release.yml

name: Release

on:
  push:
    tags:
      - 'v*'
  workflow_dispatch:

env:
  CARGO_TERM_COLOR: always

jobs:
  build:
    strategy:
      fail-fast: false
      matrix:
        include:
          - os: ubuntu-latest
            target: x86_64-unknown-linux-gnu
            artifact: cortex-linux-x64
            ext: ""
          - os: macos-latest
            target: x86_64-apple-darwin
            artifact: cortex-darwin-x64
            ext: ""
          - os: macos-latest
            target: aarch64-apple-darwin
            artifact: cortex-darwin-arm64
            ext: ""
          - os: windows-latest
            target: x86_64-pc-windows-msvc
            artifact: cortex-win32-x64
            ext: ".exe"
          - os: windows-latest
            target: i686-pc-windows-msvc
            artifact: cortex-win32-ia32
            ext: ".exe"

    runs-on: ${{ matrix.os }}

    steps:
      - uses: actions/checkout@v4

      - name: Install Rust toolchain
        uses: dtolnay/rust-toolchain@stable
        with:
          targets: ${{ matrix.target }}

      - name: Cache cargo
        uses: actions/cache@v4
        with:
          path: |
            ~/.cargo/registry
            ~/.cargo/git
            target
          key: ${{ matrix.target }}-cargo-${{ hashFiles('**/Cargo.lock') }}
          restore-keys: ${{ matrix.target }}-cargo-

      - name: Build release binary
        run: cargo build --release --target ${{ matrix.target }}

      - name: Package (Unix)
        if: runner.os != 'Windows'
        shell: bash
        run: |
          mkdir -p dist
          cp target/${{ matrix.target }}/release/cortex dist/cortex
          cd dist
          tar -czf ${{ matrix.artifact }}.tar.gz cortex
          sha256sum ${{ matrix.artifact }}.tar.gz > ${{ matrix.artifact }}.tar.gz.sha256

      - name: Package (Windows)
        if: runner.os == 'Windows'
        shell: pwsh
        run: |
          New-Item -ItemType Directory -Force -Path dist
          Copy-Item "target\${{ matrix.target }}\release\cortex.exe" "dist\cortex.exe"
          Set-Location dist
          tar -czf "${{ matrix.artifact }}.tar.gz" "cortex.exe"
          $hash = (Get-FileHash "${{ matrix.artifact }}.tar.gz" -Algorithm SHA256).Hash.ToLower()
          "$hash  ${{ matrix.artifact }}.tar.gz" | Out-File -Encoding ascii "${{ matrix.artifact }}.tar.gz.sha256"

      - name: Upload build artifact
        uses: actions/upload-artifact@v4
        with:
          name: ${{ matrix.artifact }}
          path: dist/${{ matrix.artifact }}.*

  release:
    needs: build
    runs-on: ubuntu-latest
    if: startsWith(github.ref, 'refs/tags/')
    permissions:
      contents: write

    steps:
      - uses: actions/checkout@v4

      - name: Download all build artifacts
        uses: actions/download-artifact@v4
        with:
          path: artifacts
          merge-multiple: true

      - name: List artifacts
        run: ls -la artifacts/

      - name: Verify checksums
        shell: bash
        run: |
          echo "=== Binary Verification ==="
          echo ""
          cd artifacts
          for sha_file in *.sha256; do
            if [ -f "$sha_file" ]; then
              echo "Verifying: $sha_file"
              sha256sum -c "$sha_file"
            fi
          done
          echo ""
          echo "=== All checksums verified ==="

      - name: Extract release notes
        shell: bash
        run: |
          # Get version from tag (strip 'v' prefix)
          TAG="${GITHUB_REF#refs/tags/v}"
          echo "Looking for version: $TAG"
          
          # Safely extract changelog section using grep + sed (avoids awk regex issues with special chars)
          if grep -q "^## \[${TAG}\]" CHANGELOG.md; then
            # Extract from the matching header to the next ## [ header
            sed -n "/^## \[${TAG}\]/,/^## \[/{ /^## \[${TAG}\]/d; /^## \[/d; p; }" CHANGELOG.md > release_notes.md
          fi
          
          # If empty, use the first changelog section
          if [ ! -s release_notes.md ]; then
            echo "No exact match for $TAG, using first changelog section"
            sed -n '/^## \[/{n; :loop; /^## \[/q; p; n; b loop}' CHANGELOG.md > release_notes.md
          fi
          
          # If still empty, use a default
          if [ ! -s release_notes.md ]; then
            echo "Release v${TAG}" > release_notes.md
          fi
          
          echo "Release notes:"
          cat release_notes.md

      - name: Create GitHub Release
        uses: softprops/action-gh-release@v2
        with:
          files: artifacts/*
          body_path: release_notes.md
          draft: false
          prerelease: false
          make_latest: true

  npm-publish:
    needs: release
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4

      - name: Extract version from tag
        id: version
        run: echo "version=${GITHUB_REF#refs/tags/v}" >> "$GITHUB_OUTPUT"

      - name: Update package.json version
        working-directory: npm
        run: |
          node -e "
            const pkg = require('./package.json');
            pkg.version = '${{ steps.version.outputs.version }}';
            require('fs').writeFileSync('package.json', JSON.stringify(pkg, null, 2) + '\n');
          "

      - uses: actions/setup-node@v4
        with:
          node-version: '20'
          registry-url: 'https://registry.npmjs.org'

      - name: Publish to npm
        working-directory: npm
        run: npm publish --access public
        env:
          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}