release.yml

name: Release Driftfin

# Fork-owned release pipeline. Builds the three targets Driftfin cares about
# (Web, Windows, iOS-unsigned) and publishes a GitHub Release with the binaries.
# The upstream Fladder pipeline (build.yml.disabled) is disabled — it needs
# secrets (Android keystore, Play Console, a GitHub App) this fork does not have.
#
# To cut a release:  git tag vX.Y.Z && git push origin vX.Y.Z  (see CLAUDE.md → Releases)
# Or run manually from the Actions tab (workflow_dispatch) for a dry build.

on:
  push:
    tags: ["v*"]
  workflow_dispatch:

permissions:
  contents: write

concurrency:
  group: release-${{ github.ref }}
  cancel-in-progress: true

jobs:
  version:
    runs-on: ubuntu-latest
    outputs:
      version: ${{ steps.v.outputs.version }}
    steps:
      - uses: actions/checkout@v4
      - id: v
        shell: bash
        run: |
          if [[ "${GITHUB_REF}" == refs/tags/* ]]; then
            V="${GITHUB_REF_NAME#v}"
          else
            V="$(grep '^version:' pubspec.yaml | cut -d: -f2 | cut -d+ -f1 | tr -d ' ')-dev"
          fi
          echo "version=$V" >> "$GITHUB_OUTPUT"
          echo "Driftfin version: $V"

  web:
    needs: version
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: subosito/flutter-action@v2
        with:
          flutter-version-file: .fvmrc
          cache: true
      - run: flutter pub get
      - run: flutter build web --release --build-number=${{ github.run_number }}
      - name: Zip web bundle
        run: cd build/web && zip -r "../../Driftfin-Web-${{ needs.version.outputs.version }}.zip" .
      - uses: actions/upload-artifact@v4
        with:
          name: web
          path: Driftfin-Web-*.zip

  windows:
    needs: version
    runs-on: windows-2022
    steps:
      - uses: actions/checkout@v4
      - uses: subosito/flutter-action@v2
        with:
          flutter-version-file: .fvmrc
          cache: true
      - run: flutter pub get
      - run: flutter build windows --release --build-number=${{ github.run_number }}
      - name: Zip Windows bundle (portable)
        run: Compress-Archive -Path build/windows/x64/runner/Release/* -DestinationPath "Driftfin-Windows-${{ needs.version.outputs.version }}.zip"
      - name: Compile Inno Setup installer
        uses: Minionguyjpro/Inno-Setup-Action@v1.2.2
        with:
          path: windows/windows_setup.iss
          options: /O+ /DDRIFTFIN_VERSION="${{ needs.version.outputs.version }}"
      - name: Rename installer
        run: Move-Item windows\Output\driftfin_setup.exe "Driftfin-Windows-${{ needs.version.outputs.version }}-Setup.exe"
      - uses: actions/upload-artifact@v4
        with:
          name: windows
          path: |
            Driftfin-Windows-*.zip
            Driftfin-Windows-*-Setup.exe

  # Deploys the landing page (site/) at the Pages root and the web app under
  # /app/ (https://hamadtheironside.github.io/Driftfin/ and .../Driftfin/app/).
  # The app must use --base-href "/Driftfin/app/" because it's served from that
  # subpath; without it Flutter requests assets from "/" and the page renders blank.
  pages:
    needs: version
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: subosito/flutter-action@v2
        with:
          flutter-version-file: .fvmrc
          cache: true
      - run: flutter pub get
      - run: flutter build web --release --base-href "/Driftfin/app/" --build-number=${{ github.run_number }}
      - name: Assemble Pages publish dir (landing site + app)
        run: |
          mkdir -p dist-pages/app
          cp -r site/. dist-pages/
          cp -r build/web/. dist-pages/app/
      # keep_files: true — this branch also hosts the Jellyfin plugin-repository
      # manifest (deployed by plugin.yaml under /jellyfin-plugin/); don't delete it.
      - name: Deploy to GitHub Pages
        if: startsWith(github.ref, 'refs/tags/')
        uses: peaceiris/actions-gh-pages@v4
        with:
          github_token: ${{ secrets.GITHUB_TOKEN }}
          publish_dir: ./dist-pages
          keep_files: true

