.goreleaser.yml

# GoReleaser configuration for Pass-CLI
# https://goreleaser.com

version: 2

# Removed before hooks - CI already runs tests and linting
# before:
#   hooks:
#     - go test ./...
#     - golangci-lint run

builds:
  - id: pass-cli
    main: .
    binary: pass-cli

    # Version information injected at build time
    ldflags:
      - -s -w
      - -X github.com/arimxyer/pass-cli/cmd.version={{.Version}}
      - -X github.com/arimxyer/pass-cli/cmd.commit={{.ShortCommit}}
      - -X github.com/arimxyer/pass-cli/cmd.date={{.Date}}

    # Target platforms
    goos:
      - windows
      - darwin
      - linux

    goarch:
      - amd64
      - arm64

    # Platform-specific configurations
    ignore:
      # No known incompatibilities, but can add here if needed
      # - goos: windows
      #   goarch: arm64

    # Build tags for conditional compilation
    tags:
      - netgo

    # Environment variables for build
    env:
      - CGO_ENABLED=0

    # Flags passed to go build
    flags:
      - -trimpath
      - -mod=readonly

archives:
  - id: default
    name_template: >-
      {{ .ProjectName }}_
      {{- .Version }}_
      {{- .Os }}_
      {{- if eq .Arch "amd64" }}x86_64
      {{- else if eq .Arch "386" }}i386
      {{- else }}{{ .Arch }}{{ end }}
      {{- if .Arm }}v{{ .Arm }}{{ end }}

    # Files to include in archive (essential docs only)
    # Full documentation available at https://reyamira.github.io/pass-cli/
    files:
      - LICENSE*
      - README*
      - CHANGELOG*

checksum:
  name_template: "checksums.txt"
  algorithm: sha256

snapshot:
  version_template: "{{ incpatch .Version }}-next"

changelog:
  sort: asc
  use: github
  filters:
    exclude:
      - "^docs:"
      - "^test:"
      - "^chore:"
      - "^ci:"
      - "Merge pull request"
      - "Merge branch"
  groups:
    - title: Features
      regexp: '^.*?feat(\([[:word:]]+\))??!?:.+$'
      order: 0
    - title: "Bug Fixes"
      regexp: '^.*?fix(\([[:word:]]+\))??!?:.+$'
      order: 1
    - title: "Security"
      regexp: '^.*?sec(\([[:word:]]+\))??!?:.+$'
      order: 2
    - title: "Performance"
      regexp: '^.*?perf(\([[:word:]]+\))??!?:.+$'
      order: 3
    - title: Others
      order: 999

release:
  github:
    owner: reyamira
    name: pass-cli

  # Release name format
  name_template: "v{{.Version}}"

  # Create draft release (can be published manually)
  draft: false

  # Mark as prerelease if version contains alpha, beta, rc
  prerelease: auto

  # Include release notes (disabled - discussions not enabled)
  # discussion_category_name: General

  # Header and footer for release notes
  header: |
    ## Pass-CLI {{.Version}}

    A secure, cross-platform CLI password and API key manager for developers.

    ### Installation

    #### Homebrew (macOS/Linux)
    ```bash
    brew install reyamira/tap/pass-cli
    ```

    #### Scoop (Windows)
    ```powershell
    scoop bucket add reyamira https://github.com/reyamira/scoop-bucket
    scoop install pass-cli
    ```

    #### Manual Installation
    Download the appropriate archive for your platform below, extract it, and add the binary to your PATH.

  footer: |
    ### Verification

    All binaries are checksummed and can be verified:
    ```bash
    sha256sum -c checksums.txt
    ```

    ### Full Changelog
    See the full changelog at https://github.com/reyamira/pass-cli/blob/main/CHANGELOG.md

# Universal Binaries for macOS (combines amd64 and arm64)
universal_binaries:
  - id: pass-cli-darwin
    replace: true
    name_template: "pass-cli"
    ids:
      - pass-cli

# Announce release (can configure Twitter, Discord, Slack, etc.)
# announce:
#   twitter:
#     enabled: false
#   discord:
#     enabled: false

# Metadata for package managers
metadata:
  mod_timestamp: "{{ .CommitTimestamp }}"

# Signing (optional, for macOS binaries)
# signs:
#   - artifacts: checksum
#     args:
#       - "--batch"
#       - "--local-user"
#       - "{{ .Env.GPG_FINGERPRINT }}"
#       - "--output"
#       - "${signature}"
#       - "--detach-sign"
#       - "${artifact}"

