name: Release

on:
  push:
    branches:
      - master
      - dev

env:
  JAVA_VERSION: "17"
  ANDROID_SDK_ROOT: "${{ github.workspace }}/android-sdk"
  FLUTTER_VERSION: "3.22.2"
  BUILD_WINDOWS: "false" # set to "true" when you actually want Windows builds
  GITEA_BASE_URL: https://git.tgj.services

jobs:
  meta:
    runs-on: ubuntu-latest
    outputs:
      base_version: ${{ steps.meta.outputs.base }}
    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Determine version
        id: meta
        run: |
          RAW_VERSION=$(awk '/^version:/{print $2}' pubspec.yaml)
          BASE_VERSION=${RAW_VERSION%%+*}
          echo "base=${BASE_VERSION}" >> "$GITHUB_OUTPUT"

  android-build:
    runs-on: ubuntu-latest
    needs: meta
    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Install OS deps (Android)
        run: |
          if command -v sudo >/dev/null 2>&1; then
            SUDO="sudo"
          else
            SUDO=""
          fi
          $SUDO apt-get update
          $SUDO apt-get install -y unzip xz-utils zip libstdc++6 liblzma-dev curl jq

      - name: Setup Java
        uses: actions/setup-java@v4
        with:
          distribution: temurin
          java-version: ${{ env.JAVA_VERSION }}

      - name: Install Android SDK
        run: |
          mkdir -p "$ANDROID_SDK_ROOT"/cmdline-tools
          curl -fsSL https://dl.google.com/android/repository/commandlinetools-linux-11076708_latest.zip -o /tmp/cli-tools.zip
          unzip -q /tmp/cli-tools.zip -d "$ANDROID_SDK_ROOT"/cmdline-tools
          mv "$ANDROID_SDK_ROOT"/cmdline-tools/cmdline-tools "$ANDROID_SDK_ROOT"/cmdline-tools/latest

          # Accept licences (ignore SIGPIPE exit 141)
          yes | "$ANDROID_SDK_ROOT"/cmdline-tools/latest/bin/sdkmanager --sdk_root="$ANDROID_SDK_ROOT" --licenses || true

          # Install required packages (also ignore SIGPIPE)
          yes | "$ANDROID_SDK_ROOT"/cmdline-tools/latest/bin/sdkmanager --sdk_root="$ANDROID_SDK_ROOT" \
            "platform-tools" "platforms;android-33" "build-tools;33.0.2" || true

          echo "ANDROID_SDK_ROOT=$ANDROID_SDK_ROOT" >> "$GITHUB_ENV"
          echo "$ANDROID_SDK_ROOT/platform-tools" >> "$GITHUB_PATH"
          echo "$ANDROID_SDK_ROOT/build-tools/33.0.2" >> "$GITHUB_PATH"

      - name: Install Flutter SDK
        run: |
          set -euo pipefail
          FLUTTER_HOME="$HOME/flutter"
          if [ ! -x "$FLUTTER_HOME/bin/flutter" ]; then
            rm -rf "$FLUTTER_HOME"
            curl -fsSL -o /tmp/flutter.tar.xz "https://storage.googleapis.com/flutter_infra_release/releases/stable/linux/flutter_linux_${FLUTTER_VERSION}-stable.tar.xz"
            tar -C "$HOME" -xf /tmp/flutter.tar.xz
          fi
          echo "$FLUTTER_HOME/bin" >> "$GITHUB_PATH"
          "$FLUTTER_HOME/bin/flutter" --version

      - name: Allow all git directories (CI)
        run: git config --global --add safe.directory '*'

      - name: Cache pub packages
        uses: actions/cache@v3
        with:
          path: ~/.pub-cache
          key: flutter-pub-${{ runner.os }}-${{ hashFiles('pubspec.lock') }}
          restore-keys: |
            flutter-pub-${{ runner.os }}-

      - name: Cache Gradle
        uses: actions/cache@v3
        with:
          path: |
            ~/.gradle/caches
            ~/.gradle/wrapper
          key: gradle-${{ runner.os }}-${{ hashFiles('android/**/*.gradle*', 'android/**/*.properties') }}
          restore-keys: |
            gradle-${{ runner.os }}-

      - name: Flutter dependencies
        run: flutter pub get

      - name: Prepare Android keystore (optional)
        if: ${{ secrets.ANDROID_KEYSTORE_BASE64 != '' }}
        run: |
          echo "${{ secrets.ANDROID_KEYSTORE_BASE64 }}" | base64 -d > android-release-key.jks
          echo "ANDROID_KEYSTORE_PATH=$PWD/android-release-key.jks" >> "$GITHUB_ENV"
          echo "ANDROID_KEYSTORE_PASSWORD=${{ secrets.ANDROID_KEYSTORE_PASSWORD }}" >> "$GITHUB_ENV"
          echo "ANDROID_KEY_ALIAS=${{ secrets.ANDROID_KEY_ALIAS }}" >> "$GITHUB_ENV"
          echo "ANDROID_KEY_PASSWORD=${{ secrets.ANDROID_KEY_PASSWORD }}" >> "$GITHUB_ENV"