  ios:
    needs: version
    runs-on: macos-latest
    steps:
      - uses: actions/checkout@v4
      - uses: subosito/flutter-action@v2
        with:
          flutter-version-file: .fvmrc
          cache: true
      - run: flutter pub get
      - name: Build iOS (unsigned)
        run: flutter build ios --release --no-codesign --flavor production --build-number=${{ github.run_number }}
      - name: Package unsigned .ipa
        run: |
          cd build/ios/iphoneos
          mkdir -p Payload
          cp -R Runner.app Payload/Runner.app
          zip -qr "../../../Driftfin-iOS-${{ needs.version.outputs.version }}-unsigned.ipa" Payload
      - uses: actions/upload-artifact@v4
        with:
          name: ios
          path: Driftfin-iOS-*.ipa

  # Ships two APK sets per ABI:
  #  - release (AOT, fast) — the download most users want. Signed with your own key
  #    when the KEYSTORE_BASE_64 secret + passwords are set; otherwise app/build.gradle
  #    falls back to the debug key so the build still succeeds (debug-signed release).
  #  - debug (`-debug` suffix) — slower, but has Flutter assertions on and readable
  #    logs; handy for reproducing/diagnosing bug reports. Doubles this job's runtime.
  android:
    needs: version
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: actions/setup-java@v4
        with:
          distribution: temurin
          java-version: "17"
      - uses: subosito/flutter-action@v2
        with:
          flutter-version-file: .fvmrc
          cache: true
      - name: Configure release signing (if secrets present)
        env:
          KEYSTORE_BASE_64: ${{ secrets.KEYSTORE_BASE_64 }}
          RELEASE_KEYSTORE_PASSWORD: ${{ secrets.RELEASE_KEYSTORE_PASSWORD }}
          RELEASE_KEYSTORE_ALIAS: ${{ secrets.RELEASE_KEYSTORE_ALIAS }}
          RELEASE_KEY_PASSWORD: ${{ secrets.RELEASE_KEY_PASSWORD }}
        run: |
          if [ -n "$KEYSTORE_BASE_64" ]; then
            echo "$KEYSTORE_BASE_64" | base64 -d > android/app/keystore.jks
            printf 'storePassword=%s\nkeyPassword=%s\nkeyAlias=%s\n' \
              "$RELEASE_KEYSTORE_PASSWORD" "$RELEASE_KEY_PASSWORD" "$RELEASE_KEYSTORE_ALIAS" \
              > android/app/key.properties
            echo "Release keystore configured — APKs will be release-signed."
          else
            echo "No KEYSTORE_BASE_64 secret set — release APKs will be debug-signed."
          fi
      - run: flutter pub get
      - name: Build Android APKs (release)
        # checkProductionReleaseDuplicateClasses (Jetifier) flakes intermittently; retry once.
        uses: nick-fields/retry@v3
        with:
          timeout_minutes: 30
          max_attempts: 2
          command: flutter build apk --release --split-per-abi --flavor production --build-number=${{ github.run_number }}
      - name: Build Android APKs (debug)
        # checkProductionDebugDuplicateClasses (Jetifier) flakes intermittently; retry once.
        uses: nick-fields/retry@v3
        with:
          timeout_minutes: 30
          max_attempts: 2
          command: flutter build apk --debug --split-per-abi --flavor production --build-number=${{ github.run_number }}
      - name: Collect APKs
        run: |
          mkdir -p dist-apk
          for abi in armeabi-v7a arm64-v8a x86_64; do
            cp "build/app/outputs/flutter-apk/app-${abi}-production-release.apk" \
               "dist-apk/Driftfin-Android-${{ needs.version.outputs.version }}-${abi}.apk" || true
            cp "build/app/outputs/flutter-apk/app-${abi}-production-debug.apk" \
               "dist-apk/Driftfin-Android-${{ needs.version.outputs.version }}-${abi}-debug.apk" || true
          done
      - uses: actions/upload-artifact@v4
        with:
          name: android
          path: dist-apk/*.apk

