android.yml

name: Android

on:
  push:
    branches:
      - '**'
    tags:
      - 'v*'
  workflow_dispatch:

permissions:
  contents: write

jobs:
  verify:
    name: Analyze and test
    runs-on: ubuntu-latest

    steps:
      - name: Checkout
        uses: actions/checkout@v5
        with:
          submodules: recursive

      - name: Set up Flutter
        uses: subosito/flutter-action@v2
        with:
          channel: stable
          cache: true

      - name: Set up Node.js
        uses: actions/setup-node@v5
        with:
          node-version: 22
          cache: npm

      - name: Set up Rust
        uses: dtolnay/rust-toolchain@stable

      - name: Install dependencies
        run: flutter pub get

      - name: Install Node.js dependencies
        run: npm ci --ignore-scripts

      - name: Analyze
        run: flutter analyze

      - name: Run tests
        run: flutter test

      - name: Test Node.js tools
        run: npm run test:tools

      - name: Test native bridge
        working-directory: skyengine
        run: cargo test -p skyengine-core -p skyengine-ffi

  build-continuous:
    name: Build continuous APK
    runs-on: ubuntu-latest
    needs: verify
    if: github.event_name == 'push' && github.ref == 'refs/heads/main'

    steps:
      - name: Checkout
        uses: actions/checkout@v5
        with:
          submodules: recursive

      - name: Set up Flutter
        uses: subosito/flutter-action@v2
        with:
          channel: stable
          cache: true

      - name: Set up Rust
        uses: dtolnay/rust-toolchain@stable
        with:
          targets: aarch64-linux-android,armv7-linux-androideabi

      - name: Install dependencies
        run: flutter pub get

      - name: Configure Android signing
        env:
          ANDROID_KEYSTORE_BASE64: ${{ secrets.ANDROID_KEYSTORE_BASE64 }}
          ANDROID_KEYSTORE_PASSWORD: ${{ secrets.ANDROID_KEYSTORE_PASSWORD }}
          ANDROID_KEY_ALIAS: ${{ secrets.ANDROID_KEY_ALIAS }}
          ANDROID_KEY_PASSWORD: ${{ secrets.ANDROID_KEY_PASSWORD }}
        run: |
          test -n "$ANDROID_KEYSTORE_BASE64"
          test -n "$ANDROID_KEYSTORE_PASSWORD"
          test -n "$ANDROID_KEY_ALIAS"
          test -n "$ANDROID_KEY_PASSWORD"
          echo "$ANDROID_KEYSTORE_BASE64" | base64 --decode > android/release.jks
          {
            echo "storeFile=../release.jks"
            echo "storePassword=$ANDROID_KEYSTORE_PASSWORD"
            echo "keyAlias=$ANDROID_KEY_ALIAS"
            echo "keyPassword=$ANDROID_KEY_PASSWORD"
          } > android/key.properties

      - name: Verify app store credentials
        env:
          APP_STORE_APP_ID: ${{ secrets.APP_STORE_APP_ID }}
          APP_STORE_APP_SECRET: ${{ secrets.APP_STORE_APP_SECRET }}
        run: |
          test -n "$APP_STORE_APP_ID"
          test -n "$APP_STORE_APP_SECRET"

      - name: Build and prepare release APKs
        env:
          APP_STORE_BASE_URL: ${{ secrets.APP_STORE_BASE_URL }}
          APP_STORE_APP_ID: ${{ secrets.APP_STORE_APP_ID }}
          APP_STORE_APP_SECRET: ${{ secrets.APP_STORE_APP_SECRET }}
        run: |
          mkdir -p dist
          DART_DEFINES=(
            "--dart-define=APP_STORE_APP_ID=$APP_STORE_APP_ID"
            "--dart-define=APP_STORE_APP_SECRET=$APP_STORE_APP_SECRET"
          )
          if [ -n "$APP_STORE_BASE_URL" ]; then
            DART_DEFINES+=("--dart-define=APP_STORE_BASE_URL=$APP_STORE_BASE_URL")
          fi
          flutter build apk --release "${DART_DEFINES[@]}" --target-platform android-arm,android-arm64 --build-name 1.0.16-continuous --build-number ${{ github.run_number }}
          cp build/app/outputs/flutter-apk/app-release.apk dist/skyengine-continuous.apk
          flutter build apk --release "${DART_DEFINES[@]}" --target-platform android-arm64 --build-name 1.0.16-continuous --build-number ${{ github.run_number }}
          cp build/app/outputs/flutter-apk/app-release.apk dist/skyengine-continuous-arm64-v8a.apk
          flutter build apk --release "${DART_DEFINES[@]}" --target-platform android-arm --build-name 1.0.16-continuous --build-number ${{ github.run_number }}
          cp build/app/outputs/flutter-apk/app-release.apk dist/skyengine-continuous-armeabi-v7a.apk

