name: Gitea Android APK

on: [push]

jobs:
  build:
    runs-on: ubuntu-latest
    steps:
      - name: Build Android APK
        env:
          CLONE_TOKEN: ${{ secrets.TMUX_GITEA_TOKEN }}
          ANDROID_KEYSTORE_BASE64: ${{ secrets.ANDROID_KEYSTORE_BASE64 }}
          ANDROID_KEYSTORE_PASSWORD: ${{ secrets.ANDROID_KEYSTORE_PASSWORD }}
          ANDROID_KEY_ALIAS: ${{ secrets.ANDROID_KEY_ALIAS }}
          ANDROID_KEY_PASSWORD: ${{ secrets.ANDROID_KEY_PASSWORD }}
        run: |
          set -eu

          install_packages() {
            if command -v apt-get >/dev/null 2>&1; then
              apt-get update
              apt-get install -y "$@"
            elif command -v apk >/dev/null 2>&1; then
              apk add --no-cache "$@"
            elif command -v dnf >/dev/null 2>&1; then
              dnf install -y "$@"
            else
              echo "No supported package manager found." >&2
              exit 1
            fi
          }

          if ! command -v git >/dev/null 2>&1 || ! command -v curl >/dev/null 2>&1 || ! command -v unzip >/dev/null 2>&1; then
            install_packages git curl unzip
          fi

          REF="${GITHUB_REF:-}"
          REF_NAME="${GITHUB_REF_NAME:-}"
          if [ -z "${REF_NAME}" ]; then
            REF_NAME="${REF##*/}"
          fi
          if [ "${REF#refs/tags/v}" != "${REF}" ]; then
            if [ -z "${CLONE_TOKEN:-}" ]; then
              echo "Gitea release publishing requires TMUX_GITEA_TOKEN." >&2
              exit 1
            fi

            TAG="${REF_NAME}"
            VERSION_NAME="${TAG#v}"
            MAJOR="$(printf '%s' "${VERSION_NAME}" | cut -d. -f1)"
            MINOR="$(printf '%s' "${VERSION_NAME}" | cut -d. -f2)"
            PATCH="$(printf '%s' "${VERSION_NAME}" | cut -d. -f3)"
            VERSION_CODE=$((MAJOR * 1000000 + MINOR * 1000 + PATCH))
            GITHUB_APK_URL="https://github.com/neatstudio/tmux-browser-android/releases/download/${TAG}/tmux-android.apk"

            mkdir -p release
            ATTEMPT=1
            while [ "${ATTEMPT}" -le 30 ]; do
              if curl -fsSL "${GITHUB_APK_URL}" -o release/tmux-android.apk; then
                break
              fi
              rm -f release/tmux-android.apk
              echo "Waiting for GitHub release ${TAG} (${ATTEMPT}/30)..."
              sleep 10
              ATTEMPT=$((ATTEMPT + 1))
            done
            if [ ! -s release/tmux-android.apk ]; then
              echo "GitHub release APK unavailable for ${TAG}." >&2
              exit 1
            fi

            SHA256="$(sha256sum release/tmux-android.apk | cut -d ' ' -f1)"
            APK_URL="https://gitea.neatcn.com/tmux/tmux-browser-android/releases/download/${TAG}/tmux-android.apk"
            RELEASE_PAGE_URL="https://gitea.neatcn.com/tmux/tmux-browser-android/releases/tag/${TAG}"
            cat > release/latest.json << JSON
            {
              "versionCode": ${VERSION_CODE},
              "versionName": "${VERSION_NAME}",
              "apkUrl": "${APK_URL}",
              "sha256": "${SHA256}",
              "releasePageUrl": "${RELEASE_PAGE_URL}",
              "minSdk": 26
            }
          JSON

