build.yml

name: 'Build'

on:
  workflow_dispatch:
  pull_request:
    paths:
      - 'index.html'
      - 'package.json'
      - 'pnpm-lock.yaml'
      - 'pnpm-workspace.yaml'
      - 'public/**'
      - 'src/**'
      - 'src-tauri/**'
      - 'tsconfig*.json'
      - 'vite.config.ts'
      - '.github/actions/setup-tauri-build/**'
      - '.github/actions/setup-portable-appimage/**'
      - '.github/actions/upload-tauri-artifact/**'
      - '.github/workflows/build.yml'
      - 'scripts/normalize-appimage-zsync.sh'
  push:
    branches:
      - main
      - master
      - develop
    paths:
      - 'index.html'
      - 'package.json'
      - 'pnpm-lock.yaml'
      - 'pnpm-workspace.yaml'
      - 'public/**'
      - 'src/**'
      - 'src-tauri/**'
      - 'tsconfig*.json'
      - 'vite.config.ts'
      - '.github/actions/setup-tauri-build/**'
      - '.github/actions/setup-portable-appimage/**'
      - '.github/actions/upload-tauri-artifact/**'
      - '.github/workflows/build.yml'
      - 'scripts/normalize-appimage-zsync.sh'

permissions:
  contents: read

concurrency:
  group: build-${{ github.ref }}
  cancel-in-progress: true

jobs:
  build:
    strategy:
      fail-fast: false
      matrix:
        include:
          - platform: 'macos-26'
            label: 'macOS (Apple Silicon)'
            artifact: 'macos-apple-silicon'
            args: '--target aarch64-apple-darwin'
          - platform: 'macos-26-intel'
            label: 'macOS (Intel)'
            artifact: 'macos-intel'
            args: '--target x86_64-apple-darwin'
          - platform: 'ubuntu-22.04'
            label: 'Ubuntu'
            artifact: 'linux-ubuntu'
            rpm_artifact: 'linux-fedora'
            args: '--bundles deb,rpm'
          - platform: 'ubuntu-22.04-arm'
            label: 'Ubuntu (ARM)'
            artifact: 'linux-ubuntu-arm'
            rpm_artifact: 'linux-fedora-arm'
            args: '--bundles deb,rpm'
          - platform: 'windows-latest'
            label: 'Windows'
            nsis_artifact: 'windows-nsis'
            msi_artifact: 'windows-msi'
            args: ''
          - platform: 'windows-11-arm'
            label: 'Windows (ARM)'
            nsis_artifact: 'windows-arm-nsis'
            msi_artifact: 'windows-arm-msi'
            args: ''

    runs-on: ${{ matrix.platform }}
    name: ${{ matrix.label }}
    timeout-minutes: 45
    steps:
      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
        with:
          persist-credentials: false

      - name: Setup Tauri build
        uses: ./.github/actions/setup-tauri-build
        with:
          platform: ${{ matrix.platform }}
          rust-targets: ${{ matrix.platform == 'macos-26' && 'aarch64-apple-darwin' || '' }}

      - name: Show Apple toolchain
        if: startsWith(matrix.platform, 'macos')
        shell: bash
        run: |
          xcodebuild -version
          xcrun --sdk macosx --show-sdk-version
          xcrun --sdk macosx --show-sdk-path

      - uses: tauri-apps/tauri-action@84b9d35b5fc46c1e45415bdb6144030364f7ebc5 # v0
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          MACOSX_DEPLOYMENT_TARGET: '12.0'
          CARGO_TARGET_AARCH64_APPLE_DARWIN_RUSTFLAGS: '-C link-arg=-mmacosx-version-min=12.0'
          CARGO_TARGET_X86_64_APPLE_DARWIN_RUSTFLAGS: '-C link-arg=-mmacosx-version-min=12.0'
        with:
          args: ${{ matrix.args }} --config '{"bundle":{"createUpdaterArtifacts":false}}'

      - name: Upload macOS artifacts
        if: startsWith(matrix.platform, 'macos')
        uses: ./.github/actions/upload-tauri-artifact
        with:
          name: Chiri-${{ matrix.artifact }}
          path: |
            src-tauri/target/**/release/bundle/**/*.dmg

      - name: Upload Ubuntu artifacts
        if: startsWith(matrix.platform, 'ubuntu')
        uses: ./.github/actions/upload-tauri-artifact
        with:
          name: Chiri-${{ matrix.artifact }}
          path: |
            src-tauri/target/**/release/bundle/**/*.deb

