# Forgejo Actions 릴리스 파이프라인 (DEPLOYMENT_PLAN §5-bis)
# 자체 러너 3대(모두 host 모드): yunchan-win(windows) · kd-desktop(linux-builder) · yunchan-mac(macos)
# - 태그 v* 푸시 → 해당 태그의 draft 릴리스 생성 + 전 아티팩트 첨부 (QA 후 수동 Publish 승격)
# - workflow_dispatch → 'ci-rehearsal' draft 릴리스로 전체 파이프라인 리허설
# host 러너에는 Node 가 없어도 되도록 uses: 액션을 쓰지 않는다(체크아웃 포함 전부 run: 스텝).
# 빌드머신 전제: docs/DEPLOYMENT_PLAN.md §0 — win(SDK8+MAUI+Inno) · linux/mac(~/.dotnet SDK 8+10)
name: release

on:
  push:
    tags: ["v*"]
  workflow_dispatch: # 수동 실행(리허설)

env:
  DOTNET_NOLOGO: "true"
  DOTNET_CLI_TELEMETRY_OPTOUT: "true"
  # 릴리스 자산은 공개 배포 저장소로 업로드한다(소스 저장소는 비공개라 익명 다운로드 불가).
  # draft 상태는 익명에게 보이지 않으므로 QA 후 수동 Publish 흐름은 그대로다.
  RELEASE_REPO: "Paca/releases"

jobs:
  # ── 관문: 전 플랫폼 빌드 전에 단위+E2E 통과 ──
  test:
    runs-on: windows
    defaults: { run: { shell: pwsh } }
    steps:
      - name: checkout
        env: { CI_TOKEN: "${{ github.token }}" }
        run: |
          $u = [Uri]$env:GITHUB_SERVER_URL
          $url = "$($u.Scheme)://actions:$($env:CI_TOKEN)@$($u.Authority)/$($env:GITHUB_REPOSITORY).git"
          if (-not (Test-Path .git)) { git init -q . }
          if (git remote | Select-String -Quiet '^origin$') { git remote set-url origin $url } else { git remote add origin $url }
          git fetch -q --depth 1 origin $env:GITHUB_REF
          if ($LASTEXITCODE -ne 0) { throw "fetch 실패: $env:GITHUB_REF" }
          git checkout -q -f FETCH_HEAD
          if ($LASTEXITCODE -ne 0) { throw "checkout 실패" }
          git clean -qfdx
      - name: 환경 정보
        run: dotnet --list-sdks
      - name: dotnet test
        run: dotnet test tests/Paca.Tests -c Release

  # ── Windows 설치자 (x64 / arm64 교차 publish + Inno Setup) ──
  windows:
    needs: test
    runs-on: windows
    defaults: { run: { shell: pwsh } }
    steps:
      - name: checkout
        env: { CI_TOKEN: "${{ github.token }}" }
        run: |
          $u = [Uri]$env:GITHUB_SERVER_URL
          $url = "$($u.Scheme)://actions:$($env:CI_TOKEN)@$($u.Authority)/$($env:GITHUB_REPOSITORY).git"
          if (-not (Test-Path .git)) { git init -q . }
          if (git remote | Select-String -Quiet '^origin$') { git remote set-url origin $url } else { git remote add origin $url }
          git fetch -q --depth 1 origin $env:GITHUB_REF
          if ($LASTEXITCODE -ne 0) { throw "fetch 실패: $env:GITHUB_REF" }
          git checkout -q -f FETCH_HEAD
          if ($LASTEXITCODE -ne 0) { throw "checkout 실패" }
          git clean -qfdx
      - name: 버전 결정 (태그 v1.2.3 → 1.2.3 / 리허설 → 0.0.0)
        run: |
          if ($env:GITHUB_REF -match '^refs/tags/v(\d+\.\d+\.\d+.*)$') {
            "RELTAG=$($env:GITHUB_REF -replace '^refs/tags/','')" >> $env:GITHUB_ENV
            "APP_VERSION=$($Matches[1])" >> $env:GITHUB_ENV
            "RELEASE_PRERELEASE=false" >> $env:GITHUB_ENV
          } else {
            "RELTAG=ci-rehearsal" >> $env:GITHUB_ENV
            "APP_VERSION=0.0.0" >> $env:GITHUB_ENV
            "RELEASE_PRERELEASE=true" >> $env:GITHUB_ENV
          }
      - name: publish + 설치자 (x64 + arm64)
        run: ./build/publish.ps1 -Config Release -Version $env:APP_VERSION
      - name: 릴리스 업로드
        env: { RELEASE_TOKEN: "${{ secrets.RELEASE_TOKEN }}" }
        run: ./build/ci/upload-release-asset.ps1 -Tag $env:RELTAG -Files out/Paca-Setup-x64.exe, out/Paca-Setup-arm64.exe

