cipherocto/.github/workflows/rust.yml at main · CipherOcto/cipherocto · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
name: Rust CI

on:
  push:
    branches: [next, feat/**, agent/**, research/**, hotfix/**]
  pull_request:
    branches: [main, next]
  merge_group:

env:
  CARGO_TERM_COLOR: always
  RUST_BACKTRACE: 1

jobs:
  # Multi-platform test matrix
  test:
    name: Test (${{ matrix.os }}-${{ matrix.rust }})
    runs-on: ${{ matrix.os }}
    strategy:
      fail-fast: false
      matrix:
        os: [ubuntu-latest, macos-latest, windows-latest]
        rust: [stable, beta, nightly]

    steps:
      - uses: actions/checkout@v6

      - uses: dtolnay/rust-toolchain@stable
        with:
          toolchain: ${{ matrix.rust }}
          components: rustfmt, clippy

      - uses: swatinem/rust-cache@v2
        with:
          cache-on-failure: true

      - name: Build determin
        working-directory: determin
        run: cargo build --release --verbose

      - name: Build CLI
        working-directory: determin/cli
        run: cargo build --release --verbose

      - name: Run tests (release mode per RFC-0104)
        working-directory: determin
        run: cargo test --release --verbose

      - name: Format check
        working-directory: determin
        run: cargo fmt --all -- --check

      - name: Clippy
        working-directory: determin
        run: cargo clippy --all-targets --all-features -- -D warnings

  # Python cross-language verifier
  verifier:
    name: Cross-Language Verifier
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v6

      - uses: dtolnay/rust-toolchain@stable

      - uses: actions/setup-python@v6
        with:
          python-version: '3.11'

      - name: Build CLI
        working-directory: determin/cli
        run: cargo build --release

      - name: Run verifier
        working-directory: determin/verify
        run: |
          pip install -q -r requirements.txt 2>/dev/null || true
          python3 verifier.py --count 1000

      - name: Run production verifier (10,500 tests)
        working-directory: determin/verify
        run: python3 verify_vectors.py

  # Check MSRV (Minimum Supported Rust Version)
  msrv:
    name: Check MSRV
    runs-on: ubuntu-latest
    if: github.event_name == 'pull_request' || github.event_name == 'merge_group'

    steps:
      - uses: actions/checkout@v6

      - uses: dtolnay/rust-toolchain@master
        with:
          toolchain: "1.93.0"  # MSRV

      - uses: swatinem/rust-cache@v2

      - name: Check with MSRV
        working-directory: determin
        run: cargo check --verbose

  # Clippy on stable
  clippy:
    name: Clippy (stable)
    runs-on: ubuntu-latest

    steps:
      - uses: actions/checkout@v6

      - uses: dtolnay/rust-toolchain@stable
        with:
          components: clippy

      - uses: swatinem/rust-cache@v2

      - name: Clippy
        working-directory: determin
        run: cargo clippy --all-targets --all-features -- -D warnings