core-release.yml

name: Release

on:
  push:
    tags:
      - 'v[0-9]+.[0-9]+.[0-9]+'

permissions:
  contents: write
  packages: write

jobs:
  build:
    name: Build ${{ matrix.target }}
    runs-on: ${{ matrix.runner }}
    strategy:
      fail-fast: false
      matrix:
        include:
          - target: x86_64-unknown-linux-gnu
            runner: ubuntu-latest
            platform: linux-x86_64
          - target: aarch64-unknown-linux-gnu
            runner: ubuntu-latest
            platform: linux-aarch64
            cross: true
          - target: x86_64-apple-darwin
            runner: macos-latest
            platform: darwin-x86_64
          - target: aarch64-apple-darwin
            runner: macos-latest
            platform: darwin-aarch64

    steps:
      - uses: actions/checkout@v4

      - name: Install Rust
        uses: dtolnay/rust-toolchain@1.95.0
        with:
          targets: ${{ matrix.target }}

      - name: Cache dependencies
        uses: Swatinem/rust-cache@v2
        with:
          shared-key: release-${{ matrix.target }}
          workspaces: . -> target

      - name: Install cross (for aarch64 Linux)
        if: matrix.cross == true
        run: cargo install cross --git https://github.com/cross-rs/cross

      - name: Build (cross)
        if: matrix.cross == true
        run: cross build -p labwired-cli -p labwired-dap --release --target ${{ matrix.target }}

      - name: Build (native)
        if: matrix.cross != true
        run: cargo build -p labwired-cli -p labwired-dap --release --target ${{ matrix.target }}

      - name: Package binary
        shell: bash
        run: |
          VERSION="${{ github.ref_name }}"
          PLATFORM="${{ matrix.platform }}"
          ARCHIVE="labwired-${VERSION}-${PLATFORM}.tar.gz"

          mkdir -p dist
          # Both binaries ship in the one tarball: the CLI runs `labwired test`
          # (the .labwired/lab.yaml contract CI and the VS Code Run button share),
          # and labwired-dap is the Debug Adapter the VS Code extension spawns for
          # F5. Shipping only the CLI is what made editor debugging source-build-only.
          # These lines are pinned by scripts/ci/verify-release-runner-contract.sh.
          cp "target/${{ matrix.target }}/release/labwired" dist/labwired
          chmod +x dist/labwired
          cp "target/${{ matrix.target }}/release/labwired-dap" dist/labwired-dap
          chmod +x dist/labwired-dap

          tar -czf "${ARCHIVE}" -C dist labwired labwired-dap
          echo "ARCHIVE=${ARCHIVE}" >> "$GITHUB_ENV"

      - name: Upload artifact
        uses: actions/upload-artifact@v4
        with:
          name: labwired-${{ matrix.platform }}
          path: ${{ env.ARCHIVE }}

  release:
    name: Create GitHub Release
    needs: build
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4

      - name: Download all artifacts
        uses: actions/download-artifact@v4
        with:
          path: dist
          merge-multiple: true

      - name: Create release and upload assets
        uses: softprops/action-gh-release@v2
        with:
          name: LabWired ${{ github.ref_name }}
          body: |
            ## Installation

            ```sh
            curl -fsSL https://labwired.com/install.sh | sh
            ```

            Or with a specific version:

            ```sh
            curl -fsSL https://labwired.com/install.sh | LABWIRED_VERSION=${{ github.ref_name }} sh
            ```

            See the [full changelog](CHANGELOG.md) for what's new.
          files: dist/*.tar.gz
          fail_on_unmatched_files: true

  publish:
    name: Publish CI runner image
    needs: release
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4

      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3

      - name: Log in to GitHub Container Registry
        uses: docker/login-action@v3
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Build and publish CI runner image
        uses: docker/build-push-action@v6
        with:
          context: .
          file: ./Dockerfile.ci
          push: true
          platforms: linux/amd64
          tags: |
            ghcr.io/w1ne/labwired:${{ github.ref_name }}
            ghcr.io/w1ne/labwired:latest
          build-args: |
            VERSION=${{ github.ref_name }}
            REVISION=${{ github.sha }}

  release-smoke:
    name: Smoke released archives and runner image
    needs: [release, publish]
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4

      - name: Pull the release runner image anonymously
        shell: bash
        run: |
          set -euo pipefail
          docker logout ghcr.io || true
          if ! docker pull "ghcr.io/w1ne/labwired:${{ github.ref_name }}"; then
            echo "::error::Unable to anonymously pull the released runner image. Make the GHCR package public in GitHub Packages, then re-run this release workflow."
            exit 1
          fi

      - name: Run the release runner image
        shell: bash
        run: |
          set -euo pipefail
          docker run --rm \
            --user "$(id -u):$(id -g)" \
            --volume "$GITHUB_WORKSPACE:/workspace" \
            --workdir /workspace \
            "ghcr.io/w1ne/labwired:${{ github.ref_name }}" \
            test \
            --script examples/ci/two-node-inputs-env.yaml \
            --output-dir out/release-runner-smoke \
            --no-uart-stdout
          test -s out/release-runner-smoke/result.json
          test -s out/release-runner-smoke/junit.xml

      - name: Run the default release archive through the core action
        uses: ./.github/actions/labwired-test
        with:
          script: examples/ci/two-node-inputs-env.yaml
          output-dir: out/release-action-smoke
          args: --no-uart-stdout

      - name: Run an explicit release archive through the core action
        uses: ./.github/actions/labwired-test
        with:
          version: ${{ github.ref_name }}
          script: examples/ci/two-node-inputs-env.yaml
          output-dir: out/release-action-smoke-second
          args: --no-uart-stdout

      - name: Verify core action artifacts
        shell: bash
        run: |
          test -s out/release-action-smoke/result.json
          test -s out/release-action-smoke/junit.xml
          test -s out/release-action-smoke-second/result.json
          test -s out/release-action-smoke-second/junit.xml