release.yml

name: Release

on:
  workflow_dispatch:
    inputs:
      version:
        type: string
        description: Version number
  push:
    tags:
      - 'v*'
    paths:
      - 'binaries/**'
      - 'crates/**'
      - 'data/generated/**'
      - 'java_wrapper/**'
      - 'Cargo.lock'
      - 'Cargo.toml'
      - 'docker/Dockerfile.ci'

concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

env:
  CARGO_TERM_COLOR: always
  BINARY_NAME: pico_limbo
  LIB_NAME: pico_limbo_lib

jobs:
  build-linux:
    strategy:
      matrix:
        include:
          - target: x86_64-unknown-linux-musl
            name: linux-x86_64-musl
            runner: ubuntu-latest
            library: false
          - target: aarch64-unknown-linux-musl
            name: linux-aarch64-musl
            runner: ubuntu-24.04-arm
            library: false
          - target: x86_64-unknown-linux-gnu
            name: linux-x86_64-gnu
            runner: ubuntu-latest
            library: true
          - target: aarch64-unknown-linux-gnu
            name: linux-aarch64-gnu
            runner: ubuntu-24.04-arm
            library: true

    runs-on: ${{ matrix.runner }}

    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Install musl-tools
        if: contains(matrix.target, 'musl')
        run: |
          sudo apt-get update -y
          sudo apt-get install -y musl-tools

      - name: Install stable toolchain
        uses: dtolnay/rust-toolchain@1.92
        with:
          target: ${{ matrix.target }}

      - name: Cache Cargo dependencies
        uses: actions/cache@v4
        with:
          path: |
            ~/.cargo/registry
            ~/.cargo/git
            target
          key: ${{ runner.os }}-${{ runner.arch }}-cargo-${{ matrix.target }}-${{ hashFiles('**/Cargo.lock') }}
          restore-keys: |
            ${{ runner.os }}-${{ runner.arch }}-cargo-${{ matrix.target }}-
            ${{ runner.os }}-${{ runner.arch }}-cargo-

      # Build Command:
      # If matrix.library is true (GNU), we add --lib to build the .so file
      # If false (Musl), we only build the binary to avoid the "cdylib not supported" error
      - name: Build
        run: |
          if [ "${{ matrix.library }}" = "true" ]; then
            cargo build --release --target ${{ matrix.target }} --bin ${{ env.BINARY_NAME }} --lib
          else
            cargo build --release --target ${{ matrix.target }} --bin ${{ env.BINARY_NAME }}
          fi

      - name: Upload Library for Java
        if: matrix.library == true
        uses: actions/upload-artifact@v4
        with:
          name: lib-${{ matrix.name }}
          path: target/${{ matrix.target }}/release/lib${{ env.LIB_NAME }}.so

      - name: Prepare artifacts
        run: |
          mkdir -p artifacts
          cp target/${{ matrix.target }}/release/${{ env.BINARY_NAME }} artifacts/
          cd artifacts && tar -czf ../${{ env.BINARY_NAME }}_${{ matrix.name }}.tar.gz *

      - name: Upload artifacts
        uses: actions/upload-artifact@v4
        with:
          name: ${{ env.BINARY_NAME }}_${{ matrix.name }}
          path: ${{ env.BINARY_NAME }}_${{ matrix.name }}.tar.gz

  build-macos:
    runs-on: macos-latest

    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Install stable toolchain
        uses: dtolnay/rust-toolchain@1.92
        with:
          target: aarch64-apple-darwin

      - name: Cache Cargo dependencies
        uses: actions/cache@v4
        with:
          path: |
            ~/.cargo/registry
            ~/.cargo/git
            target
          key: ${{ runner.os }}-cargo-aarch64-apple-darwin-${{ hashFiles('**/Cargo.lock') }}
          restore-keys: |
            ${{ runner.os }}-cargo-aarch64-apple-darwin-
            ${{ runner.os }}-cargo-

      - name: Build
        run: cargo build --release --target aarch64-apple-darwin --bin ${{ env.BINARY_NAME }} --lib

      - name: Upload Library for Java
        uses: actions/upload-artifact@v4
        with:
          name: lib-macos-aarch64
          path: target/aarch64-apple-darwin/release/lib${{ env.LIB_NAME }}.dylib