      - name: Upload APK artifacts
        uses: actions/upload-artifact@v4
        with:
          name: continuous-apks
          path: dist/*.apk
          if-no-files-found: error

  publish-continuous:
    name: Upload and publish continuous APK
    runs-on: ubuntu-latest
    needs: build-continuous
    if: github.event_name == 'push' && github.ref == 'refs/heads/main'

    steps:
      - name: Checkout
        uses: actions/checkout@v5

      - name: Download APK artifacts
        uses: actions/download-artifact@v4
        with:
          name: continuous-apks
          path: dist

      - name: Move continuous tag
        run: |
          git tag --force continuous "$GITHUB_SHA"
          git push --force origin refs/tags/continuous

      - name: Update continuous release
        uses: softprops/action-gh-release@v2
        with:
          tag_name: continuous
          name: Continuous Build
          prerelease: true
          make_latest: false
          files: |
            dist/skyengine-continuous.apk
            dist/skyengine-continuous-arm64-v8a.apk
            dist/skyengine-continuous-armeabi-v7a.apk

  build-release:
    name: Build release APK
    runs-on: ubuntu-latest
    needs: verify
    if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags/v')
    outputs:
      version: ${{ steps.version.outputs.name }}

    steps:
      - name: Checkout
        uses: actions/checkout@v5
        with:
          fetch-depth: 0
          submodules: recursive

      - name: Set up Flutter
        uses: subosito/flutter-action@v2
        with:
          channel: stable
          cache: true

      - name: Set up Rust
        uses: dtolnay/rust-toolchain@stable
        with:
          targets: aarch64-linux-android,armv7-linux-androideabi

      - name: Install dependencies
        run: flutter pub get

      - name: Verify tag is on main
        run: git merge-base --is-ancestor "$GITHUB_SHA" origin/main

      - name: Configure Android signing
        env:
          ANDROID_KEYSTORE_BASE64: ${{ secrets.ANDROID_KEYSTORE_BASE64 }}
          ANDROID_KEYSTORE_PASSWORD: ${{ secrets.ANDROID_KEYSTORE_PASSWORD }}
          ANDROID_KEY_ALIAS: ${{ secrets.ANDROID_KEY_ALIAS }}
          ANDROID_KEY_PASSWORD: ${{ secrets.ANDROID_KEY_PASSWORD }}
        run: |
          test -n "$ANDROID_KEYSTORE_BASE64"
          test -n "$ANDROID_KEYSTORE_PASSWORD"
          test -n "$ANDROID_KEY_ALIAS"
          test -n "$ANDROID_KEY_PASSWORD"
          echo "$ANDROID_KEYSTORE_BASE64" | base64 --decode > android/release.jks
          {
            echo "storeFile=../release.jks"
            echo "storePassword=$ANDROID_KEYSTORE_PASSWORD"
            echo "keyAlias=$ANDROID_KEY_ALIAS"
            echo "keyPassword=$ANDROID_KEY_PASSWORD"
          } > android/key.properties

      - name: Derive version
        id: version
        run: |
          VERSION="${GITHUB_REF_NAME#v}"
          echo "name=$VERSION" >> "$GITHUB_OUTPUT"

      - name: Verify app store credentials
        env:
          APP_STORE_APP_ID: ${{ secrets.APP_STORE_APP_ID }}
          APP_STORE_APP_SECRET: ${{ secrets.APP_STORE_APP_SECRET }}
        run: |
          test -n "$APP_STORE_APP_ID"
          test -n "$APP_STORE_APP_SECRET"

      - name: Build and prepare release APKs
        env:
          APP_STORE_BASE_URL: ${{ secrets.APP_STORE_BASE_URL }}
          APP_STORE_APP_ID: ${{ secrets.APP_STORE_APP_ID }}
          APP_STORE_APP_SECRET: ${{ secrets.APP_STORE_APP_SECRET }}
        run: |
          mkdir -p dist
          DART_DEFINES=(
            "--dart-define=APP_STORE_APP_ID=$APP_STORE_APP_ID"
            "--dart-define=APP_STORE_APP_SECRET=$APP_STORE_APP_SECRET"
          )
          if [ -n "$APP_STORE_BASE_URL" ]; then
            DART_DEFINES+=("--dart-define=APP_STORE_BASE_URL=$APP_STORE_BASE_URL")
          fi
          flutter build apk --release "${DART_DEFINES[@]}" --target-platform android-arm,android-arm64 --build-name ${{ steps.version.outputs.name }} --build-number ${{ github.run_number }}
          cp build/app/outputs/flutter-apk/app-release.apk "dist/skyengine-${GITHUB_REF_NAME}.apk"
          flutter build apk --release "${DART_DEFINES[@]}" --target-platform android-arm64 --build-name ${{ steps.version.outputs.name }} --build-number ${{ github.run_number }}
          cp build/app/outputs/flutter-apk/app-release.apk "dist/skyengine-${GITHUB_REF_NAME}-arm64-v8a.apk"
          flutter build apk --release "${DART_DEFINES[@]}" --target-platform android-arm --build-name ${{ steps.version.outputs.name }} --build-number ${{ github.run_number }}
          cp build/app/outputs/flutter-apk/app-release.apk "dist/skyengine-${GITHUB_REF_NAME}-armeabi-v7a.apk"