            API_ROOT="https://gitea.neatcn.com/api/v1/repos/tmux/tmux-browser-android"
            RELEASE_BODY='{"tag_name":"'"${TAG}"'","target_commitish":"main","name":"tmux Android '"${VERSION_NAME}"'","body":"Android APK for tmux-ui remote testing.","draft":false,"prerelease":false}'
            if ! curl -fsSL -X POST \
              -H "Authorization: token ${CLONE_TOKEN}" \
              -H "Content-Type: application/json" \
              -d "${RELEASE_BODY}" \
              "${API_ROOT}/releases" \
              -o /tmp/gitea-release.json; then
              curl -fsSL -H "Authorization: token ${CLONE_TOKEN}" \
                "${API_ROOT}/releases/tags/${TAG}" \
                -o /tmp/gitea-release.json
            fi
            RELEASE_ID="$(sed -n 's/.*"id":\([0-9][0-9]*\).*/\1/p' /tmp/gitea-release.json | head -1)"
            if [ -z "${RELEASE_ID}" ]; then
              echo "Cannot resolve Gitea release id for ${TAG}." >&2
              exit 1
            fi
            curl -fsSL -X POST -H "Authorization: token ${CLONE_TOKEN}" \
              -F "attachment=@release/tmux-android.apk;type=application/vnd.android.package-archive" \
              "${API_ROOT}/releases/${RELEASE_ID}/assets?name=tmux-android.apk" \
              -o /tmp/gitea-apk-asset.json
            curl -fsSL -X POST -H "Authorization: token ${CLONE_TOKEN}" \
              -F "attachment=@release/latest.json;type=application/json" \
              "${API_ROOT}/releases/${RELEASE_ID}/assets?name=latest.json" \
              -o /tmp/gitea-latest-asset.json
            echo "Mirrored GitHub release ${TAG} to Gitea."
            echo "versionCode=${VERSION_CODE}"
            echo "versionName=${VERSION_NAME}"
            echo "sha256=${SHA256}"
            exit 0
          fi

          if ! command -v java >/dev/null 2>&1; then
            if command -v apk >/dev/null 2>&1; then
              install_packages openjdk17-jdk
            elif command -v dnf >/dev/null 2>&1; then
              install_packages java-17-openjdk-devel
            else
              install_packages openjdk-17-jdk-headless
            fi
          fi
          java -version

          WORKDIR="${PWD}/source"
          rm -rf "${WORKDIR}"
          SERVER_URL="${GITHUB_SERVER_URL:-https://gitea.neatcn.com}"
          REPOSITORY="${GITHUB_REPOSITORY:-tmux/tmux-browser-android}"
          if [ -n "${CLONE_TOKEN:-}" ]; then
            AUTH_SERVER_URL="$(printf '%s' "${SERVER_URL}" | sed "s#https://#https://gouki:${CLONE_TOKEN}@#")"
            git clone "${AUTH_SERVER_URL}/${REPOSITORY}.git" "${WORKDIR}"
          else
            git clone "${SERVER_URL}/${REPOSITORY}.git" "${WORKDIR}"
          fi
          cd "${WORKDIR}"
          git checkout "${GITHUB_SHA:-main}"

          export GRADLE_HOME="${PWD}/.ci/gradle-8.10.2"
          mkdir -p .ci
          if [ ! -x "${GRADLE_HOME}/bin/gradle" ]; then
            curl -fsSL -o .ci/gradle.zip https://services.gradle.org/distributions/gradle-8.10.2-bin.zip
            unzip -q .ci/gradle.zip -d .ci
          fi
          export PATH="${GRADLE_HOME}/bin:${PATH}"

          export ANDROID_HOME="${PWD}/.ci/android-sdk"
          export ANDROID_SDK_ROOT="${ANDROID_HOME}"
          export CMDLINE_TOOLS="${ANDROID_HOME}/cmdline-tools/latest"
          if [ ! -x "${CMDLINE_TOOLS}/bin/sdkmanager" ]; then
            mkdir -p "${ANDROID_HOME}/cmdline-tools"
            curl -fsSL -o .ci/android-tools.zip https://dl.google.com/android/repository/commandlinetools-linux-11076708_latest.zip
            unzip -q .ci/android-tools.zip -d "${ANDROID_HOME}/cmdline-tools"
            mv "${ANDROID_HOME}/cmdline-tools/cmdline-tools" "${CMDLINE_TOOLS}"
          fi
          export PATH="${CMDLINE_TOOLS}/bin:${ANDROID_HOME}/platform-tools:${PATH}"

          yes | sdkmanager --licenses >/dev/null || true
          sdkmanager "platforms;android-35" "build-tools;35.0.0" "platform-tools"

          REF="${GITHUB_REF:-}"
          REF_NAME="${GITHUB_REF_NAME:-}"
          if [ -z "${REF_NAME}" ]; then
            REF_NAME="${REF##*/}"
          fi
          PUBLISH_RELEASE=0
          if [ "${REF#refs/tags/v}" != "${REF}" ]; then
            PUBLISH_RELEASE=1
            VERSION_NAME="${REF_NAME#v}"
            MAJOR="$(printf '%s' "${VERSION_NAME}" | cut -d. -f1)"
            MINOR="$(printf '%s' "${VERSION_NAME}" | cut -d. -f2)"
            PATCH="$(printf '%s' "${VERSION_NAME}" | cut -d. -f3)"
            VERSION_CODE=$((MAJOR * 1000000 + MINOR * 1000 + PATCH))
          else
            VERSION_NAME="0.1.${GITHUB_RUN_NUMBER:-0}"
            VERSION_CODE=$((3000 + ${GITHUB_RUN_NUMBER:-0}))
          fi

