EasyCLIProxyAPI/.github/workflows/release.yml

name: Build portable releases

run-name: >-
  Portable release ${{ github.ref_type == 'tag' && github.ref_name || inputs.release_tag || github.ref_name }}

on:
  workflow_dispatch:
    inputs:
      release_tag:
        description: Optional tag to create after all builds pass (leave empty to build artifacts only)
        required: false
        type: string
      prerelease:
        description: Mark a manually published release as a pre-release
        required: true
        default: true
        type: boolean
  push:
    tags:
      - 'v*'

permissions:
  contents: write

jobs:
  validate:
    name: Validate source
    runs-on: ubuntu-24.04
    timeout-minutes: 30
    steps:
      - uses: actions/checkout@v7
      - uses: oven-sh/setup-bun@v2
        with:
          bun-version: 1.3.14
      - uses: dtolnay/rust-toolchain@stable
        with:
          components: clippy, rustfmt
      - name: Install Linux dependencies
        run: |
          sudo apt-get update
          sudo apt-get install -y libwebkit2gtk-4.1-dev libappindicator3-dev librsvg2-dev patchelf
      - name: Install frontend dependencies
        run: bun install --frozen-lockfile
      - name: Validate desktop icons
        shell: bash
        run: |
          test -s src-tauri/icons/icon.png
          test -s src-tauri/icons/icon.ico
          test -s src-tauri/icons/icon.icns
      - name: Validate frontend
        run: |
          bun run check
          bun test
      - name: Validate Rust
        run: |
          cargo fmt --manifest-path src-tauri/Cargo.toml -- --check
          cargo clippy --manifest-path src-tauri/Cargo.toml --all-targets -- -D warnings
          cargo test --manifest-path src-tauri/Cargo.toml

  build:
    name: Build ${{ matrix.os }}-${{ matrix.arch }}
    needs: validate
    strategy:
      fail-fast: false
      matrix:
        include:
          - runner: ubuntu-24.04
            os: linux
            arch: amd64
            suffix: tar.gz
          - runner: ubuntu-24.04-arm
            os: linux
            arch: aarch64
            suffix: tar.gz
          - runner: macos-15-intel
            os: darwin
            arch: amd64
            suffix: tar.gz
          - runner: macos-15
            os: darwin
            arch: aarch64
            suffix: tar.gz
          - runner: windows-2025
            os: windows
            arch: amd64
            suffix: zip
          - runner: windows-11-arm
            os: windows
            arch: aarch64
            suffix: zip
    runs-on: ${{ matrix.runner }}
    timeout-minutes: 60
    steps:
      - uses: actions/checkout@v7
      - uses: oven-sh/setup-bun@v2
        with:
          bun-version: 1.3.14
      - uses: dtolnay/rust-toolchain@stable
      - name: Install Linux dependencies
        if: matrix.os == 'linux'
        run: |
          sudo apt-get update
          sudo apt-get install -y libwebkit2gtk-4.1-dev libappindicator3-dev librsvg2-dev patchelf
      - name: Build GUI
        env:
          RUSTFLAGS: -D warnings
        run: |
          bun install --frozen-lockfile
          bun tauri build --no-bundle
        shell: bash
      - name: Prepare portable directory
        run: >-
          node scripts/prepare-portable.mjs
          --binary "src-tauri/target/release/cpa-gui${{ matrix.os == 'windows' && '.exe' || '' }}"
          --output "release/Easy_CLIProxyAPI-${{ matrix.os }}-${{ matrix.arch }}"
          --os "${{ matrix.os }}"
          --arch "${{ matrix.arch }}"
          --download true
        shell: bash
      - name: Verify archive-only core payload
        shell: bash
        env:
          CORE_DIR: release/Easy_CLIProxyAPI-${{ matrix.os }}-${{ matrix.arch }}/cpa-core
        run: |
          node - <<'NODE'
          const { readdirSync } = require('node:fs');
          const entries = readdirSync(process.env.CORE_DIR, { withFileTypes: true });
          const valid = entries.length === 1
            && entries[0].isFile()
            && /\.(zip|tar\.gz)$/.test(entries[0].name);
          if (!valid) {
            throw new Error(`cpa-core must contain exactly one archive; found: ${entries.map((entry) => entry.name).join(', ')}`);
          }
          NODE
      - name: Archive Unix release
        if: matrix.os != 'windows'
        run: tar -czf "Easy_CLIProxyAPI-${{ matrix.os }}-${{ matrix.arch }}.tar.gz" -C release "Easy_CLIProxyAPI-${{ matrix.os }}-${{ matrix.arch }}"
      - name: Archive Windows release
        if: matrix.os == 'windows'
        shell: pwsh
        run: Compress-Archive -Path "release/Easy_CLIProxyAPI-${{ matrix.os }}-${{ matrix.arch }}" -DestinationPath "Easy_CLIProxyAPI-${{ matrix.os }}-${{ matrix.arch }}.zip"
      - uses: actions/upload-artifact@v7
        with:
          name: Easy_CLIProxyAPI-${{ matrix.os }}-${{ matrix.arch }}
          path: Easy_CLIProxyAPI-${{ matrix.os }}-${{ matrix.arch }}.${{ matrix.suffix }}
          if-no-files-found: error
          retention-days: 14

  publish:
    name: Publish GitHub release
    if: startsWith(github.ref, 'refs/tags/') || inputs.release_tag != ''
    needs: build
    runs-on: ubuntu-24.04
    timeout-minutes: 15
    steps:
      - uses: actions/download-artifact@v8
        with:
          path: artifacts
          merge-multiple: true
      - name: Publish release
        shell: bash
        env:
          GH_TOKEN: ${{ github.token }}
          GH_REPO: ${{ github.repository }}
          RELEASE_TAG: ${{ github.ref_type == 'tag' && github.ref_name || inputs.release_tag }}
          MANUAL_PRERELEASE: ${{ inputs.prerelease }}
        run: |
          set -euo pipefail

          if [[ ! "$RELEASE_TAG" =~ ^v[0-9]+\.[0-9]+\.[0-9]+([.-][0-9A-Za-z.-]+)?$ ]]; then
            echo "Invalid release tag: $RELEASE_TAG" >&2
            exit 1
          fi

          prerelease="$MANUAL_PRERELEASE"
          release_args=(--title "Easy_CLIProxyAPI $RELEASE_TAG" --generate-notes)
          if [[ "$GITHUB_REF_TYPE" == "tag" ]]; then
            release_args+=(--verify-tag)
            if [[ "$RELEASE_TAG" == *-* ]]; then
              prerelease=true
            else
              prerelease=false
            fi
          else
            release_args+=(--target "$GITHUB_SHA")
          fi
          if [[ "$prerelease" == "true" ]]; then
            release_args+=(--prerelease)
          fi

          if gh release view "$RELEASE_TAG" >/dev/null 2>&1; then
            gh release upload "$RELEASE_TAG" artifacts/* --clobber
          else
            gh release create "$RELEASE_TAG" "${release_args[@]}" artifacts/*
          fi