release.yml

name: Build and Release

on:
  push:
    tags:
      - "v*"
  workflow_dispatch:

permissions:
  contents: write

jobs:
  build:
    strategy:
      fail-fast: false
      matrix:
        include:
          - os: ubuntu-latest
            artifact_name: folge-cli-linux-amd64
            package_cmd: zip -r folge-cli-linux-amd64.zip folge-cli
          - os: macos-latest
            artifact_name: folge-cli-macos-arm64
            package_cmd: tar czf folge-cli-macos-arm64.tar.gz folge-cli
          - os: windows-latest
            artifact_name: folge-cli-windows-amd64
            package_cmd: 7z a folge-cli-windows-amd64.zip folge-cli.exe

    runs-on: ${{ matrix.os }}
    name: Build (${{ matrix.os }})

    steps:
      - name: Checkout repository
        uses: actions/checkout@v4

      - name: Install uv
        uses: astral-sh/setup-uv@v4

      - name: Set up Python
        run: uv python install 3.12

      - name: Install Python dependencies
        run: uv sync

      - name: Install PyInstaller
        # NOTE: the version spec must be quoted -- unquoted, ">=6.0" is parsed
        # as shell redirection (both bash and pwsh treat a bare '>' as an
        # output-redirect operator), which silently drops the version pin
        # and writes a stray file named "=6.0" into the checkout.
        run: uv pip install "pyinstaller>=6.0"

      - name: Install system dependencies (Linux)
        if: runner.os == 'Linux'
        run: |
          sudo apt-get update
          sudo apt-get install -y libcairo2-dev libpango1.0-dev libgdk-pixbuf2.0-dev libffi-dev

      - name: Install system dependencies (macOS)
        if: runner.os == 'macOS'
        run: brew install cairo pango gdk-pixbuf libffi

      - name: Build executable with PyInstaller
        run: uv run pyinstaller pyinstaller/folge-cli.spec

      - name: Verify executable
        # Run the binary directly (no "uv run") -- this is the actual
        # contract we're shipping: a standalone artifact that needs
        # neither uv nor a Python install to run.
        run: |
          if [ "${{ runner.os }}" = "Windows" ]; then
            BIN="dist/folge-cli.exe"
          else
            BIN="dist/folge-cli"
          fi
          "$BIN" --version
          "$BIN" --help
        shell: bash

      - name: Package artifact (Linux/macOS)
        if: runner.os != 'Windows'
        run: |
          cd dist
          ${{ matrix.package_cmd }}
        shell: bash

      - name: Package artifact (Windows)
        if: runner.os == 'Windows'
        run: |
          cd dist
          7z a folge-cli-windows-amd64.zip folge-cli.exe
        shell: pwsh

      - name: Upload artifact
        uses: actions/upload-artifact@v4
        with:
          name: ${{ matrix.artifact_name }}
          # Only the packaged archive -- not the raw dist/folge-cli binary,
          # which has the identical name on Linux and macOS and would
          # collide when the release job merges all matrix artifacts
          # into one directory.
          path: dist/${{ matrix.artifact_name }}.*
          if-no-files-found: error
          retention-days: 5

  release:
    needs: build
    runs-on: ubuntu-latest
    if: startsWith(github.ref, 'refs/tags/v')

    steps:
      - name: Download all artifacts
        uses: actions/download-artifact@v4
        with:
          path: artifacts/
          merge-multiple: true

      - name: List artifacts
        run: find artifacts/ -type f | sort

      - name: Create GitHub Release
        uses: softprops/action-gh-release@v2
        with:
          files: |
            artifacts/folge-cli-linux-amd64.zip
            artifacts/folge-cli-macos-arm64.tar.gz
            artifacts/folge-cli-windows-amd64.zip
          generate_release_notes: true
          draft: false
          prerelease: false
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}