cli-release.yml

name: CLI Release

on:
  push:
    tags: ['v*']

env:
  LANG: C.UTF-8

jobs:
  build-frontend:
    name: Build Frontend Assets
    runs-on: blacksmith-4vcpu-ubuntu-2404
    steps:
      - uses: actions/checkout@v6

      - name: Setup Node.js
        uses: actions/setup-node@v6
        with:
          node-version: '22'

      - name: Build frontend assets
        run: |
          mkdir -p static/public/assets/css
          mkdir -p static/public/assets/web-components/dist/js
          mkdir -p static/public/assets/web-components/dist/css
          npm ci
          npx tailwindcss -i ./static/public/assets/css/tailwind.css -o ./static/public/assets/css/tailwind.min.css --minify
          cd web-components
          npm ci
          NODE_ENV=production npx vite build --mode production --sourcemap false

      - name: Upload frontend artifact
        uses: actions/upload-artifact@v7
        with:
          name: frontend-assets
          path: |
            static/public/assets/css/tailwind.min.css
            static/public/assets/web-components/dist
          retention-days: 1

  build-linux-x64:
    name: Build Linux x86_64
    needs: build-frontend
    runs-on: blacksmith-4vcpu-ubuntu-2404
    container:
      image: ghcr.io/monoscope-tech/monoscope-deps:latest
      credentials:
        username: ${{ github.repository_owner }}
        password: ${{ secrets.GH_TOKEN }}
      env:
        CABAL_DIR: /root/.cabal
    steps:
      - uses: actions/checkout@v6

      - name: Download frontend artifacts
        uses: actions/download-artifact@v8
        with:
          name: frontend-assets
          path: static/public/assets

      - name: Cache dist-newstyle
        uses: actions/cache@v5
        with:
          path: dist-newstyle
          key: cli-linux-x64-${{ hashFiles('**/*.cabal', '**/cabal.project*') }}-${{ github.sha }}
          restore-keys: |
            cli-linux-x64-${{ hashFiles('**/*.cabal', '**/cabal.project*') }}-
            cli-linux-x64-

      - name: Build CLI binary
        run: cabal build exe:monoscope -j --ghc-options="-O2 +RTS -A64m -n2m -RTS"

      - name: Package binary
        run: |
          BIN=$(cabal list-bin exe:monoscope | tail -n1)
          strip "$BIN"
          cp "$BIN" monoscope
          tar czf monoscope-linux-x86_64.tar.gz monoscope

      - name: Upload artifact
        uses: actions/upload-artifact@v7
        with:
          name: monoscope-linux-x86_64
          path: monoscope-linux-x86_64.tar.gz
          retention-days: 5

  build-linux-arm64:
    name: Build Linux ARM64
    needs: build-frontend
    continue-on-error: true
    runs-on: blacksmith-4vcpu-ubuntu-2404-arm
    container:
      image: ghcr.io/monoscope-tech/monoscope-deps:latest
      credentials:
        username: ${{ github.repository_owner }}
        password: ${{ secrets.GH_TOKEN }}
      env:
        CABAL_DIR: /root/.cabal
    steps:
      - uses: actions/checkout@v6

      - name: Download frontend artifacts
        uses: actions/download-artifact@v8
        with:
          name: frontend-assets
          path: static/public/assets

      - name: Cache dist-newstyle
        uses: actions/cache@v5
        with:
          path: dist-newstyle
          key: cli-linux-arm64-dist-${{ hashFiles('**/*.cabal', '**/cabal.project*') }}-${{ github.sha }}
          restore-keys: |
            cli-linux-arm64-dist-${{ hashFiles('**/*.cabal', '**/cabal.project*') }}-
            cli-linux-arm64-dist-

      - name: Build CLI binary
        run: cabal build exe:monoscope -j --ghc-options="-O2 +RTS -A64m -n2m -RTS"

      - name: Package binary
        run: |
          BIN=$(cabal list-bin exe:monoscope | tail -n1)
          strip "$BIN"
          cp "$BIN" monoscope
          tar czf monoscope-linux-arm64.tar.gz monoscope

