app-build-release-artifacts.yml

name: 'app-build-release-artifacts'

on:
  push:
    branches:
      - staging
    paths:
      - 'apps/app/**'
      - '.github/workflows/tauri-build-debug.yml'
  pull_request:
    branches:
      - dev
      - staging
    paths:
      - 'apps/app/**'
      - '.github/workflows/tauri-build-debug.yml'
  workflow_dispatch:

jobs:
  publish-tauri:
    environment: production
    permissions:
      contents: write
    strategy:
      fail-fast: false
      matrix:
        include:
          - platform: 'macos-latest' # for Arm based macs (M1 and above).
            args: '--target aarch64-apple-darwin'
          - platform: 'macos-latest' # for Intel based macs.
            args: '--target x86_64-apple-darwin'
          - platform: 'ubuntu-22.04'
            args: ''
          - platform: 'ubuntu-22.04-arm'
            args: ''
          - platform: 'windows-2022'
            args: ''
          - platform: 'windows-11-arm'
            args: ''
          - platform: 'ubuntu-22.04'
            args: '--apk --split-per-abi --target aarch64 --target armv7'
            mobile: 'android'
    runs-on: ${{ matrix.platform }}
    steps:
      - uses: actions/checkout@v6

      # ------------- Node & Frontend Cache -------------
      - name: setup node
        uses: actions/setup-node@v4
        with:
          node-version: lts/*

      - name: setup bun
        uses: oven-sh/setup-bun@v2

      # NEW: Cache Bun dependencies
      - name: Cache Bun dependencies
        uses: actions/cache@v4
        with:
          path: ~/.bun/install/cache
          key: ${{ runner.os }}-bun-${{ hashFiles('**/bun.lockb') }}
          restore-keys: |
            ${{ runner.os }}-bun-

      # Case 1: Run bun for everything EXCEPT Windows ARM
      - name: install frontend dependencies
        if: matrix.platform != 'windows-11-arm'
        run: bun i

      # Case 2: Run npm ONLY for Windows ARM
      - name: install frontend dependencies (Windows ARM)
        if: matrix.platform == 'windows-11-arm'
        run: npm install

      # ------------- Rust & Cargo Cache -------------
      - name: install Rust stable (desktop)
        if: matrix.mobile == ''
        uses: dtolnay/rust-toolchain@stable
        with:
          targets: aarch64-apple-darwin,x86_64-apple-darwin

      - name: install Rust stable (android)
        if: matrix.mobile == 'android'
        uses: dtolnay/rust-toolchain@stable
        with:
          targets: aarch64-linux-android,armv7-linux-androideabi,i686-linux-android,x86_64-linux-android

      # MODIFIED: Fixed workspaces syntax and ensured shared key matches matrix
      - uses: Swatinem/rust-cache@v2
        with:
          cache-on-failure: true
          # Point this to the folder containing Cargo.toml.
          # The action automatically handles the 'target' directory.
          workspaces: apps/app/src-tauri
          # Adding a key based on the job matrix helps prevent cache conflicts between platforms
          key: ${{ matrix.platform }}-${{ matrix.args }}

      # ------------- Android -------------
      - name: Set up JDK
        if: matrix.mobile == 'android'
        uses: actions/setup-java@v5
        with:
          java-version: '17'
          distribution: 'temurin'

      # NEW: Cache Gradle for Android
      - name: Cache Gradle
        if: matrix.mobile == 'android'
        uses: actions/cache@v4
        with:
          path: |
            ~/.gradle/caches
            ~/.gradle/wrapper
          key: ${{ runner.os }}-gradle-${{ hashFiles('**/*.gradle*', '**/gradle-wrapper.properties') }}
          restore-keys: |
            ${{ runner.os }}-gradle-

      - name: Setup Android SDK
        if: matrix.mobile == 'android'
        uses: android-actions/setup-android@v3
      - name: Setup Android NDK
        if: matrix.mobile == 'android'
        uses: nttld/setup-ndk@v1
        id: setup-ndk
        with:
          ndk-version: r29
          link-to-sdk: true
      - name: setup Android signing
        if: matrix.mobile == 'android'
        run: |
          cd apps/app/src-tauri/gen/android
          echo "keyAlias=${{ secrets.ANDROID_KEY_ALIAS }}" > keystore.properties
          echo "password=${{ secrets.ANDROID_KEY_PASSWORD }}" >> keystore.properties
          base64 -d <<< "${{ secrets.ANDROID_KEY_BASE64 }}" > $RUNNER_TEMP/keystore.jks
          echo "storeFile=$RUNNER_TEMP/keystore.jks" >> keystore.properties

      # ------------ Desktop OS ----------------
      - name: install dependencies (ubuntu only)
        if: startsWith(matrix.platform, 'ubuntu')
        run: |
          sudo apt-get update
          sudo apt-get install -y libwebkit2gtk-4.1-dev libappindicator3-dev librsvg2-dev xdg-utils

      # ---------------- Tauri -----------------
      - name: Build Tauri Project
        uses: tauri-apps/tauri-action@8236c82510173ef930d644f38790c4cf3fd43cf2
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          NDK_HOME: ${{ steps.setup-ndk.outputs.ndk-path }}
        with:
          projectPath: 'apps/app'
          uploadWorkflowArtifacts: true
          workflowArtifactNamePattern: '[name]-v[version]-[platform]-[arch]-[mode][ext]'
          args: ${{ matrix.args }}
          mobile: ${{ matrix.mobile }}