main.yml

name: Release Platform Builds

permissions:
  contents: write

on:
  push:
    tags:
      - 'v*'
  workflow_dispatch:
    inputs:
      version:
        description: 'Release version (e.g. v3.1.0)'
        required: true
        default: 'v3.1.0'

jobs:
  build-windows:
    name: Windows (x64 + arm64)
    runs-on: windows-latest

    steps:
      - name: Checkout Repository
        uses: actions/checkout@v4

      - name: Setup Node.js
        uses: actions/setup-node@v4
        with:
          node-version: 22

      - name: Install Dependencies
        run: npm install --legacy-peer-deps

      - name: Build Windows Executables
        run: |
          $env:CSC_IDENTITY_AUTO_DISCOVERY = "false"
          $env:WIN_CSC_LINK = ""
          npm run make-icon
          npx vite build
          npx electron-builder --win --config.directories.output=release
        env:
          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          # Bake Supabase + tldraw env vars into the desktop bundle so the
          # installed app actually connects to the cloud. Without these, the
          # built app shows "Sign in" but isSupabaseConfigured is false.
          VITE_SUPABASE_URL: ${{ secrets.VITE_SUPABASE_URL }}
          VITE_SUPABASE_ANON_KEY: ${{ secrets.VITE_SUPABASE_ANON_KEY }}
          VITE_TLDRAW_LICENSE_KEY: ${{ secrets.VITE_TLDRAW_LICENSE_KEY }}
          VITE_OPENROUTER_API_KEY: ${{ secrets.VITE_OPENROUTER_API_KEY }}

      - name: Generate SHA-256 checksums
        shell: pwsh
        run: |
          cd release
          Get-ChildItem -Filter *.exe | ForEach-Object {
            $hash = (Get-FileHash -Algorithm SHA256 $_.FullName).Hash.ToLower()
            "$hash  $($_.Name)" | Out-File -Append -Encoding ascii SHA256SUMS-win.txt
          }
          Get-Content SHA256SUMS-win.txt

      - name: Upload Windows artifacts
        uses: actions/upload-artifact@v4
        with:
          name: windows-release
          path: |
            release/*.exe
            release/latest.yml
            release/SHA256SUMS-win.txt

  build-mac:
    name: macOS (x64 + arm64)
    runs-on: macos-latest

    steps:
      - name: Checkout Repository
        uses: actions/checkout@v4

      - name: Setup Node.js
        uses: actions/setup-node@v4
        with:
          node-version: 22

      - name: Install Dependencies
        run: npm install --legacy-peer-deps

      - name: Build macOS DMG + ZIP
        run: |
          npm run make-icon || true
          npx vite build
          npx electron-builder --mac --config.directories.output=release
        env:
          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          CSC_IDENTITY_AUTO_DISCOVERY: "false"
          VITE_SUPABASE_URL: ${{ secrets.VITE_SUPABASE_URL }}
          VITE_SUPABASE_ANON_KEY: ${{ secrets.VITE_SUPABASE_ANON_KEY }}
          VITE_TLDRAW_LICENSE_KEY: ${{ secrets.VITE_TLDRAW_LICENSE_KEY }}
          VITE_OPENROUTER_API_KEY: ${{ secrets.VITE_OPENROUTER_API_KEY }}

      - name: Generate SHA-256 checksums
        run: |
          cd release
          shasum -a 256 *.dmg *.zip 2>/dev/null > SHA256SUMS-mac.txt || true
          cat SHA256SUMS-mac.txt

      - name: Upload macOS artifacts
        uses: actions/upload-artifact@v4
        with:
          name: mac-release
          path: |
            release/*.dmg
            release/*.zip
            release/SHA256SUMS-mac.txt

  build-linux:
    name: Linux (x64 AppImage)
    runs-on: ubuntu-latest

    steps:
      - name: Checkout Repository
        uses: actions/checkout@v4

      - name: Setup Node.js
        uses: actions/setup-node@v4
        with:
          node-version: 22

      - name: Install Dependencies
        run: npm install --legacy-peer-deps

      - name: Build Linux AppImage
        run: |
          npx vite build
          npx electron-builder --linux --config.directories.output=release
        env:
          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          VITE_SUPABASE_URL: ${{ secrets.VITE_SUPABASE_URL }}
          VITE_SUPABASE_ANON_KEY: ${{ secrets.VITE_SUPABASE_ANON_KEY }}
          VITE_TLDRAW_LICENSE_KEY: ${{ secrets.VITE_TLDRAW_LICENSE_KEY }}
          VITE_OPENROUTER_API_KEY: ${{ secrets.VITE_OPENROUTER_API_KEY }}

      - name: Generate SHA-256 checksums
        run: |
          cd release
          sha256sum *.AppImage 2>/dev/null > SHA256SUMS-linux.txt || true
          cat SHA256SUMS-linux.txt

