release.yml

name: Release

on:
  push:
    tags:
      - "v*"

permissions:
  contents: write

jobs:
  build:
    runs-on: ubuntu-latest
    strategy:
      matrix:
        include:
          - goos: linux
            goarch: amd64
            suffix: linux-amd64
            ext: ""
          - goos: linux
            goarch: arm64
            suffix: linux-arm64
            ext: ""
          - goos: darwin
            goarch: amd64
            suffix: darwin-amd64
            ext: ""
          - goos: darwin
            goarch: arm64
            suffix: darwin-arm64
            ext: ""
          - goos: windows
            goarch: amd64
            suffix: windows-amd64
            ext: ".exe"

    steps:
      - uses: actions/checkout@v4

      - uses: actions/setup-go@v5
        with:
          go-version-file: go.mod

      - name: Build
        env:
          GOOS: ${{ matrix.goos }}
          GOARCH: ${{ matrix.goarch }}
          CGO_ENABLED: "0"
        run: go build -ldflags="-s -w" -o findns-${{ matrix.suffix }}${{ matrix.ext }} ./cmd

      - name: Upload artifact
        uses: actions/upload-artifact@v4
        with:
          name: findns-${{ matrix.suffix }}
          path: findns-${{ matrix.suffix }}${{ matrix.ext }}

  build-slipstream:
    runs-on: ubuntu-latest
    steps:
      - name: Install build deps
        run: |
          sudo apt-get update
          sudo apt-get install -y cmake pkg-config libssl-dev git

      - uses: dtolnay/rust-toolchain@stable

      - name: Clone slipstream-rust
        run: git clone --recursive https://github.com/Mygod/slipstream-rust.git /tmp/slipstream-rust

      - name: Build slipstream-client
        working-directory: /tmp/slipstream-rust
        env:
          PICOQUIC_AUTO_BUILD: "1"
        run: cargo build -p slipstream-client --release

      - name: Upload artifact
        uses: actions/upload-artifact@v4
        with:
          name: slipstream-client-linux-amd64
          path: /tmp/slipstream-rust/target/release/slipstream-client

  bundle-masterdnsvpn-client:
    runs-on: ubuntu-latest
    strategy:
      matrix:
        include:
          - upstream: MasterDnsVPN_Client_Linux_AMD64.tar.gz
            archive: tar
            out: masterdnsvpn-client-linux-amd64
          - upstream: MasterDnsVPN_Client_Linux_ARM64.tar.gz
            archive: tar
            out: masterdnsvpn-client-linux-arm64
          - upstream: MasterDnsVPN_Client_MacOS_AMD64.tar.gz
            archive: tar
            out: masterdnsvpn-client-darwin-amd64
          - upstream: MasterDnsVPN_Client_MacOS_ARM64.tar.gz
            archive: tar
            out: masterdnsvpn-client-darwin-arm64
          - upstream: MasterDnsVPN_Client_Windows_AMD64.zip
            archive: zip
            out: masterdnsvpn-client-windows-amd64.exe
    steps:
      - name: Download upstream MasterDnsVPN client
        env:
          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        run: |
          mkdir -p /tmp/mdvpn
          gh release download --repo masterking32/MasterDnsVPN \
            --pattern '${{ matrix.upstream }}' \
            --dir /tmp/mdvpn

      - name: Extract single client binary
        run: |
          set -eu
          cd /tmp/mdvpn
          if [ "${{ matrix.archive }}" = "tar" ]; then
            tar -xzf '${{ matrix.upstream }}'
          else
            unzip -o '${{ matrix.upstream }}'
          fi
          # Upstream tarballs contain exactly one executable named like
          # MasterDnsVPN_Client_<Platform>_<arch>_<version>[.exe]. Find it
          # by matching the prefix and excluding archive/readme files.
          src=$(find . -maxdepth 1 -type f \
            \( -name 'MasterDnsVPN_Client_*' -a ! -name '*.tar.gz' -a ! -name '*.zip' -a ! -name '*.html' \) \
            | head -n1)
          if [ -z "$src" ]; then
            echo "could not locate extracted MasterDnsVPN client binary" >&2
            ls -la
            exit 1
          fi
          cp "$src" '${{ matrix.out }}'
          chmod +x '${{ matrix.out }}'

      - name: Upload artifact
        uses: actions/upload-artifact@v4
        with:
          name: ${{ matrix.out }}
          path: /tmp/mdvpn/${{ matrix.out }}

  release:
    needs: [build, build-slipstream, bundle-masterdnsvpn-client]
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4

      - uses: actions/download-artifact@v4
        with:
          path: artifacts
          merge-multiple: true

      - name: Stage per-platform release zips
        # Each release zip ships everything a user needs to run findns on
        # that platform: the findns binary (renamed to the canonical
        # findns / findns.exe), the matching masterdnsvpn-client binary,
        # the bundled CIDR list, and a short README. linux-amd64 also
        # includes slipstream-client when the rust build produced one.
        run: |
          set -eu
          mkdir -p out stage
          # Normalise the slipstream artifact name (download-artifact
          # collapses the directory; the file may end up as either
          # slipstream-client or slipstream-client-linux-amd64).
          if [ -f artifacts/slipstream-client ] && [ ! -f artifacts/slipstream-client-linux-amd64 ]; then
            mv artifacts/slipstream-client artifacts/slipstream-client-linux-amd64
          fi

          version="${GITHUB_REF_NAME:-dev}"

          package() {
            os=$1; arch=$2; ext=$3
            name="findns-${os}-${arch}"
            dir="stage/${name}"
            mkdir -p "${dir}"

            cp "artifacts/findns-${os}-${arch}${ext}" "${dir}/findns${ext}"
            cp "artifacts/masterdnsvpn-client-${os}-${arch}${ext}" "${dir}/masterdnsvpn-client${ext}"
            cp scan_ips_public.txt "${dir}/scan_ips_public.txt"

            if [ "${os}-${arch}" = "linux-amd64" ] && [ -f artifacts/slipstream-client-linux-amd64 ]; then
              cp artifacts/slipstream-client-linux-amd64 "${dir}/slipstream-client"
            fi

            chmod +x "${dir}/findns${ext}" "${dir}/masterdnsvpn-client${ext}" 2>/dev/null || true
            [ -f "${dir}/slipstream-client" ] && chmod +x "${dir}/slipstream-client" || true

            python3 .github/release/render_readme.py "${os}" "${arch}" "${ext}" "${version}" "${dir}/README.txt"

            (cd stage && zip -r "../out/${name}.zip" "${name}" >/dev/null)
            ls -la "out/${name}.zip"
          }

          package linux   amd64 ""
          package linux   arm64 ""
          package darwin  amd64 ""
          package darwin  arm64 ""
          package windows amd64 .exe

      - name: Create release
        uses: softprops/action-gh-release@v2
        with:
          files: out/*.zip
          generate_release_notes: true