eranos/.gitlab-ci.yml

image: node:22

default:
  interruptible: true
  cache:
    key:
      files:
        - package-lock.json
    paths:
      - node_modules/

stages:
  - test
  - deploy
  - build
  - release
  - publish

test:
  stage: test
  timeout: 5 minutes
  rules:
    - if: $CI_COMMIT_TAG
      when: never
    - when: always
  script:
    - npm run test

pages:
  stage: deploy
  timeout: 5 minutes
  script:
    - npm run build
    - rm -rf public
    - mv dist public
  artifacts:
    paths:
      - public
  only:
    variables:
      - $CI_DEFAULT_BRANCH == $CI_COMMIT_REF_NAME

build-apk:
  stage: build
  image: eclipse-temurin:21-jdk
  timeout: 15 minutes
  needs: []
  rules:
    - if: $CI_COMMIT_TAG =~ /^v\d+\.\d+\.\d+/
  variables:
    ANDROID_SDK_ROOT: /opt/android-sdk
    ANDROID_HOME: /opt/android-sdk
  before_script:
    # Install system dependencies
    - apt-get update -qq
    - apt-get install -y -qq curl unzip > /dev/null

    # Install Node.js 22
    - curl -fsSL https://deb.nodesource.com/setup_22.x | bash -
    - apt-get install -y -qq nodejs > /dev/null
    - node --version
    - npm --version

    # Install Android SDK command-line tools
    - mkdir -p $ANDROID_SDK_ROOT/cmdline-tools
    - curl -fsSL https://dl.google.com/android/repository/commandlinetools-linux-11076708_latest.zip -o cmdline-tools.zip
    - unzip -q cmdline-tools.zip -d $ANDROID_SDK_ROOT/cmdline-tools
    - mv $ANDROID_SDK_ROOT/cmdline-tools/cmdline-tools $ANDROID_SDK_ROOT/cmdline-tools/latest
    - export PATH="$ANDROID_SDK_ROOT/cmdline-tools/latest/bin:$ANDROID_SDK_ROOT/platform-tools:$PATH"

    # Accept licenses and install SDK components
    - printf 'y\ny\ny\ny\ny\ny\ny\n' | sdkmanager --licenses > /dev/null 2>&1 || true
    - sdkmanager --install "platforms;android-36" "build-tools;36.0.0" "platform-tools" > /dev/null

    # Write local.properties for Gradle
    - echo "sdk.dir=$ANDROID_SDK_ROOT" > android/local.properties

    # Decode signing keystore and migrate JKS -> PKCS12 for Gradle compatibility
    - echo "$ANDROID_KEYSTORE_BASE64" | base64 -d > android/app/my-upload-key.jks
    - keytool -importkeystore
        -srckeystore android/app/my-upload-key.jks
        -destkeystore android/app/my-upload-key.keystore
        -deststoretype pkcs12
        -srcstorepass "$KEYSTORE_PASSWORD"
        -deststorepass "$KEYSTORE_PASSWORD"
        -srcalias upload
        -destalias upload
        -noprompt
    - rm android/app/my-upload-key.jks

    # Write key.properties from CI/CD variables
    - |
      cat > android/key.properties << EOF
      storePassword=$KEYSTORE_PASSWORD
      keyPassword=$KEY_PASSWORD
      keyAlias=upload
      storeFile=my-upload-key.keystore
      EOF
  script:
    # Extract version from git tag (e.g., v2026.03.16+974041a)
    # versionName: full calver+sha string (e.g., 2026.03.16+974041a)
    # versionCode: CI_PIPELINE_IID — GitLab's per-project pipeline counter,
    #              always monotonically increasing, no git binary required
    - TAG="${CI_COMMIT_TAG#v}"
    - VERSION_NAME="${TAG}"
    - VERSION_CODE="${CI_PIPELINE_IID}"
    - echo "Building version $VERSION_NAME (code $VERSION_CODE) from tag $CI_COMMIT_TAG"

    # Stamp version into build.gradle
    - sed -i "s/versionCode [0-9]*/versionCode ${VERSION_CODE}/" android/app/build.gradle
    - sed -i "s/versionName \"[^\"]*\"/versionName \"${VERSION_NAME}\"/" android/app/build.gradle

    # Build web assets
    - npm ci --silent
    - npx vite build -l error
    - cp dist/index.html dist/404.html

    # Sync web assets to Capacitor Android project
    - npx cap sync android

    # Build signed release APK
    - cd android && chmod +x gradlew && ./gradlew assembleRelease && cd ..

    # Copy APK to a predictable artifact path
    - mkdir -p artifacts
    - cp android/app/build/outputs/apk/release/app-release.apk "artifacts/Ditto-${CI_COMMIT_TAG}.apk"
    - ls -lh "artifacts/Ditto-${CI_COMMIT_TAG}.apk"
  artifacts:
    paths:
      - "artifacts/Ditto-${CI_COMMIT_TAG}.apk"
    expire_in: 90 days
  cache:
    key: android-gradle
    paths:
      - android/.gradle/
      - .gradle/

release:
  stage: release
  image: registry.gitlab.com/gitlab-org/release-cli:latest
  needs:
    - build-apk
  rules:
    - if: $CI_COMMIT_TAG =~ /^v\d+\.\d+\.\d+/
  script:
    - echo "Creating release for $CI_COMMIT_TAG"
  release:
    tag_name: $CI_COMMIT_TAG
    name: $CI_COMMIT_TAG
    description: "Ditto $CI_COMMIT_TAG"
    assets:
      links:
        - name: "Ditto-${CI_COMMIT_TAG}.apk"
          url: "${CI_PROJECT_URL}/-/jobs/artifacts/${CI_COMMIT_TAG}/raw/artifacts/Ditto-${CI_COMMIT_TAG}.apk?job=build-apk"
          link_type: package

publish-zapstore:
  stage: publish
  image: golang:1.24
  needs:
    - build-apk
  rules:
    - if: $CI_COMMIT_TAG =~ /^v\d+\.\d+\.\d+/
  variables:
    SIGN_WITH: $ZAPSTORE_BUNKER_URL
  script:
    - go install github.com/zapstore/zsp@latest

    # Restore the persistent NIP-46 client key so the bunker recognizes us across CI runs.
    # zsp stores client keys at ~/.config/zsp/bunker-keys/<bunker-pubkey>.key
    - BUNKER_PUBKEY=$(echo "$ZAPSTORE_BUNKER_URL" | sed 's|bunker://||;s|?.*||')
    - mkdir -p ~/.config/zsp/bunker-keys
    - echo "$ZAPSTORE_CLIENT_KEY" > ~/.config/zsp/bunker-keys/${BUNKER_PUBKEY}.key

    - APK_PATH="artifacts/Ditto-${CI_COMMIT_TAG}.apk"
    - 'sed -i "2i release_source: ./${APK_PATH}" zapstore.yaml'
    - zsp publish -y --skip-metadata --skip-preview zapstore.yaml