      - name: Upload Linux artifacts
        uses: actions/upload-artifact@v4
        with:
          name: linux-release
          path: |
            release/*.AppImage
            release/SHA256SUMS-linux.txt

  build-android:
    name: Android APK
    runs-on: ubuntu-latest

    steps:
      - name: Checkout Repository
        uses: actions/checkout@v4

      - name: Setup Node.js
        uses: actions/setup-node@v4
        with:
          node-version: 22

      - name: Setup JDK 21
        uses: actions/setup-java@v4
        with:
          java-version: '21'
          distribution: 'temurin'

      - name: Setup Android SDK
        uses: android-actions/setup-android@v3

      - name: Install Dependencies
        run: npm install --legacy-peer-deps

      - name: Build web app
        run: npx vite build
        env:
          VITE_SUPABASE_URL: ${{ secrets.VITE_SUPABASE_URL }}
          VITE_SUPABASE_ANON_KEY: ${{ secrets.VITE_SUPABASE_ANON_KEY }}
          VITE_TLDRAW_LICENSE_KEY: ${{ secrets.VITE_TLDRAW_LICENSE_KEY }}
          VITE_OPENROUTER_API_KEY: ${{ secrets.VITE_OPENROUTER_API_KEY }}

      - name: Add & sync Capacitor Android platform
        run: |
          npx cap add android
          npx cap sync android

      - name: Build APK
        working-directory: android
        run: |
          chmod +x gradlew
          ./gradlew assembleRelease

      - name: Rename APK
        run: |
          VERSION=$(node -p "require('./package.json').version")
          mv android/app/build/outputs/apk/release/app-release-unsigned.apk \
             android/app/build/outputs/apk/release/Delay-${VERSION}-android.apk

      - name: Generate SHA-256 checksum
        run: |
          cd android/app/build/outputs/apk/release
          sha256sum Delay-*-android.apk > SHA256SUMS-android.txt
          cat SHA256SUMS-android.txt

      - name: Upload Android artifacts
        uses: actions/upload-artifact@v4
        with:
          name: android-release
          path: |
            android/app/build/outputs/apk/release/Delay-*-android.apk
            android/app/build/outputs/apk/release/SHA256SUMS-android.txt

  create-release:
    name: Create GitHub Release
    needs: [build-windows, build-mac, build-linux, build-android]
    runs-on: ubuntu-latest

    steps:
      - name: Download all artifacts
        uses: actions/download-artifact@v4
        with:
          path: artifacts

      - name: Publish GitHub Release
        uses: softprops/action-gh-release@v2
        with:
          tag_name: ${{ inputs.version || github.ref_name }}
          name: ${{ inputs.version || github.ref_name }} — SaaS Edition
          files: |
            artifacts/windows-release/*.exe
            artifacts/windows-release/latest.yml
            artifacts/windows-release/SHA256SUMS-win.txt
            artifacts/mac-release/*.dmg
            artifacts/mac-release/*.zip
            artifacts/mac-release/SHA256SUMS-mac.txt
            artifacts/linux-release/*.AppImage
            artifacts/linux-release/SHA256SUMS-linux.txt
            artifacts/android-release/*.apk
            artifacts/android-release/SHA256SUMS-android.txt
          body: |
            ## Delay ${{ inputs.version || github.ref_name }} — SaaS Edition

            Your second brain for deep work — Notes, Tasks, Calendar, AI, Cloud Sync, and more.

            ### What's New
            - Auth gate (Google / GitHub / email sign-in, or skip to offline)
            - Cloud sync across devices via Supabase
            - Public note sharing with permanent links (Pro)
            - Pricing tiers: Free / Pro ($8/mo) / Max ($18/mo)
            - AI weekly insight on Status page
            - File preview in Vault (image, video, audio, PDF)
            - Voice recordings persist across reloads
            - Smooth page transitions
            - Mac (DMG) + Linux (AppImage) + Windows (NSIS) + Android (APK) builds

            ### Download

            | Platform | File |
            |----------|------|
            | Windows x64 | `Delay-Setup-*-x64.exe` |
            | Windows ARM64 | `Delay-Setup-*-arm64.exe` |
            | macOS Apple Silicon | `Delay-*-arm64.dmg` |
            | macOS Intel | `Delay-*-x64.dmg` |
            | Linux | `Delay-*.AppImage` (chmod +x first) |
            | Android | `Delay-*-android.apk` (enable Unknown Sources) |

            > **Windows SmartScreen warning?** Click **More info → Run anyway**.
            > **Android install:** Settings → Security → Unknown Sources → enable, then open the APK.

            ### Auto-update
            Desktop copies (Windows/macOS/Linux) check for updates automatically.