gradle Setup
        uses: gradle/actions/setup-gradle@v4
      - name: Validate Gradle wrapper
        uses: gradle/actions/wrapper-validation@v4
      - name: "Setup rust"
        uses: actions-rust-lang/setup-rust-toolchain@v1  # this implicitly caches Rust tools and build artifacts
      - name: Setup cargo-make
        uses: davidB/rust-cargo-make@v1
      - name: Build JVM rust binaries
        run: |
          cd crypto-ffi
          cargo make jvm-linux
      - name: Build and test JVM package
        run: |
          cd crypto-ffi/bindings
          ./gradlew jvm:build -x lint -x lintRelease

  build-swift:
    runs-on: macos-latest
    strategy:
      matrix:
        task:
          - ios-device
          - ios-simulator-x86
          - ios-simulator-arm
    steps:
      - uses: actions/checkout@v4

      - name: Determine Rust target
        id: rust-target
        run: |
          if [[ "${{ matrix.task }}" == "ios-device" ]]; then
            echo "target=aarch64-apple-ios" >> $GITHUB_ENV
          elif [[ "${{ matrix.task }}" == "ios-simulator-x86" ]]; then
            echo "target=x86_64-apple-ios" >> $GITHUB_ENV
          elif [[ "${{ matrix.task }}" == "ios-simulator-arm" ]]; then
            echo "target=aarch64-apple-ios-sim" >> $GITHUB_ENV
          fi

      - uses: actions-rust-lang/setup-rust-toolchain@v1
        with:
          target: ${{ env.target }}

      - name: Setup cargo-make
        uses: davidB/rust-cargo-make@v1

      - name: Build ${{ matrix.task }}
        run: |
          cd crypto-ffi
          cargo make ${{ matrix.task }}

      - name: Upload artifact
        uses: actions/upload-artifact@v4
        with:
          name: ${{github.event.number}}-${{ matrix.task }}
          path: target
          retention-days: 1
          overwrite: 'true'
      # Only needs to be uploaded once, this step finishes fastest.
      - name: Upload FFI artifact
        if: startsWith(matrix.task, 'ios-simulator-arm')
        uses: actions/upload-artifact@v4
        with:
          name: ${{github.event.number}}-swift-ffi
          path: crypto-ffi/bindings/swift/WireCoreCrypto
          retention-days: 1
          overwrite: 'true'

  create-xcframework:
    needs: build-swift
    runs-on: macos-latest
    steps:
      - uses: actions/checkout@v4
      - name: Download artifacts for ios
        uses: actions/download-artifact@v4
        with:
          path: target
          pattern: ${{github.event.number}}-ios-*
          merge-multiple: 'true'
      - name: Download FFI artifacts
        uses: actions/download-artifact@v4
        with:
          name: ${{github.event.number}}-swift-ffi
          path: crypto-ffi/bindings/swift/WireCoreCrypto
      - name: Create xcframework
        run: |
          cd crypto-ffi/bindings/swift
          ./build-xcframework.sh


  build-and-test-wasm:
    runs-on: ubuntu-latest
    env:
      # ensures we have same flags as when publishing
      RUSTFLAGS: "-D warnings -W unreachable-pub"
    steps:
      - uses: actions/checkout@v4
      - uses: browser-actions/setup-chrome@latest
        id: setup-chrome
        with:
          chrome-version: stable
      - uses: actions-rust-lang/setup-rust-toolchain@v1  # this implicitly caches Rust tools and build artifacts
        with:
          rustflags: ''
          target: wasm32-unknown-unknown
      - uses: oven-sh/setup-bun@v2
        with:
          bun-version: latest
      - uses: actions/setup-node@v4
        with:
          node-version: 18
      - name: Setup cargo-make
        uses: davidB/rust-cargo-make@v1
      - name: Install wasm-pack
        uses: taiki-e/install-action@v2
        with:
          tool: wasm-pack
      - name: Build & test WASM / JS package
        run: |
          cd crypto-ffi
          cargo make wasm
          cd bindings/js
          bun eslint . --max-warnings=0
          bun run build
          bun run test