build-android-demos.yml

name: Build All Android Demos

on:
  workflow_dispatch:
  push:
    branches:
      - master
    paths:
      - 'demos/android/**'
  pull_request:
    branches:
      - master
    paths:
      - 'demos/**'
      - '.github/workflows/build-android-demos.yml'

jobs:
  generate-matrix:
    runs-on: ubuntu-latest
    outputs:
      matrix: ${{ steps.set-matrix.outputs.matrix }}

    steps:
      - name: Checkout repository
        uses: actions/checkout@v6
        with:
          sparse-checkout: demos/android
          fetch-depth: 0

      - name: Generate matrix
        id: set-matrix
        shell: bash
        run: |
          set -euo pipefail

          if [ "${{ github.event_name }}" = "pull_request" ]; then
            changed_files="$(git diff --name-only "${{ github.event.pull_request.base.sha }}" HEAD -- 'demos/android/**')"

            echo "Changed files:"
            echo "$changed_files"

            demos="$(echo "$changed_files" \
              | grep -oE '^demos/android/[^/]+/MASTG-DEMO-[^/]+' \
              | sort -u || true)"
          else
            demos="$(find demos/android -mindepth 2 -maxdepth 2 -type d -name 'MASTG-DEMO-*' | sort)"
          fi

          matrix="$(printf '%s\n' "$demos" \
            | jq -R 'select(length > 0)' \
            | jq -sc '{demo: .}')"

          echo "matrix=$matrix" >> "$GITHUB_OUTPUT"
          echo "Print matrix: $matrix"

      - name: Print matrix
        run: echo '${{ steps.set-matrix.outputs.matrix }}'

  build-base-app:
    runs-on: ubuntu-latest
    timeout-minutes: 10
    outputs:
      mastestapp_hash: ${{ steps.get-mastestapp-hash.outputs.mastestapp_hash }}

    steps:
      - name: Get last commit hash of mas-app-android
        id: get-mastestapp-hash
        shell: bash
        run: |
          set -euo pipefail

          hash="$(git ls-remote https://github.com/cpholguera/mas-app-android.git HEAD | awk '{print $1}')"

          echo "mastestapp_hash=$hash" >> "$GITHUB_OUTPUT"
          echo "MASTESTAPP_HASH=$hash" >> "$GITHUB_ENV"

      - name: Check if already cached
        id: cache-check
        uses: actions/cache/restore@v5
        with:
          lookup-only: true
          path: mas-app-android/
          key: base-app-${{ steps.get-mastestapp-hash.outputs.mastestapp_hash }}

      - name: Set up JDK 17
        if: steps.cache-check.outputs.cache-hit != 'true'
        uses: actions/setup-java@v5
        with:
          java-version: '17'
          distribution: 'temurin'

      - name: Setup Gradle
        if: steps.cache-check.outputs.cache-hit != 'true'
        uses: gradle/actions/setup-gradle@v6
        with:
          cache-read-only: false

      - name: Accept Android SDK licenses
        if: steps.cache-check.outputs.cache-hit != 'true'
        run: yes | "$ANDROID_HOME/cmdline-tools/latest/bin/sdkmanager" --licenses

      - name: Clone mas-app-android repository
        if: steps.cache-check.outputs.cache-hit != 'true'
        uses: actions/checkout@v6
        with:
          repository: cpholguera/mas-app-android
          path: mas-app-android
          ref: ${{ steps.get-mastestapp-hash.outputs.mastestapp_hash }}

      - name: Build base app
        if: steps.cache-check.outputs.cache-hit != 'true'
        shell: bash
        run: |
          set -euo pipefail

          cd mas-app-android

          grep -q 'org.gradle.caching=true' gradle.properties \
            || echo -en "\norg.gradle.caching=true\norg.gradle.configuration-cache=true\n" >> gradle.properties

          ./gradlew assembleDebug --stacktrace

          echo "Build succeeded"

      - name: Saving cache
        if: steps.cache-check.outputs.cache-hit != 'true'
        uses: actions/cache/save@v5
        with:
          path: mas-app-android/
          key: base-app-${{ steps.get-mastestapp-hash.outputs.mastestapp_hash }}

  build:
    needs:
      - generate-matrix
      - build-base-app
    if: ${{ needs.generate-matrix.outputs.matrix != '{"demo":[]}' }}
    runs-on: ubuntu-latest
    timeout-minutes: 30

    strategy:
      matrix: ${{ fromJson(needs.generate-matrix.outputs.matrix) }}
      max-parallel: 3

    steps:
      - name: Checkout repository
        uses: actions/checkout@v6
        with:
          sparse-checkout: demos/android

      - name: Set up JDK 17
        uses: actions/setup-java@v5
        with:
          java-version: '17'
          distribution: 'temurin'

      - name: Setup Gradle
        uses: gradle/actions/setup-gradle@v6
        with:
          cache-read-only: true

