release.yml

name: Release

on:
  push:
    tags:
      - 'v*'

permissions:
  contents: write

env:
  CARGO_TERM_COLOR: always

jobs:
  # ── egui Desktop: macOS (ARM64) ──
  build-macos:
    name: egui Desktop — macOS (ARM64)
    runs-on: macos-14
    steps:
      - uses: actions/checkout@v4
      - uses: dtolnay/rust-toolchain@stable
      - uses: actions/cache@v4
        with:
          path: |
            ~/.cargo/registry
            ~/.cargo/git
            target
          key: macos-arm64-cargo-${{ hashFiles('**/Cargo.lock') }}

      - name: Build egui desktop
        run: cargo build --release -p zipherx-gui

      - name: Build CLI
        run: cargo build --release -p zipherx-cli

      - name: Strip binaries
        run: |
          strip target/release/zipherx-gui
          strip target/release/zipherx-cli

      - name: Package
        run: |
          mkdir -p dist
          cp target/release/zipherx-gui dist/zipherx-gui-macos-arm64
          cp target/release/zipherx-cli dist/zipherx-cli-macos-arm64

      - name: Upload artifacts
        uses: actions/upload-artifact@v4
        with:
          name: macos-arm64
          path: dist/

  # ── egui Desktop: Linux (x86_64) ──
  build-linux:
    name: egui Desktop — Linux (x86_64)
    runs-on: ubuntu-22.04
    steps:
      - uses: actions/checkout@v4
      - uses: dtolnay/rust-toolchain@stable
      - uses: actions/cache@v4
        with:
          path: |
            ~/.cargo/registry
            ~/.cargo/git
            target
          key: linux-x64-cargo-${{ hashFiles('**/Cargo.lock') }}

      - name: Install system dependencies
        run: sudo apt-get update && sudo apt-get install -y pkg-config libssl-dev

      - name: Build egui desktop
        run: cargo build --release -p zipherx-gui

      - name: Build CLI
        run: cargo build --release -p zipherx-cli

      - name: Strip binaries
        run: |
          strip target/release/zipherx-gui
          strip target/release/zipherx-cli

      - name: Package
        run: |
          mkdir -p dist
          cp target/release/zipherx-gui dist/zipherx-gui-linux-x86_64
          cp target/release/zipherx-cli dist/zipherx-cli-linux-x86_64

      - name: Upload artifacts
        uses: actions/upload-artifact@v4
        with:
          name: linux-x86_64
          path: dist/

  # ── egui Desktop: Windows (x86_64) ──
  build-windows:
    name: egui Desktop — Windows (x86_64)
    runs-on: windows-latest
    steps:
      - uses: actions/checkout@v4
      - uses: dtolnay/rust-toolchain@stable
      - uses: actions/cache@v4
        with:
          path: |
            ~/.cargo/registry
            ~/.cargo/git
            target
          key: windows-x64-cargo-${{ hashFiles('**/Cargo.lock') }}

      - name: Build egui desktop
        run: cargo build --release -p zipherx-gui

      - name: Build CLI
        run: cargo build --release -p zipherx-cli

      - name: Package
        shell: bash
        run: |
          mkdir -p dist
          cp target/release/zipherx-gui.exe dist/zipherx-gui-windows-x86_64.exe
          cp target/release/zipherx-cli.exe dist/zipherx-cli-windows-x86_64.exe

      - name: Upload artifacts
        uses: actions/upload-artifact@v4
        with:
          name: windows-x86_64
          path: dist/

  # ── Android APK ──
  build-android:
    name: Android APK
    runs-on: ubuntu-22.04
    steps:
      - uses: actions/checkout@v4
      - uses: dtolnay/rust-toolchain@stable
        with:
          targets: aarch64-linux-android,x86_64-linux-android

      - name: Set up JDK 17
        uses: actions/setup-java@v4
        with:
          java-version: '17'
          distribution: 'temurin'

