rust.yml

name: "cargo"
on:
  workflow_dispatch:
  push:
    branches:
      - master

env:
  CARGO_TERM_COLOR: always
jobs:
  bindgen:
    defaults:
      run:
        shell: powershell
    strategy:
      matrix:
        os: [windows-11-preview_aarch64, windows-2025]
        target: [aarch64-pc-windows-msvc, x86_64-pc-windows-msvc, i686-pc-windows-msvc]
        exclude:
          - os: windows-11-preview_aarch64
            target: x86_64-pc-windows-msvc
          - os: windows-11-preview_aarch64
            target: i686-pc-windows-msvc
          - os: windows-2025
            target: aarch64-pc-windows-msvc
    runs-on: ${{ matrix.os }}
    steps:
    - if: matrix.os == 'windows-11-preview_aarch64'
      uses: robinraju/release-downloader@v1
      with:
        repository: 'llvm/llvm-project'
        tag: 'llvmorg-19.1.5'
        filename: 'LLVM-19.1.5-woa64.exe'
    - if: matrix.os == 'windows-11-preview_aarch64'
      uses: robinraju/release-downloader@v1
      with:
        repository: 'git-for-windows/git'
        tag: 'v2.48.0-rc2.windows.1'
        filename: 'Git-2.48.0-rc2-arm64.exe'
    - name: Install Build Tools
      if: matrix.os == 'windows-11-preview_aarch64'
      run: |
        Set-ExecutionPolicy Bypass -Scope Process -Force
        [System.Net.ServicePointManager]::SecurityProtocol = [System.Net.ServicePointManager]::SecurityProtocol -bor 3072
      
        function Log { param([string]$Message, [string]$Level = "INFO")
          $timestamp = Get-Date -Format 'yyyy-MM-dd HH:mm:ss'
          if ($Level -eq "ERROR") {
            Write-Host "$timestamp [ERROR] - $Message" -ForegroundColor Red
          } else {
            Write-Host "$timestamp [$Level] - $Message"
          }
        }

        $deps = @(
          @{ Name = 'Visual Studio 2022 Build Tools (aarch64)'; Hash = $null;
            Url = 'https://aka.ms/vs/17/release/vs_buildtools.exe';
            Args = @('--add', 'Microsoft.VisualStudio.Component.VC.Tools.ARM64',
                     '--add', 'Microsoft.VisualStudio.Component.Windows11SDK.22621',
                     '--quiet', '--wait', '--norestart', '--nocache') },
          @{ Name = 'Git 2.48.0-rc1'; 
            Url = "${{github.workspace}}/Git-2.48.0-rc2-arm64.exe";
            Hash = '712739bb49832d571732e3e74b111d7cb4a63cd622ef3e87d01efe35046d9a4f';
            Args = @('/VERYSILENT', '/GitAndUnixToolsOnPath', '/NoAutoCrlf') },
          @{ Name = 'LLVM 19.1.5'; 
            Url = "${{github.workspace}}/LLVM-19.1.5-woa64.exe";
            Hash = '63D479C19C3908F8C973331EDC9B576485EAB6AB0809F58C79DF5D209FDD8F96';
            Args = @('/S') },
          @{ Name = 'Rust (nightly, aarch64)';
            Url = 'https://static.rust-lang.org/rustup/dist/aarch64-pc-windows-msvc/rustup-init.exe';
            Hash = 'https://static.rust-lang.org/rustup/dist/aarch64-pc-windows-msvc/rustup-init.exe.sha256';
            Args = @('--default-host', 'aarch64-pc-windows-msvc', '--default-toolchain', 'nightly', '-y') }
        )
        
