main.yml

name: Build
on:
  workflow_dispatch:
  push:
  pull_request:
    branches:
      - main
      - develop
      - master # for safety reasons
      - dev  # for safety reasons

jobs:
  configure:
    runs-on: ubuntu-latest
    outputs:
      uid_gid: ${{ steps.get-user.outputs.uid_gid }}
    steps:
      - id: get-user
        run: echo "uid_gid=$(id -u):$(id -g)" >> $GITHUB_OUTPUT

  build:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v4
        with:
          submodules: true
      - name: Install deps
        run: |
          python -m venv venv
          source venv/bin/activate
          make deps
      - run: make cpp_test

  build_only_rust:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v4
        with:
          submodules: true
      - name: Install rust
        uses: actions-rs/toolchain@v1
        with:
          toolchain: stable
      - name: rustfmt
        run: |
          cd ./app/rust
          cargo fmt --version
          cargo fmt -- --check
      - name: clippy
        run: |
          cd ./app/rust
          cargo clippy --version
          cargo clippy --all-features --all-targets || true
      - name: run tests
        run: |
          cd ./app/rust
          cargo test

  test_zemu:
    runs-on: ubuntu-latest
    steps:
      - name: Test
        run: |
          id
          echo $HOME
          echo $DISPLAY
      - name: Checkout
        uses: actions/checkout@v4
        with:
          submodules: true
      - run: sudo apt-get update -y && sudo apt-get install -y libusb-1.0.0 libudev-dev
      - name: Install rust
        uses: actions-rs/toolchain@v1
        with:
          toolchain: stable
      - name: Install node
        uses: actions/setup-node@v4
      - name: Install yarn
        run: |
          npm install -g yarn
      - name: Build and run zemu tests
        run: |
          make test_all
      - name: Upload Snapshots (only failure)
        if: ${{ failure() }}
        uses: actions/upload-artifact@v3
        with:
          name: snapshots-tmp
          path: tests_zemu/snapshots-tmp/

  build_ledger_light:
    needs: configure
    runs-on: ubuntu-latest
    container:
      image: zondax/ledger-app-builder:latest
      options: --user ${{ needs.configure.outputs.uid_gid }}
      env:
        BOLOS_SDK: /opt/nanos-secure-sdk
    outputs:
      size: ${{steps.build.outputs.size}}
    steps:
      - name: Checkout
        uses: actions/checkout@v4
        with:
          submodules: true
      - name: Build Light app
        id: build
        shell: bash -l {0}
        run: |
          SUBSTRATE_PARSER_FULL=0 make
          echo "size=$(python3 deps/ledger-zxlib/scripts/getSize.py s)" >> $GITHUB_OUTPUT
      - name: Build SR25519 app
        shell: bash -l {0}
        run: |
          SUBSTRATE_PARSER_FULL=0 SUPPORT_SR25519=1 make

  size_nano_s:
    needs: build_ledger_light
    runs-on: ubuntu-latest
    env:
      NANOS_LIMIT_SIZE: 136
    steps:
      - run: |
          echo "LNS app size: ${{needs.build_ledger_light.outputs.size}} KiB"
          [ ${{needs.build_ledger_light.outputs.size}} -le $NANOS_LIMIT_SIZE ]

  build_package_nanos:
    needs: [configure, build, build_ledger_light, test_zemu]
    if: ${{ github.ref == 'refs/heads/main' }}
    runs-on: ubuntu-latest
    container:
      image: zondax/ledger-app-builder:latest
      options: --user ${{ needs.configure.outputs.uid_gid }}
      env:
        BOLOS_SDK: /opt/nanos-secure-sdk
    steps:
      - name: Checkout
        uses: actions/checkout@v4
        with:
          submodules: true
      - name: Install deps
        run: pip install ledgerblue

      - name: Build NanoS
        shell: bash -l {0}
        run: |
          make SUBSTRATE_PARSER_FULL=0 PRODUCTION_BUILD=0
          mv ./app/pkg/installer_s.sh ./app/pkg/installer_nanos.sh
      - name: Set tag
        id: nanos_light
        run: echo "tag_name=$(./app/pkg/installer_nanos.sh version)" >> $GITHUB_OUTPUT
      - name: Create or Update Release (1)
        id: create_release_0
        uses: softprops/action-gh-release@v1
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} # This token is provided by Actions, you do not need to create your own token
        with:
          files: ./app/pkg/installer_nanos.sh
          tag_name: ${{ steps.nanos_light.outputs.tag_name }}
          draft: false
          prerelease: false


#  Comment out nanoS XL build, the device is not supported anymore due to the size limit.
#  The github workflow for the latest supported version is running in nanos.yml

#    build_ledger_xl:
#      needs: configure
#      runs-on: ubuntu-latest
#      container:
#        image: zondax/ledger-app-builder:latest
#        options: --user ${{ needs.configure.outputs.uid_gid }}
#        env:
#          BOLOS_SDK: /opt/nanos-secure-sdk
#      outputs:
#        size: ${{steps.build.outputs.size}}
#      steps:
#        - name: Checkout
#          uses: actions/checkout@v4
#          with:
#            submodules: true
#        - name: Build XL app
#          id: build
#          shell: bash -l {0}
#          run: |
#            SUBSTRATE_PARSER_FULL=1 make
#            echo "size=$(python3 deps/ledger-zxlib/scripts/getSize.py s)" >> $GITHUB_OUTPUT
#        - name: Build SR25519 app
#          shell: bash -l {0}
#          run: |
#            SUBSTRATE_PARSER_FULL=1 SUPPORT_SR25519=1 make
#
#
#  size_nano_s_xl:
#    needs: build_ledger_xl
#    runs-on: ubuntu-latest
#    env:
#      NANOS_LIMIT_SIZE: 136
#    steps:
#      - run: |
#          echo "LNS app size: ${{needs.build_ledger_xl.outputs.size}} KiB"
#          [ ${{needs.build_ledger_xl.outputs.size}} -le $NANOS_LIMIT_SIZE ]