      - name: Upload APK artifacts
        uses: actions/upload-artifact@v4
        with:
          name: release-apks
          path: dist/*.apk
          if-no-files-found: error

  publish-release:
    name: Upload and publish release APK
    runs-on: ubuntu-latest
    needs: build-release
    if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags/v')

    steps:
      - name: Checkout
        uses: actions/checkout@v5

      - name: Set up Node.js
        uses: actions/setup-node@v5
        with:
          node-version: 22
          cache: npm

      - name: Install Node.js dependencies
        run: npm ci --ignore-scripts

      - name: Download APK artifacts
        uses: actions/download-artifact@v4
        with:
          name: release-apks
          path: dist

      - name: Publish GitHub release
        uses: softprops/action-gh-release@v2
        with:
          name: ${{ github.ref_name }}
          prerelease: false
          make_latest: true
          files: |
            dist/skyengine-${{ github.ref_name }}.apk
            dist/skyengine-${{ github.ref_name }}-arm64-v8a.apk
            dist/skyengine-${{ github.ref_name }}-armeabi-v7a.apk

      - name: Upload and publish universal APK
        env:
          QINIU_ACCESS_KEY: ${{ secrets.QINIU_ACCESS_KEY }}
          QINIU_SECRET_KEY: ${{ secrets.QINIU_SECRET_KEY }}
          QINIU_BUCKET: ${{ secrets.QINIU_BUCKET }}
          QINIU_DOMAIN: ${{ secrets.QINIU_DOMAIN }}
          MRP_SERVER: ${{ secrets.MRP_SERVER }}
          MRP_ACCESS_TOKEN: ${{ secrets.MRP_ACCESS_TOKEN }}
        run: |
          test -n "$MRP_SERVER"
          test -n "$MRP_ACCESS_TOKEN"
          DOWNLOAD_URL=$(node tool/upload-file-qiniu.js "dist/skyengine-${GITHUB_REF_NAME}.apk")
          test -n "$DOWNLOAD_URL"
          node tool/publish_emulator_apk.js \
            --download-url "$DOWNLOAD_URL" \
            --fetch-file \
            --architecture universal \
            --version "${{ needs.build-release.outputs.version }}" \
            --changelog-md CHANGELOG.MD

      - name: Upload and publish arm64-v8a APK
        env:
          QINIU_ACCESS_KEY: ${{ secrets.QINIU_ACCESS_KEY }}
          QINIU_SECRET_KEY: ${{ secrets.QINIU_SECRET_KEY }}
          QINIU_BUCKET: ${{ secrets.QINIU_BUCKET }}
          QINIU_DOMAIN: ${{ secrets.QINIU_DOMAIN }}
          MRP_SERVER: ${{ secrets.MRP_SERVER }}
          MRP_ACCESS_TOKEN: ${{ secrets.MRP_ACCESS_TOKEN }}
        run: |
          test -n "$MRP_SERVER"
          test -n "$MRP_ACCESS_TOKEN"
          DOWNLOAD_URL=$(node tool/upload-file-qiniu.js "dist/skyengine-${GITHUB_REF_NAME}-arm64-v8a.apk")
          test -n "$DOWNLOAD_URL"
          node tool/publish_emulator_apk.js \
            --download-url "$DOWNLOAD_URL" \
            --fetch-file \
            --architecture arm64-v8a \
            --version "${{ needs.build-release.outputs.version }}" \
            --changelog-md CHANGELOG.MD

      - name: Upload and publish armeabi-v7a APK
        env:
          QINIU_ACCESS_KEY: ${{ secrets.QINIU_ACCESS_KEY }}
          QINIU_SECRET_KEY: ${{ secrets.QINIU_SECRET_KEY }}
          QINIU_BUCKET: ${{ secrets.QINIU_BUCKET }}
          QINIU_DOMAIN: ${{ secrets.QINIU_DOMAIN }}
          MRP_SERVER: ${{ secrets.MRP_SERVER }}
          MRP_ACCESS_TOKEN: ${{ secrets.MRP_ACCESS_TOKEN }}
        run: |
          test -n "$MRP_SERVER"
          test -n "$MRP_ACCESS_TOKEN"
          DOWNLOAD_URL=$(node tool/upload-file-qiniu.js "dist/skyengine-${GITHUB_REF_NAME}-armeabi-v7a.apk")
          test -n "$DOWNLOAD_URL"
          node tool/publish_emulator_apk.js \
            --download-url "$DOWNLOAD_URL" \
            --fetch-file \
            --architecture armeabi-v7a \
            --version "${{ needs.build-release.outputs.version }}" \
            --changelog-md CHANGELOG.MD