android-build-release-matrix.yml

name: Android Build and Release (Matrix)

on:
  workflow_dispatch:
    inputs:
      release_notes:
        description: '发布注释（可选，支持多行）'
        required: false
        default: ''
        type: string
  push:
    tags:
      - 'v*.*.*'

env:
 GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

permissions:
 contents: write

jobs:
  build-foss-split:
    name: Build FOSS Split APKs
    runs-on: ubuntu-latest
    strategy:
      fail-fast: false
      matrix:
        abi: [arm64-v8a, armeabi-v7a, x86, x86_64, riscv64]
    env:
      JAVA_HOME_21_X64: /usr/lib/jvm/java-21-openjdk-amd64
    steps:
      - name: Checkout repository
        uses: actions/checkout@v4

      - name: Init submodules (llama.cpp)
        run: |
          git submodule update --init

      - name: Set up JDK 21
        uses: actions/setup-java@v4
        with:
          java-version: '21'
          distribution: 'temurin'

      - name: Cache Gradle
        uses: actions/cache@v4
        with:
          path: |
            ~/.gradle/caches
            ~/.gradle/wrapper/
          key: gradle-cache-${{ runner.os }}-v1

      - name: Grant execute permission for gradlew
        run: chmod +x ./gradlew

      - name: Accept Android SDK licenses
        run: |
          if [ -f "/usr/local/lib/android/sdk/cmdline-tools/latest/bin/sdkmanager" ]; then
            SDK_MANAGER="/usr/local/lib/android/sdk/cmdline-tools/latest/bin/sdkmanager"
          else
            SDK_MANAGER=$(find $ANDROID_HOME -name sdkmanager | head -n 1)
          fi
          if [ -n "$SDK_MANAGER" ]; then
            yes | $SDK_MANAGER --licenses || true
          else
            yes | sdkmanager --licenses || true
          fi

      - name: Decode keystore (if provided)
        shell: bash
        env:
          RELEASE_KEYSTORE_BASE64: ${{ secrets.RELEASE_KEYSTORE_BASE64 }}
        run: |
          set -euo pipefail
          if [ -n "${RELEASE_KEYSTORE_BASE64:-}" ]; then
            mkdir -p app/release
            echo "$RELEASE_KEYSTORE_BASE64" | base64 --decode > "$PWD/app/release/release-keystore.jks"
            chmod 600 "$PWD/app/release/release-keystore.jks"
          fi

      - name: Build FOSS ${{ matrix.abi }}
        env:
          RELEASE_KEYSTORE_KEY: ${{ secrets.RELEASE_KEYSTORE_KEY }}
          RELEASE_KEYSTORE_SUBKEY: ${{ secrets.RELEASE_KEYSTORE_SUBKEY }}
        run: |
          set -euo pipefail
          export GRADLE_OPTS="-Xmx3g"
          
          STORE_FILE="$PWD/app/release/release-keystore.jks"
          SIGNING_PROPS=""
          if [ -f "$STORE_FILE" ] && [ -n "${RELEASE_KEYSTORE_KEY:-}" ] && [ -n "${RELEASE_KEYSTORE_SUBKEY:-}" ]; then
            SIGNING_PROPS="-Pandroid.injected.signing.store.file=$STORE_FILE -Pandroid.injected.signing.store.password=${RELEASE_KEYSTORE_KEY} -Pandroid.injected.signing.key.password=${RELEASE_KEYSTORE_SUBKEY} -Pandroid.injected.signing.key.alias=release"
          fi

          ./gradlew clean assembleFossRelease -PabiFilter=${{ matrix.abi }} $SIGNING_PROPS

      - name: Upload Artifact
        uses: actions/upload-artifact@v4
        with:
          name: apk-foss-${{ matrix.abi }}
          path: app/build/outputs/apk/foss/release/*.apk
          retention-days: 1

#   build-foss-universal:
#     name: Build FOSS Universal APK
#     runs-on: ubuntu-latest
#     env:
#       JAVA_HOME_21_X64: /usr/lib/jvm/java-21-openjdk-amd64
#     steps:
#       - name: Checkout repository
#         uses: actions/checkout@v4

#       - name: Init submodules (llama.cpp)
#         run: |
#           git submodule update --init --depth 1

#       - name: Set up JDK 21
#         uses: actions/setup-java@v4
#         with:
#           java-version: '21'
#           distribution: 'temurin'