      - name: Accept Android SDK licenses
        run: yes | "$ANDROID_HOME/cmdline-tools/latest/bin/sdkmanager" --licenses

      - name: Restore base app cache
        id: cache-base-app
        uses: actions/cache/restore@v5
        with:
          path: mas-app-android/
          key: base-app-${{ needs.build-base-app.outputs.mastestapp_hash }}
          fail-on-cache-miss: true

      - name: Replace files and build APK
        shell: bash
        run: |
          set -euo pipefail

          demo="${{ matrix.demo }}"

          [ -d "$demo" ] || {
            echo "Demo directory not found: $demo"
            exit 1
          }

          echo "Processing $demo"

          copy_if_exists() {
            local source_file="$1"
            local target_file="$2"
            local label="$3"

            if [ -f "$source_file" ]; then
              cp -f "$source_file" "$target_file"
              echo "Copied $label for $demo"
            else
              echo "No $label found for $demo"
            fi
          }

          copy_if_exists "$demo/MastgTest.kt" mas-app-android/app/src/main/java/org/owasp/mastestapp/MastgTest.kt MastgTest.kt
          copy_if_exists "$demo/MainActivity.kt" mas-app-android/app/src/main/java/org/owasp/mastestapp/MainActivity.kt MainActivity.kt
          copy_if_exists "$demo/MastgTestWebView.kt" mas-app-android/app/src/main/java/org/owasp/mastestapp/MastgTestWebView.kt MastgTestWebView.kt
          copy_if_exists "$demo/AndroidManifest.xml" mas-app-android/app/src/main/AndroidManifest.xml AndroidManifest.xml
          copy_if_exists "$demo/filepaths.xml" mas-app-android/app/src/main/res/xml/filepaths.xml filepaths.xml
          copy_if_exists "$demo/network_security_config.xml" mas-app-android/app/src/main/res/xml/network_security_config.xml network_security_config.xml
          copy_if_exists "$demo/backup_rules.xml" mas-app-android/app/src/main/res/xml/backup_rules.xml backup_rules.xml
          copy_if_exists "$demo/data_extraction_rules.xml" mas-app-android/app/src/main/res/xml/data_extraction_rules.xml data_extraction_rules.xml
          copy_if_exists "$demo/proguard-rules.pro" mas-app-android/app/proguard-rules.pro proguard-rules.pro

          if find "$demo" -maxdepth 1 -name "*.proto" -print -quit 2>/dev/null | grep -q .; then
            mkdir -p mas-app-android/app/src/main/proto

            find "$demo" -maxdepth 1 -name "*.proto" -print0 2>/dev/null \
              | while IFS= read -r -d '' proto_file; do
                  cp -f "$proto_file" mas-app-android/app/src/main/proto/
                  echo "Copied $(basename "$proto_file") for $demo"
                done
          else
            echo "No .proto files found for $demo"
          fi

          if [ -f "$demo/CMakeLists.txt" ]; then
            mkdir -p mas-app-android/app/src/main/cpp

            cp -f "$demo/CMakeLists.txt" mas-app-android/app/src/main/cpp/CMakeLists.txt
            echo "Copied CMakeLists.txt for $demo"

            find "$demo" -maxdepth 1 -name "*.cpp" -print0 2>/dev/null \
              | while IFS= read -r -d '' cpp_file; do
                  cp -f "$cpp_file" mas-app-android/app/src/main/cpp/
                  echo "Copied $(basename "$cpp_file") for $demo"
                done
          else
            echo "No CMakeLists.txt found for $demo"
          fi

          insert_block() {
            local kind="$1"
            local upper="${kind^^}"
            local file="$demo/build.gradle.kts.$kind"
            local target="mas-app-android/app/build.gradle.kts"

            if [ -f "$file" ]; then
              sed -i '/\/\/ ADD_'"$upper"'_HERE/{
                r '"$file"'
                d
              }' "$target"

              echo "Replaced $kind in build.gradle.kts for $demo"
            else
              echo "No build.gradle.kts.$kind found for $demo, skipping $kind replacement"
            fi
          }

          insert_block plugins
          insert_block sections
          insert_block android
          insert_block libs
          insert_block build

          echo "Building APK for $demo"

          cd mas-app-android

          grep -q 'org.gradle.caching=true' gradle.properties \
            || echo -en "\norg.gradle.caching=true\norg.gradle.configuration-cache=true\n" >> gradle.properties

          ./gradlew assembleDebug --stacktrace

          cd ..

          echo "Build succeeded for $demo"

          apk_filename="$(basename "$demo").apk"

          mv mas-app-android/app/build/outputs/apk/debug/app-debug.apk "$apk_filename"

          echo "APK for $demo moved to $apk_filename"
          echo "APK_NAME=$apk_filename" >> "$GITHUB_ENV"

      - name: Upload APK
        uses: actions/upload-artifact@v6
        with:
          name: ${{ env.APK_NAME }}
          path: ${{ env.APK_NAME }}
          if-no-files-found: error