      - name: Build Android App Bundle (release)
        run: flutter build appbundle --release

      - name: Download bundletool
        run: |
          BUNDLETOOL_VERSION=1.15.6
          curl -fsSL -o bundletool.jar "https://github.com/google/bundletool/releases/download/${BUNDLETOOL_VERSION}/bundletool-all-${BUNDLETOOL_VERSION}.jar"

      - name: Extract universal APK from bundle
        env:
          BASE_VERSION: ${{ needs.meta.outputs.base_version }}
        run: |
          set -euo pipefail

          BUNDLE="build/app/outputs/bundle/release/app-release.aab"
          OUTPUT_APKS="app-release.apks"
          APK_NAME="mileograph-${BASE_VERSION}.apk"

          if [ ! -f "$BUNDLE" ]; then
            echo "Bundle not found at $BUNDLE"
            exit 1
          fi

          SIGNING_ARGS=()
          if [ -n "${ANDROID_KEYSTORE_PATH:-}" ] && [ -f "$ANDROID_KEYSTORE_PATH" ]; then
            SIGNING_ARGS+=(--ks="$ANDROID_KEYSTORE_PATH")
            SIGNING_ARGS+=(--ks-pass="pass:${ANDROID_KEYSTORE_PASSWORD}")
            SIGNING_ARGS+=(--ks-key-alias="${ANDROID_KEY_ALIAS}")
            KEY_PASS="${ANDROID_KEY_PASSWORD:-$ANDROID_KEYSTORE_PASSWORD}"
            SIGNING_ARGS+=(--key-pass="pass:${KEY_PASS}")
          else
            echo "No release keystore provided; bundletool will sign with the debug keystore."
          fi

          java -jar bundletool.jar build-apks \
            --bundle="$BUNDLE" \
            --output="$OUTPUT_APKS" \
            --mode=universal \
            "${SIGNING_ARGS[@]}"

          unzip -p "$OUTPUT_APKS" universal.apk > "$APK_NAME"
          ls -lh "$APK_NAME"

      - name: Upload Android APK artifact
        uses: actions/upload-artifact@v3
        with:
          name: android-apk
          path: mileograph-${{ needs.meta.outputs.base_version }}.apk

  linux-build:
    runs-on: ubuntu-latest
    needs: meta
    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Install OS deps (Linux desktop)
        run: |
          if command -v sudo >/dev/null 2>&1; then
            SUDO="sudo"
          else
            SUDO=""
          fi
          $SUDO apt-get update
          $SUDO apt-get install -y unzip xz-utils zip libstdc++6 libglu1-mesa clang cmake ninja-build pkg-config libgtk-3-dev libsecret-1-dev liblzma-dev curl jq

      - name: Install Flutter SDK
        run: |
          set -euo pipefail
          FLUTTER_HOME="$HOME/flutter"
          if [ ! -x "$FLUTTER_HOME/bin/flutter" ]; then
            rm -rf "$FLUTTER_HOME"
            curl -fsSL -o /tmp/flutter.tar.xz "https://storage.googleapis.com/flutter_infra_release/releases/stable/linux/flutter_linux_${FLUTTER_VERSION}-stable.tar.xz"
            tar -C "$HOME" -xf /tmp/flutter.tar.xz
          fi
          echo "$FLUTTER_HOME/bin" >> "$GITHUB_PATH"
          "$FLUTTER_HOME/bin/flutter" --version

      - name: Allow all git directories (CI)
        run: git config --global --add safe.directory '*'

      - name: Cache pub packages
        uses: actions/cache@v3
        with:
          path: ~/.pub-cache
          key: flutter-pub-${{ runner.os }}-${{ hashFiles('pubspec.lock') }}
          restore-keys: |
            flutter-pub-${{ runner.os }}-

      - name: Flutter dependencies
        run: flutter pub get

      - name: Enable Linux desktop
        run: flutter config --enable-linux-desktop

      - name: Build Linux binary (release)
        run: |
          flutter build linux --release
          tar -C build/linux/x64/release/bundle -czf app-linux-x64.tar.gz .