      - name: Upload artifact
        uses: actions/upload-artifact@v7
        with:
          name: monoscope-linux-arm64
          path: monoscope-linux-arm64.tar.gz
          retention-days: 5

  build-macos-arm64:
    name: Build macOS ARM64
    needs: build-frontend
    runs-on: blacksmith-6vcpu-macos-15
    steps:
      - uses: actions/checkout@v6

      - name: Download frontend artifacts
        uses: actions/download-artifact@v8
        with:
          name: frontend-assets
          path: static/public/assets

      - name: Install GHC and Cabal
        uses: haskell-actions/setup@v2
        with:
          ghc-version: '9.12.2'
          cabal-version: '3.14'

      - name: Cache Cabal
        uses: actions/cache@v5
        with:
          path: ~/.cabal
          key: cli-macos-arm64-cabal-${{ hashFiles('**/*.cabal', '**/cabal.project*') }}
          restore-keys: cli-macos-arm64-cabal-

      - name: Cache dist-newstyle
        uses: actions/cache@v5
        with:
          path: dist-newstyle
          key: cli-macos-arm64-dist-${{ hashFiles('**/*.cabal', '**/cabal.project*') }}
          restore-keys: cli-macos-arm64-dist-

      - name: Install system deps
        run: |
          brew install pkg-config libpq librdkafka snappy lz4 zstd grpc openssl protobuf
          PREFIX=$(brew --prefix)
          KEGONLY="snappy libpq librdkafka lz4 zstd openssl"
          # Symlink keg-only libs/headers into /usr/local so configure scripts and GHC linker find them
          sudo mkdir -p /usr/local/lib /usr/local/include
          for f in $KEGONLY; do
            pf="$PREFIX/opt/$f"
            [ -d "$pf/lib" ]     && find "$pf/lib"     -maxdepth 1 \( -name "*.dylib" -o -name "*.a" \) -exec sudo ln -sf {} /usr/local/lib/ \;
            [ -d "$pf/include" ] && sudo cp -rn "$pf/include/." /usr/local/include/ 2>/dev/null || true
          done
          # pkg-config paths as belt-and-suspenders
          PKG_PATH=$(for f in $KEGONLY grpc; do echo -n "$PREFIX/opt/$f/lib/pkgconfig:"; done)
          echo "PKG_CONFIG_PATH=${PKG_PATH%:}" >> $GITHUB_ENV
          echo "$PREFIX/opt/libpq/bin" >> $GITHUB_PATH

      - name: Build CLI binary
        run: cabal build exe:monoscope -j --ghc-options="-O2 +RTS -A64m -n2m -RTS"

      - name: Package binary
        run: |
          BIN=$(cabal list-bin exe:monoscope | tail -n1)
          strip "$BIN"
          cp "$BIN" monoscope
          tar czf monoscope-darwin-arm64.tar.gz monoscope

      - name: Upload artifact
        uses: actions/upload-artifact@v7
        with:
          name: monoscope-darwin-arm64
          path: monoscope-darwin-arm64.tar.gz
          retention-days: 5

  release:
    name: Create GitHub Release
    needs: [build-linux-x64, build-linux-arm64, build-macos-arm64]
    runs-on: blacksmith-4vcpu-ubuntu-2404
    permissions:
      contents: write
    steps:
      - uses: actions/checkout@v6

      - name: Download all artifacts
        uses: actions/download-artifact@v8
        with:
          path: artifacts
          merge-multiple: true

      - name: Generate checksums
        run: |
          cd artifacts
          sha256sum *.tar.gz > checksums.txt
          cat checksums.txt

      - name: Create release
        env:
          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        run: |
          cd artifacts
          ASSETS=$(ls *.tar.gz checksums.txt 2>/dev/null | tr '\n' ' ')
          if gh release view "$GITHUB_REF_NAME" &>/dev/null; then
            gh release upload "$GITHUB_REF_NAME" $ASSETS --clobber
          else
            gh release create "$GITHUB_REF_NAME" \
              --title "Monoscope ${GITHUB_REF_NAME}" \
              --generate-notes \
              $ASSETS
          fi