release-gui.yml

name: Release GUI

concurrency:
  group: ${{ github.workflow }}-${{ inputs.version || github.run_id }}
  cancel-in-progress: true

on:
  workflow_call:
    inputs:
      version:
        required: true
        type: string
  workflow_dispatch:
    inputs:
      version:
        description: 'Version to release (without v prefix, e.g. 2026.10213.0)'
        required: true
        type: string

permissions:
  contents: write

jobs:
  build-gui:
    strategy:
      fail-fast: false
      matrix:
        include:
          - platform: 'macos-14'
            args: '--target universal-apple-darwin'
            rust_targets: 'aarch64-apple-darwin,x86_64-apple-darwin'
          - platform: 'ubuntu-24.04'
            args: ''
            rust_targets: ''
          - platform: 'windows-latest'
            args: ''
            rust_targets: ''

    runs-on: ${{ matrix.platform }}
    steps:
      - uses: actions/checkout@v4

      - name: Setup pnpm
        uses: pnpm/action-setup@v4

      - name: Setup Node
        uses: actions/setup-node@v4
        with:
          node-version: 25

      - name: Get pnpm store directory
        id: pnpm-cache
        shell: bash
        run: echo "STORE_PATH=$(pnpm store path)" >> $GITHUB_OUTPUT

      - uses: actions/cache@v4
        name: Setup pnpm cache
        with:
          path: ${{ steps.pnpm-cache.outputs.STORE_PATH }}
          key: ${{ runner.os }}-pnpm-store-${{ hashFiles('**/pnpm-lock.yaml') }}
          restore-keys: |
            ${{ runner.os }}-pnpm-store-

      - name: Install Rust stable
        uses: dtolnay/rust-toolchain@stable
        with:
          toolchain: stable
          targets: ${{ matrix.rust_targets }}

      - name: Get Cargo deps hash (exclude root package version for stable cache key)
        id: cargo-deps-hash
        shell: bash
        run: |
          # Normalise root package version in Cargo.lock so version bumps don't invalidate cache
          # Use openssl (macOS/Linux/Windows) instead of sha256sum (Linux-only)
          HASH=$(awk '/^name = "memory-sync-gui"$/{print; getline; sub(/version = ".*"/, "version = \"0.0.0\""); print; next} 1' gui/src-tauri/Cargo.lock | openssl dgst -sha256 2>&1 | awk '{print $NF}')
          echo "hash=$HASH" >> $GITHUB_OUTPUT

      - name: Cache cargo + tauri target
        uses: actions/cache@v4
        with:
          path: |
            ~/.cargo/registry
            ~/.cargo/git
            gui/src-tauri/target
          key: ${{ runner.os }}-cargo-${{ steps.cargo-deps-hash.outputs.hash }}
          restore-keys: |
            ${{ runner.os }}-cargo-

      - name: Cache apt packages
        if: matrix.platform == 'ubuntu-24.04'
        uses: actions/cache@v4
        with:
          path: /var/cache/apt/archives
          key: apt-gtk-${{ runner.os }}-${{ hashFiles('.github/workflows/release-gui.yml') }}
          restore-keys: apt-gtk-${{ runner.os }}-

      - name: Install dependencies (ubuntu x86_64)
        if: matrix.platform == 'ubuntu-24.04'
        run: |
          sudo apt-get update
          sudo apt-get install -y --no-install-recommends libgtk-3-dev libglib2.0-dev pkg-config libwebkit2gtk-4.1-dev libappindicator3-dev librsvg2-dev patchelf

      - name: Install workspace dependencies
        run: pnpm install --frozen-lockfile --ignore-scripts

      - name: Sync Tauri version from CLI
        shell: bash
        run: |
          version="${{ inputs.version }}"
          sed -i.bak "s/^version = \".*\"/version = \"${version}\"/" gui/src-tauri/Cargo.toml
          rm -f gui/src-tauri/Cargo.toml.bak
          jq --arg v "$version" '.version = $v' gui/src-tauri/tauri.conf.json > gui/src-tauri/tauri.conf.tmp && mv gui/src-tauri/tauri.conf.tmp gui/src-tauri/tauri.conf.json
          echo "Synced version to ${version}"

      - name: Generate route tree
        run: pnpm -F @truenine/memory-sync-gui run generate:routes

      - name: Clean old bundle artifacts
        shell: bash
        run: rm -rf gui/src-tauri/target/**/bundle

      - name: Build GUI
        working-directory: ./gui
        env:
          TAURI_SIGNING_PRIVATE_KEY: ${{ secrets.TAURI_SIGNING_PRIVATE_KEY }}
          TAURI_SIGNING_PRIVATE_KEY_PASSWORD: ${{ secrets.TAURI_SIGNING_PRIVATE_KEY_PASSWORD }}
        run: pnpm tauri build ${{ matrix.args }}

      - name: List bundle output (debug)
        shell: bash
        run: |
          echo "=== Finding all bundle artifacts ==="
          find gui/src-tauri/target -path '*/bundle/*' -type f \( -name '*.dmg' -o -name '*.exe' -o -name '*.msi' -o -name '*.AppImage' -o -name '*.deb' -o -name '*.rpm' \) 2>/dev/null || echo 'No bundle files found'

      - name: Upload artifacts
        uses: actions/upload-artifact@v4
        with:
          name: gui-${{ matrix.platform }}
          path: |
            gui/src-tauri/target/*/release/bundle/**/*.dmg
            gui/src-tauri/target/release/bundle/**/*.dmg
            gui/src-tauri/target/*/release/bundle/**/*.exe
            gui/src-tauri/target/release/bundle/**/*.exe
            gui/src-tauri/target/*/release/bundle/**/*.msi
            gui/src-tauri/target/release/bundle/**/*.msi
            gui/src-tauri/target/*/release/bundle/**/*.AppImage
            gui/src-tauri/target/release/bundle/**/*.AppImage
            gui/src-tauri/target/*/release/bundle/**/*.deb
            gui/src-tauri/target/release/bundle/**/*.deb
            gui/src-tauri/target/*/release/bundle/**/*.rpm
            gui/src-tauri/target/release/bundle/**/*.rpm
          if-no-files-found: error

  publish-release:
    needs: build-gui
    runs-on: ubuntu-24.04
    steps:
      - uses: actions/checkout@v4

      - name: Download all artifacts
        uses: actions/download-artifact@v4
        with:
          path: artifacts
          pattern: gui-*

      - name: Clean up unnecessary macOS artifacts
        run: |
          find artifacts -name '*.icns' -delete
          find artifacts -name 'Info.plist' -delete

      - name: Publish Release
        uses: softprops/action-gh-release@v2.5.0
        with:
          tag_name: v${{ inputs.version }}
          name: v${{ inputs.version }}
          files: |
            artifacts/**/*.dmg
            artifacts/**/*.exe
            artifacts/**/*.AppImage
            artifacts/**/*.deb
            artifacts/**/*.rpm
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}