  macos_desktop:
    needs: version
    runs-on: macos-latest
    steps:
      - uses: actions/checkout@v4
      - uses: subosito/flutter-action@v2
        with:
          flutter-version-file: .fvmrc
          cache: true
      - run: flutter pub get
      - run: flutter build macos --release --flavor production --build-number=${{ github.run_number }}
      - name: Zip .app
        run: |
          APP=$(find build/macos/Build/Products -maxdepth 2 -name "*.app" | head -1)
          echo "Packaging: $APP"
          ditto -c -k --keepParent "$APP" "Driftfin-macOS-${{ needs.version.outputs.version }}.zip"
      - uses: actions/upload-artifact@v4
        with:
          name: macos
          path: Driftfin-macOS-*.zip

  linux:
    needs: version
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: subosito/flutter-action@v2
        with:
          flutter-version-file: .fvmrc
          cache: true
      - name: Install Linux build deps
        run: |
          sudo apt-get update -y
          sudo apt-get install -y ninja-build libgtk-3-dev libmpv-dev patchelf cmake clang libfuse2 libcurl4-openssl-dev
      - run: flutter pub get
      - run: flutter build linux --release --build-number=${{ github.run_number }}
      - name: Zip bundle
        run: cd build/linux/x64/release/bundle && zip -r "$GITHUB_WORKSPACE/Driftfin-Linux-${{ needs.version.outputs.version }}.zip" .
      - uses: actions/upload-artifact@v4
        with:
          name: linux
          path: Driftfin-Linux-*.zip

  release:
    needs: [version, web, windows, ios, android, macos_desktop, linux]
    # Publish even if one platform fails, but only for real tag pushes.
    if: always() && startsWith(github.ref, 'refs/tags/')
    runs-on: ubuntu-latest
    steps:
      - uses: actions/download-artifact@v4
        with:
          path: dist
          merge-multiple: true
      - name: List artifacts
        run: ls -R dist || echo "(no artifacts)"
      - uses: softprops/action-gh-release@v2
        with:
          name: Driftfin ${{ needs.version.outputs.version }}
          tag_name: ${{ github.ref_name }}
          generate_release_notes: true
          prerelease: ${{ contains(github.ref_name, 'nightly') }}
          fail_on_unmatched_files: false
          files: dist/**/*
          body: |
            **Driftfin ${{ needs.version.outputs.version }}** — a cross-platform Jellyfin client.

            Driftfin is a fork of [Fladder](https://github.com/DonutWare/Fladder) by DonutWare, continued under the same **GPL-3.0** license. All credit for the original application goes to the Fladder authors.

            ### Downloads
            - **Web** (`Driftfin-Web-*.zip`) — unzip and serve behind any static host; open in a browser.
            - **Windows installer** (`Driftfin-Windows-*-Setup.exe`) — recommended; installs to your user profile with Start Menu shortcuts.
            - **Windows portable** (`Driftfin-Windows-*.zip`) — unzip and run `driftfin.exe`; supports in-app self-update.
            - **iOS** (`Driftfin-iOS-*-unsigned.ipa`) — **unsigned** (no Apple Developer cert in CI); sideload with AltStore / Sideloadly or re-sign yourself.
            - **Android** (`Driftfin-Android-*.apk`) — **release** build (AOT-optimized); the recommended download. Install the APK matching your device's ABI. Signed with the project release key when configured, otherwise debug-signed.
            - **Android debug** (`Driftfin-Android-*-debug.apk`) — slower debug build with assertions and verbose logs; only grab this if you're reproducing a bug for a report.
            - **macOS** (`Driftfin-macOS-*.zip`) — unsigned `.app`; unzip and run (you may need to allow it in Gatekeeper).
            - **Linux** (`Driftfin-Linux-*.zip`) — portable bundle; needs `libmpv` (`sudo apt install libmpv-dev`). Unzip and run `driftfin`.