      - name: Prepare artifacts
        run: |
          mkdir -p artifacts
          cp target/aarch64-apple-darwin/release/${{ env.BINARY_NAME }} artifacts/
          cd artifacts && tar -czf ../${{ env.BINARY_NAME }}_macos-aarch64.tar.gz *

      - name: Upload artifacts
        uses: actions/upload-artifact@v4
        with:
          name: ${{ env.BINARY_NAME }}_macos-aarch64
          path: ${{ env.BINARY_NAME }}_macos-aarch64.tar.gz

  build-windows:
    runs-on: windows-latest

    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Install stable toolchain
        uses: dtolnay/rust-toolchain@1.92

      - name: Cache Cargo dependencies
        uses: actions/cache@v4
        with:
          path: |
            ~/.cargo/registry
            ~/.cargo/git
            target
          key: ${{ runner.os }}-cargo-x86_64-pc-windows-msvc-${{ hashFiles('**/Cargo.lock') }}
          restore-keys: |
            ${{ runner.os }}-cargo-x86_64-pc-windows-msvc-
            ${{ runner.os }}-cargo-

      - name: Build
        run: cargo build --release --target x86_64-pc-windows-msvc --bin ${{ env.BINARY_NAME }} --lib

      - name: Upload Library for Java
        uses: actions/upload-artifact@v4
        with:
          name: lib-windows-x86_64
          path: target/x86_64-pc-windows-msvc/release/${{ env.LIB_NAME }}.dll

      - name: Prepare artifacts
        run: |
          mkdir artifacts
          Copy-Item "target/x86_64-pc-windows-msvc/release/${{ env.BINARY_NAME }}.exe" artifacts/
          Compress-Archive -Path artifacts/* -DestinationPath "${{ env.BINARY_NAME }}_windows-x86_64.zip" -Force

      - name: Upload artifacts
        uses: actions/upload-artifact@v4
        with:
          name: ${{ env.BINARY_NAME }}_windows-x86_64
          path: ${{ env.BINARY_NAME }}_windows-x86_64.zip

  build-java:
    runs-on: ubuntu-latest
    needs:
      - build-linux
      - build-macos
      - build-windows

    defaults:
      run:
        working-directory: java_wrapper

    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Setup Java
        uses: actions/setup-java@v4
        with:
          distribution: 'temurin'
          java-version: '21'
          cache: 'gradle'

      - name: Download Linux x86_64 Lib
        uses: actions/download-artifact@v4
        with:
          name: lib-linux-x86_64-gnu
          path: java_wrapper/wrapper/src/main/resources/linux/x86_64

      - name: Download Linux Aarch64 Lib
        uses: actions/download-artifact@v4
        with:
          name: lib-linux-aarch64-gnu
          path: java_wrapper/wrapper/src/main/resources/linux/aarch64

      - name: Download MacOS Aarch64 Lib
        uses: actions/download-artifact@v4
        with:
          name: lib-macos-aarch64
          path: java_wrapper/wrapper/src/main/resources/macos/aarch64

      - name: Download Windows x86_64 Lib
        uses: actions/download-artifact@v4
        with:
          name: lib-windows-x86_64
          path: java_wrapper/wrapper/src/main/resources/windows/x86_64

      - name: Verify Library Placement
        run: ls -R wrapper/src/main/resources

      - name: Build with Gradle
        run: |
          chmod +x gradlew
          ./gradlew build

      - name: Rename and Prepare Artifact
        run: |
          mv wrapper/build/libs/wrapper.jar ../${{ env.BINARY_NAME }}_java_wrapper.jar

      - name: Upload Java Artifact
        uses: actions/upload-artifact@v4
        with:
          name: ${{ env.BINARY_NAME }}_java_wrapper
          path: ${{ env.BINARY_NAME }}_java_wrapper.jar

  build-docker:
    strategy:
      fail-fast: false
      matrix:
        include:
          - platform: linux/amd64
            runner: ubuntu-latest
            artifact_suffix: linux-x86_64-musl
          - platform: linux/arm64
            runner: ubuntu-24.04-arm
            artifact_suffix: linux-aarch64-musl

    runs-on: ${{ matrix.runner }}

    needs:
      - build-linux

    permissions:
      contents: read
      packages: write

    steps:
      - name: Prepare
        run: |
          platform=${{ matrix.platform }}
          echo "PLATFORM_PAIR=${platform//\//-}" >> $GITHUB_ENV