      - name: Install cargo-ndk
        run: cargo install cargo-ndk

      - name: Set up Android SDK/NDK
        uses: android-actions/setup-android@v3

      - name: Install NDK
        run: sdkmanager "ndk;26.1.10909125"

      - name: Build Rust FFI for Android
        env:
          ANDROID_NDK_HOME: ${{ env.ANDROID_HOME }}/ndk/26.1.10909125
        run: |
          cargo ndk -t arm64-v8a -t x86_64 -o platforms/android/src/main/jniLibs build -p zipherx-ffi --release

      - name: Generate UniFFI bindings
        run: |
          cargo run -p uniffi-bindgen -- generate crates/zipherx-ffi/src/zipherx.udl --language kotlin --out-dir platforms/android/src/main/kotlin/

      - name: Decode keystore
        run: echo "${{ secrets.RELEASE_KEYSTORE_BASE64 }}" | base64 -d > platforms/android/release.keystore

      - name: Build APK
        working-directory: platforms/android
        env:
          ZIPHERX_KEYSTORE_PASSWORD: ${{ secrets.KEYSTORE_PASSWORD }}
          ZIPHERX_KEY_ALIAS: ${{ secrets.KEY_ALIAS }}
          ZIPHERX_KEY_PASSWORD: ${{ secrets.KEY_PASSWORD }}
        run: |
          chmod +x gradlew
          ./gradlew assembleRelease

      - name: Find and copy APK
        shell: bash
        run: |
          mkdir -p dist
          APK=$(find platforms/android/build -name "*-release*.apk" | head -1)
          if [ -n "$APK" ]; then
            cp "$APK" dist/ZipherX-release.apk
          fi

      - name: Upload artifacts
        uses: actions/upload-artifact@v4
        with:
          name: android
          path: dist/

  # ── Create GitHub Release ──
  release:
    name: Create Release
    needs: [build-macos, build-linux, build-windows, build-android]
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4

      - name: Download all artifacts
        uses: actions/download-artifact@v4
        with:
          path: artifacts

      - name: Collect artifacts
        run: |
          mkdir -p release
          cp artifacts/macos-arm64/* release/ 2>/dev/null || true
          cp artifacts/linux-x86_64/* release/ 2>/dev/null || true
          cp artifacts/windows-x86_64/* release/ 2>/dev/null || true
          cp artifacts/android/* release/ 2>/dev/null || true

      - name: Generate checksums
        working-directory: release
        run: sha256sum * > SHA256SUMS.txt

      - name: Create Release
        uses: softprops/action-gh-release@v2
        with:
          draft: true
          generate_release_notes: true
          files: release/*
          body: |
            ## ZipherX Multi ${{ github.ref_name }}

            **Your keys. Your coins. Your privacy. No exceptions.**

            ### Downloads

            | Platform | File | Description |
            |----------|------|-------------|
            | macOS (ARM64) | `zipherx-gui-macos-arm64` | Native desktop app |
            | Linux (x86_64) | `zipherx-gui-linux-x86_64` | Native desktop app |
            | Windows (x86_64) | `zipherx-gui-windows-x86_64.exe` | Native desktop app |
            | Android | `ZipherX-release.apk` | Android app |
            | macOS CLI | `zipherx-cli-macos-arm64` | Command-line wallet |
            | Linux CLI | `zipherx-cli-linux-x86_64` | Command-line wallet |
            | Windows CLI | `zipherx-cli-windows-x86_64.exe` | Command-line wallet |

            ### Verify checksums
            ```bash
            sha256sum -c SHA256SUMS.txt
            ```

            ### First time?
            Read the **[User Guide](https://github.com/ZipherPunk/zipherx_multi/blob/main/USER_GUIDE.md)** and **[Disclaimer](https://github.com/ZipherPunk/zipherx_multi/blob/main/DISCLAIMER.md)** before using.

            > *This is beta software. Do not use with funds you cannot afford to lose.*