#       - name: Cache Gradle
#         uses: actions/cache@v4
#         with:
#           path: |
#             ~/.gradle/caches
#             ~/.gradle/wrapper/
#           key: gradle-cache-${{ runner.os }}-v1

#       - name: Grant execute permission for gradlew
#         run: chmod +x ./gradlew

#       - name: Accept Android SDK licenses
#         run: |
#           if [ -f "/usr/local/lib/android/sdk/cmdline-tools/latest/bin/sdkmanager" ]; then
#             SDK_MANAGER="/usr/local/lib/android/sdk/cmdline-tools/latest/bin/sdkmanager"
#           else
#             SDK_MANAGER=$(find $ANDROID_HOME -name sdkmanager | head -n 1)
#           fi
#           if [ -n "$SDK_MANAGER" ]; then
#             yes | $SDK_MANAGER --licenses || true
#           else
#             yes | sdkmanager --licenses || true
#           fi

#       - name: Decode keystore (if provided)
#         shell: bash
#         env:
#           RELEASE_KEYSTORE_BASE64: ${{ secrets.RELEASE_KEYSTORE_BASE64 }}
#         run: |
#           set -euo pipefail
#           if [ -n "${RELEASE_KEYSTORE_BASE64:-}" ]; then
#             mkdir -p app/release
#             echo "$RELEASE_KEYSTORE_BASE64" | base64 --decode > "$PWD/app/release/release-keystore.jks"
#             chmod 600 "$PWD/app/release/release-keystore.jks"
#           fi

#       - name: Build FOSS Universal
#         env:
#           RELEASE_KEYSTORE_KEY: ${{ secrets.RELEASE_KEYSTORE_KEY }}
#           RELEASE_KEYSTORE_SUBKEY: ${{ secrets.RELEASE_KEYSTORE_SUBKEY }}
#         run: |
#           set -euo pipefail
#           export GRADLE_OPTS="-Xmx3g"
          
#           STORE_FILE="$PWD/app/release/release-keystore.jks"
#           SIGNING_PROPS=""
#           if [ -f "$STORE_FILE" ] && [ -n "${RELEASE_KEYSTORE_KEY:-}" ] && [ -n "${RELEASE_KEYSTORE_SUBKEY:-}" ]; then
#             SIGNING_PROPS="-Pandroid.injected.signing.store.file=$STORE_FILE -Pandroid.injected.signing.store.password=${RELEASE_KEYSTORE_KEY} -Pandroid.injected.signing.key.password=${RELEASE_KEYSTORE_SUBKEY} -Pandroid.injected.signing.key.alias=release"
#           fi

#           ./gradlew clean assembleFossRelease $SIGNING_PROPS

#       - name: Upload Artifact
#         uses: actions/upload-artifact@v4
#         with:
#           name: apk-foss-universal
#           path: app/build/outputs/apk/foss/release/*universal.apk
#           retention-days: 1

  build-full:
    name: Build Full Flavor APKs
    runs-on: ubuntu-latest
    env:
      JAVA_HOME_21_X64: /usr/lib/jvm/java-21-openjdk-amd64
    steps:
      - name: Checkout repository
        uses: actions/checkout@v4

      - name: Init submodules (llama.cpp)
        run: |
          git submodule update --init

      - name: Set up JDK 21
        uses: actions/setup-java@v4
        with:
          java-version: '21'
          distribution: 'temurin'

      - name: Cache Gradle
        uses: actions/cache@v4
        with:
          path: |
            ~/.gradle/caches
            ~/.gradle/wrapper/
          key: gradle-cache-${{ runner.os }}-v1

      - name: Grant execute permission for gradlew
        run: chmod +x ./gradlew

      - name: Accept Android SDK licenses
        run: |
          if [ -f "/usr/local/lib/android/sdk/cmdline-tools/latest/bin/sdkmanager" ]; then
            SDK_MANAGER="/usr/local/lib/android/sdk/cmdline-tools/latest/bin/sdkmanager"
          else
            SDK_MANAGER=$(find $ANDROID_HOME -name sdkmanager | head -n 1)
          fi
          if [ -n "$SDK_MANAGER" ]; then
            yes | $SDK_MANAGER --licenses || true
          else
            yes | sdkmanager --licenses || true
          fi