      - name: Checkout
        uses: actions/checkout@v4

      - name: Download Build Artifact
        uses: actions/download-artifact@v4
        with:
          name: ${{ env.BINARY_NAME }}_${{ matrix.artifact_suffix }}
          path: ./docker

      - name: Prepare Docker Context
        run: |
          cd docker
          tar -xzf ${{ env.BINARY_NAME }}_${{ matrix.artifact_suffix }}.tar.gz
          chmod +x ${{ env.BINARY_NAME }}

      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3

      - name: Log in to GitHub Container Registry
        uses: docker/login-action@v3
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Extract metadata
        id: meta
        uses: docker/metadata-action@v5
        with:
          images: ghcr.io/${{ github.repository }}

      - name: Prepare repository name
        run: |
          echo "REPO_LC=${GITHUB_REPOSITORY,,}" >> $GITHUB_ENV

      - name: Build and push by digest
        id: build
        uses: docker/build-push-action@v5
        with:
          context: docker
          file: docker/Dockerfile.ci
          platforms: ${{ matrix.platform }}
          labels: ${{ steps.meta.outputs.labels }}
          tags: ghcr.io/${{ env.REPO_LC }}
          outputs: type=image,push-by-digest=true,name-canonical=true,push=true
          cache-from: type=gha,scope=${{ env.PLATFORM_PAIR }}-${{ matrix.runner }}
          cache-to: type=gha,mode=max,scope=${{ env.PLATFORM_PAIR }}-${{ matrix.runner }}

      - name: Export digest
        run: |
          mkdir -p ${{ runner.temp }}/digests
          digest="${{ steps.build.outputs.digest }}"
          touch "${{ runner.temp }}/digests/${digest#sha256:}"

      - name: Upload digest
        uses: actions/upload-artifact@v4
        with:
          name: digests-${{ env.PLATFORM_PAIR }}
          path: ${{ runner.temp }}/digests/*
          if-no-files-found: error
          retention-days: 1

  merge-docker:
    runs-on: ubuntu-latest
    needs: build-docker

    permissions:
      contents: read
      packages: write

    steps:
      - name: Download digests
        uses: actions/download-artifact@v4
        with:
          path: ${{ runner.temp }}/digests
          pattern: digests-*
          merge-multiple: true

      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3

      - name: Log in to GitHub Container Registry
        uses: docker/login-action@v3
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Extract metadata
        id: meta
        uses: docker/metadata-action@v5
        with:
          images: ghcr.io/${{ github.repository }}
          tags: |
            type=ref,event=branch
            type=ref,event=tag
            type=raw,value=latest,enable={{is_default_branch}}

      - name: Prepare repository name
        run: |
          echo "REPO_LC=${GITHUB_REPOSITORY,,}" >> $GITHUB_ENV

      - name: Create manifest list and push
        working-directory: ${{ runner.temp }}/digests
        run: |
          docker buildx imagetools create $(jq -cr '.tags | map("-t " + .) | join(" ")' <<< "$DOCKER_METADATA_OUTPUT_JSON") \
            $(printf 'ghcr.io/${{ env.REPO_LC }}@sha256:%s ' *)

      - name: Inspect image
        run: |
          docker buildx imagetools inspect ghcr.io/${{ env.REPO_LC }}:${{ steps.meta.outputs.version }}

  release:
    permissions:
      contents: write

    runs-on: ubuntu-latest

    needs:
      - build-linux
      - build-macos
      - build-windows
      - build-java

    steps:
      - name: Checkout
        uses: actions/checkout@v4
        with:
          fetch-depth: 0

      - name: Generate release info
        id: release_info
        run: |
          if [ "${{ github.event_name }}" == "workflow_dispatch" ]; then
            TAG_NAME="${{ inputs.version }}"
          else
            TAG_NAME=${GITHUB_REF#refs/tags/}
          fi
          
          echo "tag_name=${TAG_NAME}" >> $GITHUB_OUTPUT
          echo "release_name=Release ${TAG_NAME}" >> $GITHUB_OUTPUT

      - name: Download all artifacts
        uses: actions/download-artifact@v4
        with:
          path: ./artifacts
          pattern: ${{ env.BINARY_NAME }}_*
          merge-multiple: true

      - name: Create release and upload assets
        uses: softprops/action-gh-release@v2
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        with:
          tag_name: ${{ steps.release_info.outputs.tag_name }}
          name: ${{ steps.release_info.outputs.release_name }}
          draft: false
          files: ./artifacts/*