# Docker images (optional)
# dockers:
#   - image_templates:
#       - "ghcr.io/username/pass-cli:{{ .Tag }}"
#       - "ghcr.io/username/pass-cli:v{{ .Major }}"
#       - "ghcr.io/username/pass-cli:v{{ .Major }}.{{ .Minor }}"
#       - "ghcr.io/username/pass-cli:latest"
#     dockerfile: Dockerfile
#     use: buildx
#     build_flag_templates:
#       - "--platform=linux/amd64"
#       - "--label=org.opencontainers.image.created={{.Date}}"
#       - "--label=org.opencontainers.image.title={{.ProjectName}}"
#       - "--label=org.opencontainers.image.revision={{.FullCommit}}"
#       - "--label=org.opencontainers.image.version={{.Version}}"

# SBOMs (Software Bill of Materials)
# Disabled: syft not available in GitHub Actions environment
# TODO: Add syft installation step or use goreleaser-action with syft pre-installed
# sboms:
#   - id: archive
#     artifacts: archive
#   - id: binary
#     artifacts: binary

# Snap packages for universal Linux distribution
# Disabled: snapcraft not available in GitHub Actions environment
# TODO: Add snapcraft installation step or use docker-based build
# snapcrafts:
#   - id: pass-cli-snap
#     name: pass-cli
#
#     summary: Secure CLI password and API key manager for developers
#     description: |
#       Pass-CLI is a secure, cross-platform command-line password and API key manager
#       designed specifically for developers. It provides encrypted vault storage using
#       AES-256-GCM encryption, optional keychain integration for automatic unlocking,
#       and clipboard integration for secure credential access.
#
#       Features:
#       - Strong encryption with AES-256-GCM and PBKDF2 key derivation
#       - Cross-platform keychain integration
#       - Secure clipboard integration with auto-clear
#       - Script-friendly output formats
#       - Encrypted backup and restore
#       - Password masking with visual feedback
#
#     # Snap grade (stable or devel)
#     grade: stable
#
#     # Confinement level (strict, classic, or devmode)
#     confinement: strict
#
#     # License
#     license: MIT
#
#     # Base snap
#     base: core22
#
#     # App configuration
#     apps:
#       pass-cli:
#         command: pass-cli
#         plugs:
#           - home
#           - network
#           - password-manager-service
#
#     # Publish to Snap Store
#     publish: false

# Homebrew tap (automated formula creation and updates)
brews:
  - name: pass-cli

    # Tap repository (GoReleaser will auto-create/update the formula)
    repository:
      owner: reyamira
      name: homebrew-tap
      token: "{{ .Env.HOMEBREW_TAP_TOKEN }}"

    # Where to place the formula in the tap repo
    directory: Formula

    # Metadata
    homepage: https://github.com/reyamira/pass-cli
    description: "Secure, cross-platform CLI password and API key manager for developers"
    license: MIT

    # Installation details
    install: |
      bin.install "pass-cli"

    # Test block (Homebrew requires this)
    test: |
      system "#{bin}/pass-cli", "version"

    # Caveats shown after installation
    caveats: |
      Pass-CLI: Secure password manager with TUI and CLI interfaces

      First-time users: Run `pass-cli` (no arguments) for guided setup.

      Quick start:
        pass-cli          - Launch interactive TUI
        pass-cli init     - Initialize vault manually
        pass-cli doctor   - Run health checks

      Features:
        • Interactive TUI for visual management
        • Keychain integration: pass-cli keychain enable
        • Usage tracking and audit logging

      Vault location: ~/.pass-cli/vault.enc
      Complete guide: https://github.com/reyamira/pass-cli/blob/main/docs/GETTING_STARTED.md

# Scoop bucket (automated manifest creation and updates)
scoops:
  - name: pass-cli

    # Bucket repository (GoReleaser will auto-create/update the manifest)
    repository:
      owner: reyamira
      name: scoop-bucket
      token: "{{ .Env.SCOOP_BUCKET_TOKEN }}"

    # Where to place the manifest in the bucket repo
    directory: bucket

    # Metadata
    homepage: https://github.com/reyamira/pass-cli
    description: "Secure, cross-platform CLI password and API key manager for developers"
    license: MIT

    # Post-install message (array of PowerShell commands)
    post_install:
      - "Write-Host 'Pass-CLI installed! First-time: Run `pass-cli` for guided setup.' -ForegroundColor Green"
      - "Write-Host 'TUI: pass-cli | Health check: pass-cli doctor | Enable keychain: pass-cli keychain enable' -ForegroundColor Cyan"
      - "Write-Host 'Guide: https://github.com/reyamira/pass-cli/blob/main/docs/GETTING_STARTED.md' -ForegroundColor Yellow"