paseo/.github/workflows/android-apk-release.yml

name: Android APK Release

on:
  push:
    tags:
      - "v*"
      - "android-v*"
  workflow_dispatch:
    inputs:
      tag:
        description: "Existing tag to build (e.g. v0.1.0)"
        required: true
        type: string

concurrency:
  group: android-apk-release-${{ github.event_name == 'workflow_dispatch' && github.event.inputs.tag || github.ref }}
  cancel-in-progress: false

env:
  SOURCE_TAG: ${{ github.event_name == 'workflow_dispatch' && github.event.inputs.tag || github.ref_name }}

jobs:
  publish-android-apk:
    permissions:
      contents: write
      packages: read
    runs-on: ubuntu-latest

    steps:
      - uses: actions/checkout@v4
        with:
          fetch-depth: 0
          ref: ${{ github.event_name == 'workflow_dispatch' && github.event.inputs.tag || github.ref }}

      - name: Resolve release tag
        shell: bash
        run: |
          set -euo pipefail
          source_tag="${SOURCE_TAG}"
          if [[ "$source_tag" =~ ^(android-)?v([0-9]+\.[0-9]+\.[0-9]+) ]]; then
            release_tag="v${BASH_REMATCH[2]}"
          else
            release_tag="$source_tag"
          fi
          echo "RELEASE_TAG=$release_tag" >> "$GITHUB_ENV"

      - name: Setup Node
        uses: actions/setup-node@v4
        with:
          node-version: "22"
          cache: "npm"
          registry-url: "https://npm.pkg.github.com"
          scope: "@boudra"

      - name: Install JS dependencies
        run: npm ci
        env:
          NODE_AUTH_TOKEN: ${{ secrets.GITHUB_TOKEN }}

      - name: Setup Expo and EAS
        uses: expo/expo-github-action@v8
        with:
          eas-version: latest
          token: ${{ secrets.EXPO_TOKEN }}

      - name: Build Android APK on EAS
        id: eas_build
        shell: bash
        run: |
          set -euo pipefail
          cd packages/app

          build_json="$(npx eas build --platform android --profile production-apk --non-interactive --wait --json)"
          echo "$build_json" > "$RUNNER_TEMP/eas-build.json"

          build_id="$(jq -r 'if type == "array" then .[0].id // empty else .id // empty end' "$RUNNER_TEMP/eas-build.json")"
          if [ -z "$build_id" ]; then
            echo "Failed to determine EAS build ID."
            cat "$RUNNER_TEMP/eas-build.json"
            exit 1
          fi

          echo "build_id=$build_id" >> "$GITHUB_OUTPUT"

      - name: Resolve APK artifact URL
        id: artifact
        shell: bash
        run: |
          set -euo pipefail
          cd packages/app

          build_view_json="$(npx eas build:view '${{ steps.eas_build.outputs.build_id }}' --json)"
          echo "$build_view_json" > "$RUNNER_TEMP/eas-build-view.json"

          artifact_url="$(jq -r '.artifacts.buildUrl // .artifacts.applicationArchiveUrl // empty' "$RUNNER_TEMP/eas-build-view.json")"
          if [ -z "$artifact_url" ]; then
            echo "Failed to determine APK artifact URL."
            cat "$RUNNER_TEMP/eas-build-view.json"
            exit 1
          fi

          asset_name="paseo-${RELEASE_TAG}-android.apk"
          asset_path="$RUNNER_TEMP/$asset_name"

          curl --fail --location --output "$asset_path" "$artifact_url"

          echo "asset_name=$asset_name" >> "$GITHUB_OUTPUT"
          echo "asset_path=$asset_path" >> "$GITHUB_OUTPUT"

      - name: Wait for GitHub release tag
        env:
          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        shell: bash
        run: |
          set -euo pipefail
          for attempt in $(seq 1 90); do
            if gh release view "$RELEASE_TAG" --repo "${{ github.repository }}" >/dev/null 2>&1; then
              echo "Found release for tag $RELEASE_TAG"
              exit 0
            fi
            echo "Release for $RELEASE_TAG is not available yet (attempt $attempt/90)."
            sleep 20
          done

          echo "Timed out waiting for GitHub release tag $RELEASE_TAG."
          exit 1

      - name: Upload APK to GitHub Release
        env:
          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        run: |
          gh release upload "$RELEASE_TAG" "${{ steps.artifact.outputs.asset_path }}" --clobber --repo "${{ github.repository }}"