MagicNet/.github/workflows/exec.yml at main · LIghtJUNction/MagicNet · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
name: Build Kam Module

on:
  workflow_dispatch:
    inputs:
      release:
        description: Create GitHub release and upload artifacts
        required: false
        type: boolean
        default: false
      prerelease:
        description: Mark GitHub release as a pre-release
        required: false
        type: boolean
        default: false
  push:
    branches:
      - main
  pull_request:

permissions:
  contents: write
  actions: read

concurrency:
  group: kam-build-${{ github.ref }}
  cancel-in-progress: true

env:
  FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true

jobs:
  build:
    runs-on: ubuntu-latest
    env:
      KAM_PRIVATE_KEY_AVAILABLE: ${{ secrets.KAM_PRIVATE_KEY != '' && '1' || '0' }}
      MAGICNET_SIGN_ENABLED: ${{ secrets.KAM_PRIVATE_KEY != '' && '1' || '0' }}
      MAGICNET_SIGN_REQUIRED: ${{ inputs.release == true && '1' || '0' }}
      KAM_CHANGELOG_ENABLED: '0'
      GH_TOKEN: ${{ github.token }}

    steps:
      - name: Checkout repository
        uses: actions/checkout@v6
        with:
          submodules: recursive
          fetch-depth: 0

      - name: Cache Cargo
        uses: actions/cache@v5
        with:
          path: |
            ~/.cargo/registry
            ~/.cargo/git
          key: ${{ runner.os }}-rust-${{ hashFiles('**/Cargo.lock') }}
          restore-keys: |
            ${{ runner.os }}-rust-

      - name: Setup kam
        uses: MemDeco-WG/setup-kam@v3
        with:
          github-token: ${{ github.token }}
          enable-cache: 'true'
          cache-targets: cargo,kam
          install-commitizen: 'false'
          private-key: ${{ secrets.KAM_PRIVATE_KEY }}

      - name: Install artifact tools
        run: sudo apt-get update && sudo apt-get install -y binutils file jq ripgrep unzip zip

      - name: Install Android Rust targets
        shell: bash
        run: |
          set -euo pipefail
          sysroot="$(rustc --print sysroot)"
          rm -rf \
            "${sysroot}/lib/rustlib/aarch64-linux-android" \
            "${sysroot}/lib/rustlib/x86_64-linux-android"
          rustup target add aarch64-linux-android x86_64-linux-android

      - name: Install Android cargo build tool
        run: cargo install cargo-ndk --locked

      - name: Verify tools
        shell: bash
        run: |
          set -euo pipefail
          kam --version
          gh --version
          cargo ndk --version

      - name: Build module
        shell: bash
        run: |
          set -euo pipefail
          find hooks src -type f -name '*.sh' -exec chmod +x {} + 2>/dev/null || true
          rm -rf dist
          kam build

      - name: Verify artifact contents
        shell: bash
        run: |
          set -euo pipefail
          module_id="$(sed -n 's/^id[[:space:]]*=[[:space:]]*"\(.*\)"/\1/p' kam.toml | head -n1)"
          test -n "$module_id"
          test -f "dist/${module_id}.zip"
          if [ "${MAGICNET_SIGN_ENABLED}" = "1" ]; then
            test -f "dist/${module_id}.zip.sig"
          fi
          unzip -Z1 "dist/${module_id}.zip" | grep -Fx 'module.prop'
          unzip -Z1 "dist/${module_id}.zip" | grep -Fx 'cli'
          unzip -Z1 "dist/${module_id}.zip" | grep -Fx 'bin/magicnet-cli'
          unzip -Z1 "dist/${module_id}.zip" | grep -Fx 'bin/magicnet-mcp-server'
          unzip -Z1 "dist/${module_id}.zip" | grep -Fx 'bin/sing-box'
          ! unzip -Z1 "dist/${module_id}.zip" | grep -E '(^|/)\.git($|/)'
          scripts/package-smoke.sh "dist/${module_id}.zip"
          scripts/package-install-smoke.sh "dist/${module_id}.zip"
          scripts/fake-magisk-smoke.sh "dist/${module_id}.zip"

      - name: Create GitHub release
        if: ${{ inputs.release == true }}
        shell: bash
        run: |
          set -euo pipefail
          args=(--all-assets)
          if [ "${{ inputs.prerelease }}" = "true" ]; then
            args+=(--prerelease)
          fi
          kam publish "${args[@]}"

      - name: Upload build artifact
        if: always() && hashFiles('dist/*') != ''
        uses: actions/upload-artifact@v7
        with:
          name: kam-module-artifact
          path: dist/*
          if-no-files-found: error