publish.yml

name: Release and Publish

on:
  push:
    tags:
      - 'v*'
  workflow_dispatch:
    inputs:
      version:
        description: 'Version to publish (leave empty to use pom.xml version)'
        required: false
        type: string
      publish_maven:
        description: 'Publish to Maven Central'
        required: false
        type: boolean
        default: false

jobs:
  build:
    name: Build Artifacts
    runs-on: ubuntu-latest
    outputs:
      version: ${{ steps.version.outputs.version }}
    
    steps:
      - name: Checkout repository
        uses: actions/checkout@v4

      - name: Set up JDK 11
        uses: actions/setup-java@v4
        with:
          java-version: '11'
          distribution: 'temurin'
          cache: maven

      - name: Extract version from tag or pom.xml
        id: version
        run: |
          if [[ "${{ github.ref }}" == refs/tags/v* ]]; then
            VERSION="${GITHUB_REF#refs/tags/v}"
          elif [[ -n "${{ inputs.version }}" ]]; then
            VERSION="${{ inputs.version }}"
          else
            VERSION=$(mvn help:evaluate -Dexpression=project.version -q -DforceStdout)
          fi
          echo "version=$VERSION" >> $GITHUB_OUTPUT
          echo "Version: $VERSION"

      - name: Update pom.xml version
        run: mvn versions:set "-DnewVersion=${{ steps.version.outputs.version }}" -DgenerateBackupPoms=false

      - name: Run tests
        run: mvn -B test

      - name: Build JAR
        run: mvn -B package -DskipTests

      - name: Rename shaded JAR
        run: |
          mv target/cfsolver-${{ steps.version.outputs.version }}.jar target/cfsolver-${{ steps.version.outputs.version }}-all.jar

      - name: Upload JAR artifact
        uses: actions/upload-artifact@v4
        with:
          name: jar-artifacts
          path: |
            target/cfsolver-*-all.jar
          retention-days: 7

  build-exe:
    name: Build Windows EXE
    runs-on: windows-latest
    needs: build
    
    steps:
      - name: Checkout repository
        uses: actions/checkout@v4

      - name: Set up JDK 21 (GraalVM)
        uses: graalvm/setup-graalvm@v1
        with:
          java-version: '21'
          distribution: 'graalvm'
          github-token: ${{ secrets.GITHUB_TOKEN }}

      - name: Update pom.xml version
        run: mvn versions:set "-DnewVersion=${{ needs.build.outputs.version }}" -DgenerateBackupPoms=false

      - name: Build JAR
        run: mvn -B package -DskipTests

      - name: Build native executable
        run: |
          native-image -jar target/cfsolver-${{ needs.build.outputs.version }}.jar `
            --no-fallback `
            --enable-url-protocols=http,https `
            -H:+ReportExceptionStackTraces `
            -o cfsolver
        shell: pwsh

      - name: Upload EXE artifact
        uses: actions/upload-artifact@v4
        with:
          name: exe-artifacts
          path: cfsolver.exe
          retention-days: 7
          if-no-files-found: error

  release:
    name: Create Release Draft
    runs-on: ubuntu-latest
    needs: [build, build-exe]
    if: startsWith(github.ref, 'refs/tags/v')

    permissions:
      contents: write
    
    steps:
      - name: Checkout code
        uses: actions/checkout@v4
        with:
          fetch-depth: 0

      - name: Generate changelog
        id: changelog
        run: |
          # Get the previous tag
          PREV_TAG=$(git describe --tags --abbrev=0 HEAD^ 2>/dev/null || echo "")
          
          if [ -n "$PREV_TAG" ]; then
            echo "Getting changes since $PREV_TAG"
            CHANGELOG=$(git log --pretty=format:"- %s (%h)" $PREV_TAG..HEAD)
          else
            echo "Getting all commits"
            CHANGELOG=$(git log --pretty=format:"- %s (%h)")
          fi
          
          # Output for use in release
          {
            echo 'body<<EOF'
            echo "## What's Changed"
            echo ""
            echo "$CHANGELOG"
            echo EOF
          } >> $GITHUB_OUTPUT

      - name: Download JAR artifacts
        uses: actions/download-artifact@v4
        with:
          name: jar-artifacts
          path: artifacts

      - name: Download EXE artifacts
        uses: actions/download-artifact@v4
        with:
          name: exe-artifacts
          path: artifacts

      - name: List artifacts
        run: ls -la artifacts/

      - name: Create Release Draft
        uses: softprops/action-gh-release@v2
        with:
          draft: true
          name: CFSolver v${{ needs.build.outputs.version }}
          body: ${{ steps.changelog.outputs.body }}
          files: |
            artifacts/cfsolver-*-all.jar
            artifacts/cfsolver.exe
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

  publish:
    name: Publish to Maven Central
    runs-on: ubuntu-latest
    needs: [build]
    if: startsWith(github.ref, 'refs/tags/v') || (github.event_name == 'workflow_dispatch' && inputs.publish_maven == true)
    
    steps:
      - name: Checkout repository
        uses: actions/checkout@v4

      - name: Set up JDK 11
        uses: actions/setup-java@v4
        with:
          java-version: '11'
          distribution: 'temurin'
          cache: maven
          server-id: central
          server-username: MAVEN_USERNAME
          server-password: MAVEN_PASSWORD

      - name: Generate GPG key
        run: |
          # Create GPG key configuration
          cat > gpg-key-config <<EOF
          %echo Generating GPG key
          Key-Type: RSA
          Key-Length: 4096
          Subkey-Type: RSA
          Subkey-Length: 4096
          Name-Real: CloudFlyer CI
          Name-Email: ci@cloudflyer.zetx.site
          Expire-Date: 0
          %no-protection
          %commit
          %echo Done
          EOF
          
          # Generate the key
          gpg --batch --generate-key gpg-key-config
          
          # Get the key ID
          GPG_KEY_ID=$(gpg --list-secret-keys --keyid-format=long | grep sec | head -1 | awk '{print $2}' | cut -d'/' -f2)
          echo "GPG_KEY_ID=$GPG_KEY_ID" >> $GITHUB_ENV
          
          # Upload public key to keyserver
          gpg --keyserver keyserver.ubuntu.com --send-keys $GPG_KEY_ID || true
          gpg --keyserver keys.openpgp.org --send-keys $GPG_KEY_ID || true
          
          # Configure GPG for Maven
          echo "allow-loopback-pinentry" >> ~/.gnupg/gpg-agent.conf
          gpgconf --kill gpg-agent

      - name: Update pom.xml version
        run: mvn versions:set -DnewVersion=${{ needs.build.outputs.version }} -DgenerateBackupPoms=false

      - name: Build and verify
        run: mvn -B clean verify -DskipTests -Dgpg.keyname=${{ env.GPG_KEY_ID }}

      - name: Publish to Maven Central
        run: mvn -B deploy -DskipTests -Dgpg.keyname=${{ env.GPG_KEY_ID }}
        env:
          MAVEN_USERNAME: ${{ secrets.MAVEN_CENTRAL_USERNAME }}
          MAVEN_PASSWORD: ${{ secrets.MAVEN_CENTRAL_PASSWORD }}