ci-rust.yml

name: Rust CI

on:
  push:
    branches: [main, develop]
  pull_request:
    branches: [main]

concurrency:
  group: rust-ci-${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

env:
  CARGO_TERM_COLOR: always

jobs:
  rust:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4

      - uses: dtolnay/rust-toolchain@stable
        with:
          toolchain: 1.88.0
          components: rustfmt, clippy

      - uses: Swatinem/rust-cache@v2
        with:
          workspaces: ". -> target"

      - name: Format
        run: cargo fmt --all -- --check

      - name: Clippy
        run: cargo clippy --workspace --all-targets -- -D warnings

      - name: Install cargo-audit and cargo-deny
        run: cargo install cargo-audit cargo-deny --locked

      - name: cargo deny (licenses / bans)
        run: cargo deny check

      - name: cargo audit (RustSec)
        run: cargo audit

      - name: Test
        run: cargo test --workspace --verbose

      - name: Build release binaries
        run: cargo build --workspace --bins --release

  wasm-smoke:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4

      - uses: dtolnay/rust-toolchain@stable
        with:
          toolchain: 1.88.0
          targets: wasm32-wasi

      - uses: Swatinem/rust-cache@v2

      - name: Build WASM (smoke)
        run: cargo build -p policyengine --target wasm32-wasi --release