        $deps | ForEach-Object {
          $dep = $_
          if ($dep.Url -match "^https?://") {
            Log "Downloading $($dep.Name) from '$($dep.Url)'..."
            $install_file = Join-Path "${{ github.workspace }}" (Split-Path $dep.Url -Leaf)
            Invoke-WebRequest -Uri $dep.Url -OutFile $install_file
          } elseif ($dep.Url -ne $null) {
            Log "Using local files from '$($dep.Url)'..."
            $install_file = $dep.Url
          }

          if ($dep.Hash -ne $null) {
            $expected_hash = if ($dep.Hash -like "*.sha256") {
              $hash_file = Join-Path '${{ github.workspace }}' (Split-Path $dep.Hash -Leaf)
              Invoke-WebRequest -Uri $dep.Hash -OutFile $hash_file
              (Get-Content -Path $hash_file).Trim()
            } else {
              $dep.Hash
            }

            $downloaded_hash = (Get-FileHash -Path $install_file -Algorithm SHA256).Hash
            if ($downloaded_hash -eq $expected_hash) {
              Log "Hash verified successfully."
            } else {
              Log "Hash mismatch for $($dep.Name). Expected: $expected_hash, Got: $downloaded_hash" -Level "ERROR"
            }
          } else {
            Log "No hash specified, skipping verification."
          }

          Log "Installing $($dep.Name)..."
          Start-Process -FilePath $install_file -ArgumentList $dep.Args -NoNewWindow -Wait
          Log "$($dep.Name) installation completed."
        }
        
        $paths = @(
          "$env:ProgramFiles\Git\cmd",       # Git
          "$env:ProgramFiles\Git\bin",       # Bash
          "$env:ProgramData\chocolatey\bin", # Chocolatey
          "$env:USERPROFILE\.cargo\bin"      # Rust
        )

        $paths | ForEach-Object  {
          Add-Content -Path $env:GITHUB_PATH -Value "$($_)" -Encoding utf8
          Log "Added $_ to `$GITHUB_PATH"
        }

    - name: Install Rust
      if: matrix.os != 'windows-11-preview_aarch64'
      uses: dtolnay/rust-toolchain@nightly
      with:
        targets: ${{ matrix.target }}
        components: rustfmt
    
    - name: Checkout repository
      uses: actions/checkout@v4
      with:
        submodules: 'recursive'

    - name: Run tests and generate bindings
      env:
        PHNT_VERSION: PHNT_WIN11_24H2
        PHNT_MODE: PHNT_MODE_USER
      run: |
        cargo test --release -vv -F regenerate --target ${{ matrix.target }}
        
    - name: Extract architecture from target triple and move bindings
      run: |
        $arch = '${{ matrix.target }}' -split '-' | Select-Object -First 1
        $arch = if ($arch -eq 'i686') { 'x86' } else { $arch }
        Add-Content -Path $env:GITHUB_ENV -Value "ARCH=$arch"
        
        $output = Get-ChildItem -Path "target/${{ matrix.target }}/release/build/**/$($arch)_bindgen.rs" -Recurse | Select-Object -First 1
        Copy-Item -Path $output.FullName -Destination "src/ffi/$($arch)_bindgen.rs"
        Write-Host "$(Get-Date -Format 'yyyy-MM-dd HH:mm:ss') [INFO] - Moved $output to src/ffi/$($arch)_bindgen.rs"

    - name: Upload generated file as artifact
      uses: actions/upload-artifact@v4
      with:
        name: ${{ env.ARCH }}_bindgen.rs
        path: src/ffi/${{ env.ARCH }}_bindgen.rs
        
  commit-and-push:
    runs-on: ubuntu-latest
    needs: bindgen
    if: success() # Run only if the generate-bindgen job succeeds
    steps:
      - name: Checkout repository
        uses: actions/checkout@v4
        
      - name: Download generated files
        uses: actions/download-artifact@v4
        with:
          pattern: "*bindgen.rs"
          path: src/ffi
          merge-multiple: true
          
      - name: Commit and push changes
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        run: |
          git config user.name "github-actions[bot]"
          git config user.email "41898282+github-actions[bot]@users.noreply.github.com"

          git add src/ffi

          # Check if there are any changes to commit
          if git diff --quiet --exit-code --cached; then
            echo "No changes to commit."
          else
            git commit -m "chore: update vendored bindings"
            git push --force
          fi