  # ── Android APK (키스토어 시크릿 없으면 디버그 서명 APK) ──
  android:
    needs: test
    runs-on: windows
    defaults: { run: { shell: pwsh } }
    steps:
      - name: checkout
        env: { CI_TOKEN: "${{ github.token }}" }
        run: |
          $u = [Uri]$env:GITHUB_SERVER_URL
          $url = "$($u.Scheme)://actions:$($env:CI_TOKEN)@$($u.Authority)/$($env:GITHUB_REPOSITORY).git"
          if (-not (Test-Path .git)) { git init -q . }
          if (git remote | Select-String -Quiet '^origin$') { git remote set-url origin $url } else { git remote add origin $url }
          git fetch -q --depth 1 origin $env:GITHUB_REF
          if ($LASTEXITCODE -ne 0) { throw "fetch 실패: $env:GITHUB_REF" }
          git checkout -q -f FETCH_HEAD
          if ($LASTEXITCODE -ne 0) { throw "checkout 실패" }
          git clean -qfdx
      - name: 버전 결정
        run: |
          if ($env:GITHUB_REF -match '^refs/tags/v(\d+\.\d+\.\d+.*)$') {
            "RELTAG=$($env:GITHUB_REF -replace '^refs/tags/','')" >> $env:GITHUB_ENV
            "APP_VERSION=$($Matches[1])" >> $env:GITHUB_ENV
            "RELEASE_PRERELEASE=false" >> $env:GITHUB_ENV
          } else {
            "RELTAG=ci-rehearsal" >> $env:GITHUB_ENV
            "APP_VERSION=0.0.0" >> $env:GITHUB_ENV
            "RELEASE_PRERELEASE=true" >> $env:GITHUB_ENV
          }
      - name: publish APK
        env:
          ANDROID_KEYSTORE_B64: "${{ secrets.ANDROID_KEYSTORE }}"
          ANDROID_KEY_ALIAS: "${{ secrets.ANDROID_KEY_ALIAS }}"
          ANDROID_KEY_PASS: "${{ secrets.ANDROID_KEY_PASS }}"
        run: |
          $sign = @()
          if ($env:ANDROID_KEYSTORE_B64) {
            [IO.File]::WriteAllBytes("vd.keystore", [Convert]::FromBase64String($env:ANDROID_KEYSTORE_B64))
            $sign = "-p:AndroidKeyStore=true", "-p:AndroidSigningKeyStore=$PWD/vd.keystore",
                    "-p:AndroidSigningKeyAlias=$env:ANDROID_KEY_ALIAS",
                    "-p:AndroidSigningKeyPass=$env:ANDROID_KEY_PASS", "-p:AndroidSigningStorePass=$env:ANDROID_KEY_PASS"
          } else { Write-Host "ANDROID_KEYSTORE 시크릿 없음 — 디버그 서명 APK 생성" }
          # RID 는 CLI 전역 속성이 아니라 csproj 게이트(CiPackArm64Only)로 좁힌다 — 전역 -p:RuntimeIdentifiers 는
          # 참조 프로젝트(net8.0 Mobile.Core)까지 전파돼 MSB3030 으로 깨진다(2026-08-17 리허설 실증)
          dotnet publish src/Paca.Mobile -f net10.0-android -c Release `
            -p:AndroidPackageFormat=apk -p:CiPackArm64Only=true @sign -o out/android
          if ($LASTEXITCODE -ne 0) { throw "publish 실패" }
          $apk = Get-ChildItem out/android/*-Signed.apk | Select-Object -First 1
          if (-not $apk) { $apk = Get-ChildItem out/android/*.apk | Select-Object -First 1 }
          if (-not $apk) { throw "APK 산출물 없음" }
          Copy-Item $apk.FullName "out/Paca-$env:APP_VERSION-arm64.apk"
      - name: 릴리스 업로드
        env: { RELEASE_TOKEN: "${{ secrets.RELEASE_TOKEN }}" }
        run: ./build/ci/upload-release-asset.ps1 -Tag $env:RELTAG -Files "out/Paca-$env:APP_VERSION-arm64.apk"