#  build_package_nanos_xl:
#    needs: [configure, build, build_ledger_xl, test_zemu, size_nano_s_xl]
#    if: ${{ github.ref == 'refs/heads/main' }}
#    runs-on: ubuntu-latest
#    container:
#      image: zondax/ledger-app-builder:latest
#      options: --user ${{ needs.configure.outputs.uid_gid }}
#      env:
#        BOLOS_SDK: /opt/nanos-secure-sdk
#    steps:
#      - name: Checkout
#        uses: actions/checkout@v4
#        with:
#          submodules: true
#      - name: Install deps
#        run: pip install ledgerblue
#
#      - name: Build NanoS XL
#        shell: bash -l {0}
#        run: |
#          make SUBSTRATE_PARSER_FULL=1 PRODUCTION_BUILD=0
#          mv ./app/pkg/installer_s.sh ./app/pkg/installer_nanos_xl.sh
#      - name: Set tag
#        id: nanos_xl
#        run: echo "tag_name=$(./app/pkg/installer_nanos_xl.sh version)" >> $GITHUB_OUTPUT
#      - name: Update Release
#        id: update_release_1
#        uses: softprops/action-gh-release@v1
#        env:
#          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} # This token is provided by Actions, you do not need to create your own token
#        with:
#          files: ./app/pkg/installer_nanos_xl.sh
#          tag_name: ${{ steps.nanos_xl.outputs.tag_name }}
#          draft: false
#          prerelease: false

  build_package_nanosp:
    needs: [configure, build, build_ledger_light, test_zemu]
    if: ${{ github.ref == 'refs/heads/main' }}
    runs-on: ubuntu-latest
    container:
      image: zondax/ledger-app-builder:latest
      options: --user ${{ needs.configure.outputs.uid_gid }}
      env:
        BOLOS_SDK: /opt/nanosplus-secure-sdk
    steps:
      - name: Checkout
        uses: actions/checkout@v4
        with:
          submodules: true
      - name: Install deps
        run: pip install ledgerblue

      - name: Build NanoSP
        shell: bash -l {0}
        run: |
          make SUBSTRATE_PARSER_FULL=1 PRODUCTION_BUILD=0
          mv ./app/pkg/installer_s2.sh ./app/pkg/installer_nanos_plus.sh
      - name: Set tag
        id: nanosp
        run: echo "tag_name=$(./app/pkg/installer_nanos_plus.sh version)" >> $GITHUB_OUTPUT
      - name: Update Release
        id: update_release_2
        uses: softprops/action-gh-release@v1
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} # This token is provided by Actions, you do not need to create your own token
        with:
          files: ./app/pkg/installer_nanos_plus.sh
          tag_name: ${{ steps.nanosp.outputs.tag_name }}
          draft: false
          prerelease: false

  build_package_stax:
    needs: [configure, build, build_ledger_light, test_zemu]
    if: ${{ github.ref == 'refs/heads/main' }}
    runs-on: ubuntu-latest
    container:
      image: zondax/ledger-app-builder:latest
      options: --user ${{ needs.configure.outputs.uid_gid }}
      env:
        BOLOS_SDK: /opt/stax-secure-sdk
    steps:
      - name: Checkout
        uses: actions/checkout@v4
        with:
          submodules: true
      - name: Install deps
        run: pip install ledgerblue

      - name: Build Stax
        shell: bash -l {0}
        run: make SUBSTRATE_PARSER_FULL=1 PRODUCTION_BUILD=0
      - name: Set tag
        id: stax
        run: echo "tag_name=$(./app/pkg/installer_stax.sh version)" >> $GITHUB_OUTPUT
      - name: Update Release
        id: update_release_2
        uses: softprops/action-gh-release@v1
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} # This token is provided by Actions, you do not need to create your own token
        with:
          files: ./app/pkg/installer_stax.sh
          tag_name: ${{ steps.stax.outputs.tag_name }}
          draft: false
          prerelease: false

  build_package_flex:
    needs: [configure, build, build_ledger_light, test_zemu]
    if: ${{ github.ref == 'refs/heads/main' }}
    runs-on: ubuntu-latest
    container:
      image: zondax/ledger-app-builder:latest
      options: --user ${{ needs.configure.outputs.uid_gid }}
      env:
        BOLOS_SDK: /opt/flex-secure-sdk
    steps:
      - name: Checkout
        uses: actions/checkout@v4
        with:
          submodules: true
      - name: Install deps
        run: pip install ledgerblue

      - name: Build Flex
        shell: bash -l {0}
        run: make SUBSTRATE_PARSER_FULL=1 PRODUCTION_BUILD=0
      - name: Set tag
        id: flex
        run: echo "tag_name=$(./app/pkg/installer_flex.sh version)" >> $GITHUB_OUTPUT
      - name: Update Release
        id: update_release_2
        uses: softprops/action-gh-release@v1
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} # This token is provided by Actions, you do not need to create your own token
        with:
          files: ./app/pkg/installer_flex.sh
          tag_name: ${{ steps.flex.outputs.tag_name }}
          draft: false
          prerelease: false