      - name: Upload Linux artifact
        uses: actions/upload-artifact@v3
        with:
          name: linux-bundle
          path: app-linux-x64.tar.gz

  release-dev:
    runs-on: ubuntu-latest
    needs:
      - meta
      - android-build
      - linux-build
    steps:
      - name: Install jq
        run: |
          if command -v sudo >/dev/null 2>&1; then
            SUDO="sudo"
          else
            SUDO=""
          fi
          $SUDO apt-get update
          $SUDO apt-get install -y jq
      - name: Download Android APK
        if: ${{ github.ref == 'refs/heads/dev' }}
        uses: actions/download-artifact@v3
        with:
          name: android-apk
          path: artifacts

      - name: Prepare APK and tag
        if: ${{ github.ref == 'refs/heads/dev' }}
        id: bundle
        run: |
          BASE="${{ needs.meta.outputs.base_version }}"
          TAG="v${BASE}-dev.${{ github.run_number }}"

          mv "artifacts/mileograph-${BASE}.apk" "artifacts/mileograph-${BASE}-dev.apk"

          echo "tag=${TAG}" >> "$GITHUB_OUTPUT"
          echo "apk=artifacts/mileograph-${BASE}-dev.apk" >> "$GITHUB_OUTPUT"

      - name: Create prerelease on Gitea
        if: ${{ github.ref == 'refs/heads/dev' }}
        uses: ncipollo/release-action@v1
        with:
          tag: ${{ steps.bundle.outputs.tag }}
          name: v${{ needs.meta.outputs.base_version }}-dev build ${{ github.run_number }}
          prerelease: true
          commit: ${{ github.sha }}
          token: ${{ secrets.GITEA_TOKEN }}
          # NOTE: no `artifacts:` here

      - name: Attach APK to Gitea release
        if: ${{ github.ref == 'refs/heads/dev' }}
        run: |
          set -euo pipefail

          TAG="${{ steps.bundle.outputs.tag }}"
          APK="${{ steps.bundle.outputs.apk }}"

          # 1. Find release ID by tag
          RELEASE_JSON=$(curl -sS \
            -H "Authorization: token ${{ secrets.GITEA_TOKEN }}" \
            "${GITEA_BASE_URL}/api/v1/repos/${{ github.repository }}/releases/tags/${TAG}")

          RELEASE_ID=$(echo "$RELEASE_JSON" | jq -r '.id')

          echo "Release ID: $RELEASE_ID"

          # 2. Upload APK with multipart/form-data
          NAME=$(basename "$APK")
          echo "Uploading $NAME"

          curl -sS -X POST \
            -H "Authorization: token ${{ secrets.GITEA_TOKEN }}" \
            -F "attachment=@${APK}" \
            -F "name=${NAME}" \
            "${GITEA_BASE_URL}/api/v1/repos/${{ github.repository }}/releases/${RELEASE_ID}/assets" \
            >/dev/null

  release-master:
    runs-on: ubuntu-latest
    needs:
      - meta
      - android-build
      - linux-build
    steps:
      - name: Install jq
        run: |
          if command -v sudo >/dev/null 2>&1; then
            SUDO="sudo"
          else
            SUDO=""
          fi
          $SUDO apt-get update
          $SUDO apt-get install -y jq
      - name: Download Android APK
        if: ${{ github.ref == 'refs/heads/master' }}
        uses: actions/download-artifact@v3
        with:
          name: android-apk
          path: artifacts

      - name: Prepare APK and tag
        if: ${{ github.ref == 'refs/heads/master' }}
        id: bundle
        run: |
          BASE="${{ needs.meta.outputs.base_version }}"
          TAG="v${BASE}"

          echo "tag=${TAG}" >> "$GITHUB_OUTPUT"
          echo "apk=artifacts/mileograph-${BASE}.apk" >> "$GITHUB_OUTPUT"

      - name: Create release on Gitea
        if: ${{ github.ref == 'refs/heads/master' }}
        uses: ncipollo/release-action@v1
        with:
          tag: ${{ steps.bundle.outputs.tag }}
          name: ${{ steps.bundle.outputs.tag }}
          prerelease: false
          token: ${{ secrets.GITEA_TOKEN }}
          commit: ${{ github.sha }}

      - name: Attach APK to Gitea release
        if: ${{ github.ref == 'refs/heads/master' }}
        run: |
          set -euo pipefail

          TAG="${{ steps.bundle.outputs.tag }}"
          APK="${{ steps.bundle.outputs.apk }}"

          # 1. Find release ID by tag
          RELEASE_JSON=$(curl -sS \
            -H "Authorization: token ${{ secrets.GITEA_TOKEN }}" \
            "${GITEA_BASE_URL}/api/v1/repos/${{ github.repository }}/releases/tags/${TAG}")

          RELEASE_ID=$(echo "$RELEASE_JSON" | jq -r '.id')

          echo "Release ID: $RELEASE_ID"

          # 2. Upload APK with multipart/form-data
          NAME=$(basename "$APK")
          echo "Uploading $NAME"

          curl -sS -X POST \
            -H "Authorization: token ${{ secrets.GITEA_TOKEN }}" \
            -F "attachment=@${APK}" \
            -F "name=${NAME}" \
            "${GITEA_BASE_URL}/api/v1/repos/${{ github.repository }}/releases/${RELEASE_ID}/assets" \
            >/dev/null