  # ── Linux 셸 (tar.gz self-contained — Cli + Avalonia, x64 네이티브 + arm64 교차) ──
  linux:
    needs: test
    runs-on: linux-builder
    steps:
      - name: checkout
        env: { CI_TOKEN: "${{ github.token }}" }
        run: |
          proto="${GITHUB_SERVER_URL%%://*}"; host="${GITHUB_SERVER_URL#*://}"
          url="$proto://actions:${CI_TOKEN}@${host%/}/${GITHUB_REPOSITORY}.git"
          [ -d .git ] || git init -q .
          git remote remove origin 2>/dev/null || true
          git remote add origin "$url"
          git fetch -q --depth 1 origin "$GITHUB_REF"
          git checkout -q -f FETCH_HEAD
          git clean -qfdx
      - name: 환경 준비 (~/.dotnet SDK)
        run: |
          echo "DOTNET_ROOT=$HOME/.dotnet" >> "$GITHUB_ENV"
          echo "$HOME/.dotnet" >> "$GITHUB_PATH"
          case "$GITHUB_REF" in
            refs/tags/v*) echo "RELTAG=${GITHUB_REF#refs/tags/}" >> "$GITHUB_ENV"
                          echo "RELEASE_PRERELEASE=false" >> "$GITHUB_ENV" ;;
            *) echo "RELTAG=ci-rehearsal" >> "$GITHUB_ENV"
               echo "RELEASE_PRERELEASE=true" >> "$GITHUB_ENV" ;;
          esac
      - name: publish (Cli + Avalonia, linux-x64 + linux-arm64)
        run: |
          dotnet --list-sdks
          for rid in linux-x64 linux-arm64; do
            dotnet publish src/Paca.Cli -c Release -r "$rid" --self-contained -o "out/cli-$rid"
            dotnet publish src/Paca.Avalonia -c Release -r "$rid" --self-contained -o "out/avalonia-$rid"
            tar -C out -czf "out/Paca-$rid.tar.gz" "cli-$rid" "avalonia-$rid"
          done
      - name: 릴리스 업로드
        env: { RELEASE_TOKEN: "${{ secrets.RELEASE_TOKEN }}" }
        run: ./build/ci/upload-release-asset.sh "$RELTAG" out/Paca-linux-x64.tar.gz out/Paca-linux-arm64.tar.gz

  # ── macOS 셸 (tar.gz — arm64 네이티브 + x64 교차. 서명·공증은 D4, Apple Developer Program 후) ──
  macos:
    needs: test
    runs-on: macos
    steps:
      - name: checkout
        env: { CI_TOKEN: "${{ github.token }}" }
        run: |
          proto="${GITHUB_SERVER_URL%%://*}"; host="${GITHUB_SERVER_URL#*://}"
          url="$proto://actions:${CI_TOKEN}@${host%/}/${GITHUB_REPOSITORY}.git"
          [ -d .git ] || git init -q .
          git remote remove origin 2>/dev/null || true
          git remote add origin "$url"
          git fetch -q --depth 1 origin "$GITHUB_REF"
          git checkout -q -f FETCH_HEAD
          git clean -qfdx
      - name: 환경 준비 (~/.dotnet SDK)
        run: |
          echo "DOTNET_ROOT=$HOME/.dotnet" >> "$GITHUB_ENV"
          echo "$HOME/.dotnet" >> "$GITHUB_PATH"
          case "$GITHUB_REF" in
            refs/tags/v*) echo "RELTAG=${GITHUB_REF#refs/tags/}" >> "$GITHUB_ENV"
                          echo "RELEASE_PRERELEASE=false" >> "$GITHUB_ENV" ;;
            *) echo "RELTAG=ci-rehearsal" >> "$GITHUB_ENV"
               echo "RELEASE_PRERELEASE=true" >> "$GITHUB_ENV" ;;
          esac
      - name: publish (Cli + Avalonia, osx-arm64 + osx-x64)
        run: |
          dotnet --list-sdks
          for rid in osx-arm64 osx-x64; do
            dotnet publish src/Paca.Cli -c Release -r "$rid" --self-contained -o "out/cli-$rid"
            dotnet publish src/Paca.Avalonia -c Release -r "$rid" --self-contained -o "out/avalonia-$rid"
            tar -C out -czf "out/Paca-$rid.tar.gz" "cli-$rid" "avalonia-$rid"
          done
      - name: 릴리스 업로드
        env: { RELEASE_TOKEN: "${{ secrets.RELEASE_TOKEN }}" }
        run: ./build/ci/upload-release-asset.sh "$RELTAG" out/Paca-osx-arm64.tar.gz out/Paca-osx-x64.tar.gz