ci.yml

# Continuous integration: formatting, lints, and tests on every push/PR.
# Tests run on Linux/macOS/Windows so the cross-OS paths (e.g. `key`'s home +
# clipboard resolution) are actually exercised on each platform.
name: CI
on:
  push:
    branches: [main]
  pull_request:

permissions:
  contents: read

# Cancel superseded runs on the same ref (newest push wins).
concurrency:
  group: ci-${{ github.ref }}
  cancel-in-progress: true

env:
  CARGO_TERM_COLOR: always

jobs:
  fmt:
    name: rustfmt
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: dtolnay/rust-toolchain@stable
        with:
          components: rustfmt
      - run: cargo fmt --all --check

  test:
    name: clippy + test (${{ matrix.os }})
    runs-on: ${{ matrix.os }}
    strategy:
      fail-fast: false
      matrix:
        os: [ubuntu-latest, macos-latest, windows-latest]
    steps:
      - uses: actions/checkout@v4
      - uses: dtolnay/rust-toolchain@stable
        with:
          components: clippy
      - uses: Swatinem/rust-cache@v2
      - run: cargo clippy --all-targets --all-features -- -D warnings
      # Hermetic suite (incl. tests/cli.rs); tests/net.rs self-skips without the gate.
      - run: cargo test --workspace --all-features

  # Network-gated integration tests (tests/net.rs): clone a public repo over HTTPS
  # (no ssh) and run logoff. Kept off the 3-OS matrix so it stays hermetic/fast;
  # runs ubuntu-only with the gate set. Needs no secrets (public repo).
  net-tests:
    name: net tests (ubuntu, gated)
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: dtolnay/rust-toolchain@stable
      - uses: Swatinem/rust-cache@v2
      - run: cargo test -p gkit --test net -- --nocapture
        env:
          GKIT_NET_TESTS: "1"