name: CI

on:
  push:
    branches:
      - main
    tags:
      - "*"
  pull_request:

jobs:
  build-in-nix-devshell:
    name: Build in Nix devShell
    runs-on: ubuntu-latest

    strategy:
      fail-fast: false
      matrix:
        package:
          - with-nixpkgs
          - with-opam-nix

    steps:
      - name: Check out repository code.
        uses: actions/checkout@v4
        with:
          submodules: true

      - name: Setup Nix
        uses: ./.github/composites/setup-nix
        with:
          githubAccessToken: ${{ secrets.GITHUB_TOKEN }}
          cachixAuthToken: ${{ secrets.CACHIX_AUTH_TOKEN }}

      - name: Install dependencies
        run: |
          nix develop .#${{ matrix.package }} --command true

      - name: Build
        run: |
          nix develop .#${{ matrix.package }} --command make

      - name: Build documentation
        run: |
          nix develop .#${{ matrix.package }} --command make doc

      - name: Run tests
        run: |
          nix develop .#${{ matrix.package }} --command make test

  build-with-nix:
    name: Build with Nix
    runs-on: ubuntu-latest

    strategy:
      fail-fast: false
      matrix:
        package:
          - with-nixpkgs
          - with-opam-nix

    steps:
      - name: Check out repository code.
        uses: actions/checkout@v4
        with:
          submodules: true

      - name: Setup Nix
        uses: ./.github/composites/setup-nix
        with:
          githubAccessToken: ${{ secrets.GITHUB_TOKEN }}
          cachixAuthToken: ${{ secrets.CACHIX_AUTH_TOKEN }}

      - name: Build
        run: |
          nix build .#${{ matrix.package }} --print-build-logs

  run-flake-checks:
    name: Run flake checks
    runs-on: ubuntu-latest

    steps:
      - name: Check out repository code.
        uses: actions/checkout@v4

      - name: Setup Nix
        uses: ./.github/composites/setup-nix
        with:
          githubAccessToken: ${{ secrets.GITHUB_TOKEN }}
          cachixAuthToken: ${{ secrets.CACHIX_AUTH_TOKEN }}

      - name: Run flake checks
        run: |
          nix flake check --print-build-logs
