build.yml

name: PR Checks

defaults:
    run:
        shell: bash

permissions:
    contents: read

on:
    pull_request:
        branches:
            - main
    push:
        branches:
            - main
concurrency:
  group: ${{ github.workflow }}-${{ github.head_ref || github.run_id }}
  cancel-in-progress: true

env:
    GO_VERSION: "1.25.7"
    NODE_VERSION: "22"
    HIERO_VERSION: v0.73.0
    MIRROR_NODE_VERSION: v0.153.0
    SOLO_VERSION: v0.69.0
    HEDERA_NETWORK: localhost

jobs:
    build:
        name: Build
        runs-on: hiero-client-sdk-linux-medium
        steps:
            - name: Harden Runner
              uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4
              with:
                egress-policy: audit

            - name: Setup GCC
              run: |
                sudo apt-get update
                sudo apt-get install -y --no-install-recommends gcc libc6-dev libc-dev

            - name: Set up Go ${{ env.GO_VERSION }}
              uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
              with:
                  go-version: ${{ env.GO_VERSION }}
              id: go

            - name: Check out code into the Go module directory
              uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3

            - name: Tidy SDK Modules
              run: go mod tidy
              working-directory: ./

            - name: Lint
              uses: golangci/golangci-lint-action@82606bf257cbaff209d206a39f5134f0cfbfd2ee # v9.2.1
              with:
                  skip-cache: true
                  args: --timeout=5m

            - name: Build SDK and Examples
              run: go build -v ./...

    test:
        name: Unit and Integration Tests
        if: success()
        runs-on: hiero-client-sdk-linux-medium

        needs:
            - build

        strategy:
          matrix:
            test-type: [unit, e2e]

        steps:
            - name: Harden Runner
              uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4
              with:
                  egress-policy: audit

            - name: Setup NodeJS
              uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
              with:
                node-version: ${{ env.NODE_VERSION }}

            - name: Setup GCC
              run: |
                sudo apt-get update
                sudo apt-get install -y --no-install-recommends gcc libc6-dev libc-dev

            - name: Set up Go ${{ env.GO_VERSION }}
              uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
              with:
                  go-version: ${{ env.GO_VERSION }}
              id: go

            - name: Check out code into the Go module directory
              uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3

            - name: Prepare Hiero Solo
              if: success() && matrix.test-type == 'e2e'
              id: solo
              uses: hiero-ledger/hiero-solo-action@328bc84c3b00a990a151418144fd682a4eb76ea6 # v0.19.0
              with:
                installMirrorNode: true
                hieroVersion: ${{ env.HIERO_VERSION }}
                mirrorNodeVersion: ${{ env.MIRROR_NODE_VERSION }}
                soloVersion: ${{ env.SOLO_VERSION }}

            - name: Set Operator Account
              if: success() && matrix.test-type == 'e2e'
              run: |
                echo "OPERATOR_KEY=${{ steps.solo.outputs.ed25519PrivateKey }}" >> $GITHUB_ENV
                echo "OPERATOR_ID=${{ steps.solo.outputs.ed25519AccountId }}" >> $GITHUB_ENV

            - name: Tests Unit
              if: success() && matrix.test-type == 'unit'
              run: go test ./sdk -tags="unit" -timeout 9999s -v -coverprofile=unit.out -covermode=atomic -race

            - name: Tests Integration
              if: success() && matrix.test-type == 'e2e'
              run: go test ./sdk -tags="e2e" -timeout 9999s -v -coverprofile=e2e.out -covermode=atomic -race

            - name: Upload unit test coverage to Codecov
              if: success() && matrix.test-type == 'unit'
              uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f # v7.0.0
              with:
                token: ${{ secrets.CODECOV_TOKEN }}
                files: ./unit.out

            - name: Upload e2e test coverage to Codecov
              if: success() && matrix.test-type == 'e2e'
              uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f # v7.0.0
              with:
                token: ${{ secrets.CODECOV_TOKEN }}
                files: ./e2e.out

    test-dab:
        name: DAB Tests
        if: success()
        runs-on: hiero-client-sdk-linux-medium

        needs:
            - build

        steps:
            - name: Harden Runner
              uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4
              with:
                egress-policy: audit