          SIGNED=false
          if [ -n "${ANDROID_KEYSTORE_BASE64:-}" ]; then
            echo "${ANDROID_KEYSTORE_BASE64}" | base64 -d > release.jks
            {
              echo "storeFile=release.jks"
              echo "storePassword=${ANDROID_KEYSTORE_PASSWORD}"
              echo "keyAlias=${ANDROID_KEY_ALIAS}"
              echo "keyPassword=${ANDROID_KEY_PASSWORD}"
            } > signing.properties
            SIGNED=true
          fi

          if [ "${PUBLISH_RELEASE}" = "1" ] && [ "${SIGNED}" != "true" ]; then
            echo "Gitea release publishing requires ANDROID_KEYSTORE_BASE64 and signing secrets." >&2
            exit 1
          fi
          if [ "${PUBLISH_RELEASE}" = "1" ] && [ -z "${CLONE_TOKEN:-}" ]; then
            echo "Gitea release publishing requires TMUX_GITEA_TOKEN." >&2
            exit 1
          fi

          if [ "${SIGNED}" = "true" ]; then
            BUILD_TASK=":app:assembleRelease"
          else
            BUILD_TASK=":app:assembleDebug"
          fi
          gradle "${BUILD_TASK}" \
            -PversionCode="${VERSION_CODE}" \
            -PversionName="${VERSION_NAME}" \
            -PrepoSlug="neatstudio/tmux-browser-android"

          mkdir -p release
          APK_PATH="$(find app/build/outputs/apk -name '*.apk' | sort | tail -n 1)"
          cp "${APK_PATH}" release/tmux-android.apk
          cp "${APK_PATH}" "release/tmux-android-${VERSION_NAME}.apk"
          SHA256="$(sha256sum release/tmux-android.apk | awk '{print $1}')"
          TAG="v${VERSION_NAME}"
          APK_URL="https://gitea.neatcn.com/tmux/tmux-browser-android/releases/download/${TAG}/tmux-android.apk"
          RELEASE_PAGE_URL="https://gitea.neatcn.com/tmux/tmux-browser-android/releases/tag/${TAG}"
          cat > release/latest.json << JSON
          {
            "versionCode": ${VERSION_CODE},
            "versionName": "${VERSION_NAME}",
            "apkUrl": "${APK_URL}",
            "sha256": "${SHA256}",
            "releasePageUrl": "${RELEASE_PAGE_URL}",
            "minSdk": 26
          }
          JSON
          ls -lh release/tmux-android.apk release/latest.json
          sha256sum release/tmux-android.apk

          if [ "${PUBLISH_RELEASE}" != "1" ]; then
            echo "Gitea main build completed as compile check."
            exit 0
          fi

          API_ROOT="https://gitea.neatcn.com/api/v1/repos/tmux/tmux-browser-android"
          RELEASE_BODY='{"tag_name":"'"${TAG}"'","target_commitish":"main","name":"tmux Android '"${VERSION_NAME}"'","body":"Android APK for tmux-ui remote testing.","draft":false,"prerelease":false}'
          if ! curl -fsSL -X POST \
            -H "Authorization: token ${CLONE_TOKEN}" \
            -H "Content-Type: application/json" \
            -d "${RELEASE_BODY}" \
            "${API_ROOT}/releases" \
            -o /tmp/gitea-release.json; then
            curl -fsSL -H "Authorization: token ${CLONE_TOKEN}" \
              "${API_ROOT}/releases/tags/${TAG}" \
              -o /tmp/gitea-release.json
          fi
          RELEASE_ID="$(sed -n 's/.*"id":\([0-9][0-9]*\).*/\1/p' /tmp/gitea-release.json | head -1)"
          if [ -z "${RELEASE_ID}" ]; then
            echo "Cannot resolve Gitea release id." >&2
            cat /tmp/gitea-release.json >&2
            exit 1
          fi
          curl -fsSL -X POST -H "Authorization: token ${CLONE_TOKEN}" \
            -F "attachment=@release/tmux-android.apk;type=application/vnd.android.package-archive" \
            "${API_ROOT}/releases/${RELEASE_ID}/assets?name=tmux-android.apk" \
            -o /tmp/gitea-apk-asset.json
          curl -fsSL -X POST -H "Authorization: token ${CLONE_TOKEN}" \
            -F "attachment=@release/latest.json;type=application/json" \
            "${API_ROOT}/releases/${RELEASE_ID}/assets?name=latest.json" \
            -o /tmp/gitea-latest-asset.json
          echo "Published Gitea release ${TAG}."