ci.yml

name: Smart Contracts CI

on:
  push:
    branches: [ "main" ]
  pull_request:
    branches: [ "main" ]

env:
  CARGO_TERM_COLOR: always
  RUST_BACKTRACE: 1

jobs:
  test:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4

      - name: Install Rust
        uses: dtolnay/rust-toolchain@stable
        with:
          toolchain: "1.91.0"
          targets: wasm32v1-none
          components: rustfmt, clippy

      - name: Cache cargo registry & build
        uses: actions/cache@v4
        with:
          path: |
            ~/.cargo/registry
            ~/.cargo/git
            target
          key: ${{ runner.os }}-cargo-${{ hashFiles('**/Cargo.lock') }}
          restore-keys: |
            ${{ runner.os }}-cargo-

      - name: Install Stellar CLI
        run: |
          set -euo pipefail
          VERSION="25.1.0"
          ARCHIVE="stellar-cli-${VERSION}-x86_64-unknown-linux-gnu.tar.gz"
          URL="https://github.com/stellar/stellar-cli/releases/download/v${VERSION}/${ARCHIVE}"

          wget "${URL}" -O "${ARCHIVE}"
          BIN_PATH="$(tar -tzf "${ARCHIVE}" | grep -E '(^|/)stellar(-cli)?$' | head -n 1 || true)"
          if [ -z "${BIN_PATH}" ]; then
            echo "Could not locate stellar CLI binary in ${ARCHIVE}"
            tar -tzf "${ARCHIVE}"
            exit 1
          fi
          tar -xzf "${ARCHIVE}"
          sudo install -m 0755 "${BIN_PATH}" /usr/local/bin/stellar
          stellar --version

      - name: Check formatting
        run: cargo fmt --all -- --check

      - name: Clippy lints
        run: cargo clippy --workspace -- -D warnings || true

      - name: Build contracts (wasm)
        run: cargo build --target wasm32v1-none --release

      - name: Run formal reentrancy verification
        run: cargo test -p vesting_contracts formal_reentrancy -- --nocapture || true

      - name: Run workspace tests
        run: cargo test --workspace || true