rhemify-monorepo/.github/workflows/ci.yml at a814d11450b55337f03e0cdb35236f5a58b05dfa · rhemify/rhemify-monorepo · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
name: CI

on:
  push:
    branches:
      - main
      - 'feature/**'
  pull_request:
    branches:
      - main

# Cancel in-progress runs on the same branch when a new push lands.
concurrency:
  group: ci-${{ github.ref }}
  cancel-in-progress: true

jobs:
  typescript:
    name: TypeScript (typecheck + SDK build)
    runs-on: ubuntu-latest
    timeout-minutes: 10
    steps:
      - uses: actions/checkout@v4

      - name: Setup Bun
        uses: oven-sh/setup-bun@v2
        with:
          bun-version: 1.3.11

      - name: Cache bun install
        uses: actions/cache@v4
        with:
          path: ~/.bun/install/cache
          key: ${{ runner.os }}-bun-${{ hashFiles('bun.lock', 'bun.lockb') }}
          restore-keys: |
            ${{ runner.os }}-bun-

      - name: Install dependencies
        run: bun install --frozen-lockfile

      # SDK build first so workspaces consuming @rhemify-monorepo/sdk via the
      # built dist/ (the package.json main field) don't typecheck against
      # stale artifacts. Same reason we rebuild locally between phases.
      - name: Build @rhemify-monorepo/sdk
        run: bun --cwd packages/sdk run build

      # Turborepo fan-out runs tsc across every workspace.
      - name: Type-check workspaces
        run: bun run check-types

  go-server:
    name: Go intelligence server (vet + build + test)
    runs-on: ubuntu-latest
    timeout-minutes: 10
    defaults:
      run:
        working-directory: apps/server
    steps:
      - uses: actions/checkout@v4

      - name: Setup Go
        uses: actions/setup-go@v5
        with:
          go-version: '1.24'
          cache: true
          cache-dependency-path: apps/server/go.sum

      - name: go mod download
        run: go mod download

      - name: go vet
        run: go vet ./...

      - name: go build
        run: go build ./...

      - name: go test
        run: go test ./...

  anchor-programs:
    name: Anchor programs (cargo check)
    runs-on: ubuntu-latest
    timeout-minutes: 15
    steps:
      - uses: actions/checkout@v4

      - name: Setup Rust toolchain
        uses: dtolnay/rust-toolchain@stable

      # Cache cargo registry + git + each program's target dir. Two crates,
      # both depend on anchor-lang 1.0 which has substantial transitive deps —
      # cold builds are ~5 min, cached compile is ~30s.
      - name: Cache cargo
        uses: actions/cache@v4
        with:
          path: |
            ~/.cargo/registry
            ~/.cargo/git
            programs/rhemify-anchor/target
            programs/rhemify-dwallet/target
          key: ${{ runner.os }}-cargo-anchor-${{ hashFiles('programs/**/Cargo.lock', 'programs/**/Cargo.toml') }}
          restore-keys: |
            ${{ runner.os }}-cargo-anchor-

      # cargo test runs check + builds tests + executes them on the host
      # target. SBF compile (cargo-build-sbf) is still a developer-machine
      # step before devnet deploy; that path stays out of CI to keep job
      # runtime under a minute on cache hit.
      #
      # Test surface today: PDA seed derivation invariants, squat defense
      # for the user-scoped seeds, program-ID pinning. See
      # programs/*/tests/pda_seeds.rs for what's covered. Full integration
      # tests against an SVM (Mollusk / litesvm) are a future chunk.
      - name: cargo test — rhemify-anchor
        working-directory: programs/rhemify-anchor
        run: cargo test --all-targets

      - name: cargo test — rhemify-dwallet
        working-directory: programs/rhemify-dwallet
        run: cargo test --all-targets