      - name: Decode keystore (if provided)
        shell: bash
        env:
          RELEASE_KEYSTORE_BASE64: ${{ secrets.RELEASE_KEYSTORE_BASE64 }}
        run: |
          set -euo pipefail
          if [ -n "${RELEASE_KEYSTORE_BASE64:-}" ]; then
            mkdir -p app/release
            echo "$RELEASE_KEYSTORE_BASE64" | base64 --decode > "$PWD/app/release/release-keystore.jks"
            chmod 600 "$PWD/app/release/release-keystore.jks"
          fi

      - name: Build Full Flavor
        env:
          RELEASE_KEYSTORE_KEY: ${{ secrets.RELEASE_KEYSTORE_KEY }}
          RELEASE_KEYSTORE_SUBKEY: ${{ secrets.RELEASE_KEYSTORE_SUBKEY }}
        run: |
          set -euo pipefail
          export GRADLE_OPTS="-Xmx3g"
          
          STORE_FILE="$PWD/app/release/release-keystore.jks"
          SIGNING_PROPS=""
          if [ -f "$STORE_FILE" ] && [ -n "${RELEASE_KEYSTORE_KEY:-}" ] && [ -n "${RELEASE_KEYSTORE_SUBKEY:-}" ]; then
            SIGNING_PROPS="-Pandroid.injected.signing.store.file=$STORE_FILE -Pandroid.injected.signing.store.password=${RELEASE_KEYSTORE_KEY} -Pandroid.injected.signing.key.password=${RELEASE_KEYSTORE_SUBKEY} -Pandroid.injected.signing.key.alias=release"
          fi

          ./gradlew clean assembleFullRelease $SIGNING_PROPS

      - name: Upload Artifact
        uses: actions/upload-artifact@v4
        with:
          name: apk-full
          path: app/build/outputs/apk/full/release/*.apk
          retention-days: 1

  release:
    name: Create Release
    # needs: [build-foss-split, build-foss-universal, build-full]
    needs: [build-foss-split, build-full]

    runs-on: ubuntu-latest
    steps:
      - name: Checkout repository
        uses: actions/checkout@v4

      - name: Download All Artifacts
        uses: actions/download-artifact@v4
        with:
          path: release_artifacts
          merge-multiple: true

      - name: Compute release metadata
        id: meta
        env:
          RELEASE_NOTES: ${{ github.event.inputs.release_notes }}
        run: |
          set -euo pipefail
          # Derive version (Gradle file preferred, fallback to properties)
          VERSION=""
          if [ -f app/build.gradle ]; then
            VERSION=$(grep -m1 "versionName" app/build.gradle | sed -E "s/.*versionName[[:space:]]+['\"]([^'\"]+)['\"].*/\1/" || true)
          fi
          if [ -z "$VERSION" ] && [ -f app/build.gradle.kts ]; then
            VERSION=$(grep -m1 "versionName" app/build.gradle.kts | sed -E "s/.*versionName\\s*=?\\s*\"([^\"]+)\".*/\1/" || true)
          fi
            if [ -z "$VERSION" ] && [ -f gradle.properties ]; then
            VERSION=$(grep -m1 -E "^(VERSION_NAME|versionName|VERSION)=" gradle.properties | cut -d'=' -f2- | tr -d '[:space:]' || true)
          fi
          VERSION=${VERSION:-"build-${GITHUB_RUN_ID}"}

          COMMIT_ID=$(git rev-parse --short HEAD)
          # Ensure tag name is version with a leading 'v' (e.g., v0.0.1)
          case "$VERSION" in
            v*|V*) TAG_NAME="$VERSION" ;;
            *) TAG_NAME="v$VERSION" ;;
          esac

          # Prefer user-provided release notes from workflow dispatch input; fallback to git log
          if [ -n "${RELEASE_NOTES:-}" ]; then
            BODY="$RELEASE_NOTES"
          else
            BODY=$(git log --pretty=format:"%h %ad - %s (%an)" --date=short --no-merges -n 200)
          fi

          echo "tag_name=${TAG_NAME}" >> "$GITHUB_OUTPUT"
          echo "release_name=${VERSION}" >> "$GITHUB_OUTPUT"
          {
            echo 'body<<EOF'
            echo "$BODY"
            echo EOF
          } >> "$GITHUB_OUTPUT"

      - name: Create GitHub Release and upload APKs
        uses: softprops/action-gh-release@v1
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        with:
          tag_name: ${{ steps.meta.outputs.tag_name }}
          name: ${{ steps.meta.outputs.release_name }}
          body: ${{ steps.meta.outputs.body }}
          fail_on_unmatched_files: false
          files: release_artifacts/*.apk