            - name: Setup NodeJS
              uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
              with:
                node-version: ${{ env.NODE_VERSION }}

            - name: Setup GCC
              run: |
                sudo apt-get update
                sudo apt-get install -y --no-install-recommends gcc libc6-dev libc-dev

            - name: Set up Go ${{ env.GO_VERSION }}
              uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
              with:
                  go-version: ${{ env.GO_VERSION }}
              id: go

            - name: Check out code into the Go module directory
              uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3

            - name: Prepare Hiero Solo
              id: solo
              uses: hiero-ledger/hiero-solo-action@328bc84c3b00a990a151418144fd682a4eb76ea6 # v0.19.0
              with:
                installMirrorNode: true
                hieroVersion: ${{ env.HIERO_VERSION }}
                mirrorNodeVersion: ${{ env.MIRROR_NODE_VERSION }}
                soloVersion: ${{ env.SOLO_VERSION }}
                dualMode: true

            - name: Set Operator Account
              run: |
                echo "OPERATOR_KEY=${{ steps.solo.outputs.ed25519PrivateKey }}" >> $GITHUB_ENV
                echo "OPERATOR_ID=${{ steps.solo.outputs.ed25519AccountId }}" >> $GITHUB_ENV

            - name: Tests DAB
              run: go test ./sdk -tags="dab" -timeout 9999s -v -coverprofile=dab.out -covermode=atomic -race

            - name: Upload dab test coverage to Codecov
              if: success()
              uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f # v7.0.0
              with:
                token: ${{ secrets.CODECOV_TOKEN }}
                files: ./dab.out

    run-examples:
        name: Run Examples
        if: success()
        runs-on: hiero-client-sdk-linux-medium

        needs:
            - build

        steps:
            - name: Harden Runner
              uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4
              with:
                  egress-policy: audit

            - name: Setup NodeJS
              uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
              with:
                node-version: ${{ env.NODE_VERSION }}

            - name: Setup GCC
              run: |
                sudo apt-get update
                sudo apt-get install -y --no-install-recommends gcc libc6-dev libc-dev

            - name: Set up Go ${{ env.GO_VERSION }}
              uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
              with:
                  go-version: ${{ env.GO_VERSION }}
              id: go

            - name: Check out code into the Go module directory
              uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3

            - name: Install Task
              run: go install github.com/go-task/task/v3/cmd/task@v3.17.0

            - name: Prepare Hiero Solo
              id: solo
              uses: hiero-ledger/hiero-solo-action@328bc84c3b00a990a151418144fd682a4eb76ea6 # v0.19.0
              with:
                installMirrorNode: true
                hieroVersion: ${{ env.HIERO_VERSION }}
                mirrorNodeVersion: ${{ env.MIRROR_NODE_VERSION }}
                soloVersion: ${{ env.SOLO_VERSION }}

            - name: Set Operator Account
              run: |
                echo "OPERATOR_KEY=${{ steps.solo.outputs.ed25519PrivateKey }}" >> $GITHUB_ENV
                echo "OPERATOR_ID=${{ steps.solo.outputs.ed25519AccountId }}" >> $GITHUB_ENV

            - name: Run Examples
              if: success()
              run: task run-examples

    build-test-tck:
        name: Build and Test TCK
        runs-on: hiero-client-sdk-linux-medium
        steps:
            - name: Harden Runner
              uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4
              with:
                egress-policy: audit

            - name: Setup GCC
              run: |
                sudo apt-get update
                sudo apt-get install -y --no-install-recommends gcc libc6-dev libc-dev

            - name: Set up Go ${{ env.GO_VERSION }}
              uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
              with:
                  go-version: ${{ env.GO_VERSION }}
              id: go

            - name: Check out code into the Go module directory
              uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3

            - name: Tidy TCK Modules
              run: go mod tidy
              working-directory: ./tck

            - name: Build TCK
              run: go build -v ./...
              working-directory: ./tck 

            - name: Lint TCK
              uses: golangci/golangci-lint-action@82606bf257cbaff209d206a39f5134f0cfbfd2ee # v9.2.1
              with:
                  skip-cache: true
                  args: --timeout=5m   
                  working-directory: ./tck