cd-deploy-flatpak.yml

name: 'CD: Flatpak'
run-name: "Flatpak — ${{ github.event.release.tag_name || inputs.tag || 'latest' }}"

on:
  release:
    types: [released]
  workflow_dispatch:
    inputs:
      tag:
        description: 'Release tag (e.g. v2.6.1) — leave empty for latest release'
        required: false
        type: string

permissions: read-all

concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: ${{ github.event_name == 'pull_request' }}

jobs:
  flatpak:
    name: Build Flatpak bundle
    runs-on: ubuntu-24.04
    timeout-minutes: 120
    permissions:
      contents: write
      id-token: write
      attestations: write

    steps:
      - name: Harden Runner
        uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411  # v2.19.4
        with:
          egress-policy: audit
      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0  # v7.0.0

      - name: Determine release tag
        id: tag
        run: |
          if [[ "${{ github.event_name }}" == "release" ]]; then
            TAG="${{ github.event.release.tag_name }}"
          elif [[ -n "${{ inputs.tag }}" ]]; then
            TAG="${{ inputs.tag }}"
          else
            TAG=$(gh release list --repo "${{ github.repository }}" \
              --limit 1 --json tagName -q '.[0].tagName')
          fi
          echo "tag=$TAG" >> "$GITHUB_OUTPUT"
          echo "Using tag: $TAG"
        env:
          GH_TOKEN: ${{ github.token }}

      - name: Install dependencies
        run: |
          sudo apt-get update -qq
          sudo apt-get install -y --no-install-recommends \
            flatpak flatpak-builder squashfs-tools desktop-file-utils \
            appstream elfutils

      - name: Add Flathub remote
        run: |
          flatpak remote-add --user --if-not-exists flathub \
            https://dl.flathub.org/repo/flathub.flatpakrepo

      - name: Install Flatpak runtimes
        run: |
          flatpak install --user -y flathub \
            org.freedesktop.Platform//24.08 \
            org.freedesktop.Sdk//24.08

      - name: Download AppImage
        id: appimage
        env:
          GH_TOKEN: ${{ github.token }}
        run: |
          TAG="${{ steps.tag.outputs.tag }}"
          VER="${TAG#v}"                  # 02.07.00.55-bj.2
          UPSTREAM_VER="${VER%-bj.*}"    # 02.07.00.55  (filename only uses upstream ver)
          # Primary: find the GitHub-hosted ubuntu-24.04 amd64 AppImage via API (name pattern: BambuStudio_ubuntu-24.04_amd64_*.AppImage, excluding _selfhosted)
          ASSET_URL=$(gh release view "${TAG}" --repo "${{ github.repository }}" \
            --json assets --jq \
            '[.assets[] | select((.name | test("^BambuStudio_ubuntu-24\\.04_amd64_.*\\.AppImage$"; "i")) and (.name | test("_selfhosted\\.AppImage$"; "i") | not))] | .[0].url // ""')
          if [[ -n "${ASSET_URL}" ]]; then
            echo "Downloading: ${ASSET_URL}"
            if curl -fL -o BambuStudio.AppImage "${ASSET_URL}"; then
              echo "url=${ASSET_URL}" >> "$GITHUB_OUTPUT"
            else
              rm -f BambuStudio.AppImage
            fi
          fi
          # Legacy fallback: explicit patterns for older releases
          if [[ ! -f BambuStudio.AppImage ]]; then
            for PATTERN in \
              "Bambu_Studio_ubuntu-24.04_V${UPSTREAM_VER}.AppImage" \
              "Bambu_Studio_ubuntu-22.04_V${UPSTREAM_VER}.AppImage" \
              "BambuStudio_linux_x86_64_${TAG}.AppImage" \
              "BambuStudio_linux_amd64_${TAG}.AppImage" \
              "BambuStudio-${TAG}-linux-x86_64.AppImage" \
              "BambuStudio.AppImage"; do
              URL="https://github.com/${{ github.repository }}/releases/download/${TAG}/${PATTERN}"
              if curl -sIf "$URL" >/dev/null 2>&1; then
                echo "Fallback download: $URL"
                if curl -fL -o BambuStudio.AppImage "$URL"; then
                  echo "url=$URL" >> "$GITHUB_OUTPUT"
                  break
                else
                  rm -f BambuStudio.AppImage
                fi
              fi
            done
          fi
          if [[ ! -f BambuStudio.AppImage ]]; then
            echo "::error::No AppImage found for tag $TAG"
            exit 1
          fi
          chmod +x BambuStudio.AppImage

      - name: Extract AppImage
        run: |
          ./BambuStudio.AppImage --appimage-extract
          echo "Extracted to squashfs-root/"
          ls squashfs-root/ | head -10
          ls squashfs-root/bin/ 2>/dev/null | head -5 || true

      - name: Prepare Flatpak sources
        run: |
          # Move squashfs-root into flatpak/ so flatpak-builder can find it
          mv squashfs-root flatpak/squashfs-root

      - name: Build Flatpak bundle
        run: |
          # flatpak-builder 1.4.2 + AppStream 1.0.2 incompatibility:
          # appstreamcli compose exits 1 on 'filters-but-no-output' and 'file-read-error'.
          # Both are fixed in flatpak-builder ≥1.4.6 / AppStream ≥1.0.6, but Ubuntu 24.04
          # ships the older versions. Wrap appstreamcli so compose never blocks the build.
          mkdir -p /tmp/asc-shim
          printf '#!/bin/sh\n/usr/bin/appstreamcli "$@" || true\n' \
            > /tmp/asc-shim/appstreamcli
          chmod +x /tmp/asc-shim/appstreamcli
          PATH="/tmp/asc-shim:$PATH" \
          flatpak-builder \
            --user \
            --force-clean \
            --repo=flatpak-repo \
            --bundle-sources \
            flatpak-build \
            flatpak/com.bambulab.BambuStudio.yaml

      - name: Export Flatpak bundle
        run: |
          flatpak build-bundle \
            --runtime-repo=https://dl.flathub.org/repo/flathub.flatpakrepo \
            flatpak-repo \
            BambuStudio.flatpak \
            com.bambulab.BambuStudio

      - name: Upload as artifact
        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a  # v7
        with:
          name: BambuStudio-${{ steps.tag.outputs.tag }}-flatpak
          path: BambuStudio.flatpak
          retention-days: 30

      - name: Attach to release
        if: github.event_name == 'release'
        uses: softprops/action-gh-release@718ea10b132b3b2eba29c1007bb80653f286566b  # v3
        with:
          tag_name: ${{ steps.tag.outputs.tag }}
          files: BambuStudio.flatpak