      - name: Upload Fedora artifacts
        if: startsWith(matrix.platform, 'ubuntu')
        uses: ./.github/actions/upload-tauri-artifact
        with:
          name: Chiri-${{ matrix.rpm_artifact }}
          path: |
            src-tauri/target/**/release/bundle/**/*.rpm

      - name: Upload Windows NSIS artifacts
        if: startsWith(matrix.platform, 'windows')
        uses: ./.github/actions/upload-tauri-artifact
        with:
          name: Chiri-${{ matrix.nsis_artifact }}
          path: |
            src-tauri/target/**/release/bundle/**/*-setup.exe

      - name: Upload Windows MSI artifacts
        if: startsWith(matrix.platform, 'windows')
        uses: ./.github/actions/upload-tauri-artifact
        with:
          name: Chiri-${{ matrix.msi_artifact }}
          path: |
            src-tauri/target/**/release/bundle/**/*.msi

  appimage:
    strategy:
      fail-fast: false
      matrix:
        include:
          - platform: 'ubuntu-24.04'
            label: 'AppImage (x86_64)'
            artifact: 'linux-appimage'
            arch: 'amd64'
          - platform: 'ubuntu-24.04-arm'
            label: 'AppImage (ARM64)'
            artifact: 'linux-appimage-arm'
            arch: 'aarch64'

    runs-on: ${{ matrix.platform }}
    container: ghcr.io/pkgforge-dev/archlinux@sha256:f6fc7e14b0612a355d7ab50efb3cc40010ba28e4766860bd238d313b308f190b
    name: ${{ matrix.label }}
    timeout-minutes: 60
    steps:
      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
        with:
          persist-credentials: false

      - name: Setup portable AppImage build
        uses: ./.github/actions/setup-portable-appimage

      - name: Get Chiri version
        id: version
        shell: bash
        run: echo "version=$(awk -F '"' '/^version = "/ { print $2; exit }' src-tauri/Cargo.toml)" >> "$GITHUB_OUTPUT"

      - name: Build portable AppImage
        uses: tauri-apps/tauri-action@84b9d35b5fc46c1e45415bdb6144030364f7ebc5 # v0
        env:
          TAURI_BUNDLER_NEW_APPIMAGE_FORMAT: 'true'
          UPINFO: 'gh-releases-zsync|chiriapp|chiri|latest|Chiri_*_${{ matrix.arch }}.AppImage.zsync'
          VERSION: ${{ steps.version.outputs.version }}
        with:
          tauriScript: cargo tauri
          args: --bundles appimage --config src-tauri/tauri.appimage.conf.json --config '{"bundle":{"createUpdaterArtifacts":false}}'

      - name: Verify AppImage update metadata
        shell: bash
        env:
          APPIMAGE_ARCH: ${{ matrix.arch }}
          VERSION: ${{ steps.version.outputs.version }}
        run: |
          set -euo pipefail

          expected="garden.chiri.Chiri_${VERSION}_${APPIMAGE_ARCH}.AppImage.zsync"
          mapfile -t zsync_paths < <(
            find src-tauri/target \
              -type f \
              -path '*/release/bundle/appimage/*.AppImage.zsync' \
              -name "$expected" \
              -print
          )

          if [ "${#zsync_paths[@]}" -ne 1 ]; then
            echo "::error::Expected exactly one AppImage zsync file named $expected"
            printf '%s\n' "${zsync_paths[@]}"
            exit 1
          fi

          appimage_path="${zsync_paths[0]%.zsync}"
          expected_upinfo="gh-releases-zsync|chiriapp|chiri|latest|Chiri_*_${APPIMAGE_ARCH}.AppImage.zsync"
          actual_upinfo="$("$appimage_path" --appimage-updateinformation)"
          if [ "$actual_upinfo" != "$expected_upinfo" ]; then
            echo "::error::Unexpected AppImage update information: $actual_upinfo"
            exit 1
          fi

          PUBLIC_APPIMAGE_NAME="Chiri_${VERSION}_${APPIMAGE_ARCH}.AppImage" \
            APPIMAGE_PATH="$appimage_path" \
            bash scripts/normalize-appimage-zsync.sh

      - name: Upload AppImage artifact
        uses: ./.github/actions/upload-tauri-artifact
        with:
          name: Chiri-${{ matrix.artifact }}
          path: |
            src-tauri/target/**/release/bundle/**/*.AppImage
            src-tauri/target/**/release/bundle/**/*.AppImage.zsync