release.yml

name: Release Pipeline

on:
  push:
    tags:
      - 'v*'
  workflow_dispatch:
    inputs:
      tag:
        description: 'Tag to build and release (e.g., v19.0.0)'
        required: true

concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: false  # Don't cancel releases

permissions:
  contents: write

env:
  CARGO_TERM_COLOR: always
  RUST_BACKTRACE: 1
  TAG_NAME: ${{ github.event.inputs.tag || github.ref_name }}

jobs:
  build_wheels:
    name: Build Wheels (${{ matrix.os }})
    runs-on: ${{ matrix.os }}
    timeout-minutes: 30
    strategy:
      fail-fast: false  # Don't cancel other OS builds if one fails
      matrix:
        os: [ubuntu-latest, macos-latest, windows-latest]
    steps:
      - uses: actions/checkout@v4
        with:
          ref: ${{ env.TAG_NAME }}
      - uses: actions/setup-python@v4
        with:
          python-version: '3.10'
      
      - name: Install Linux Dependencies
        if: runner.os == 'Linux'
        run: |
          sudo apt-get update
          sudo apt-get install -y libasound2-dev pkg-config libudev-dev
      
      - name: Build Wheels (Maturin)
        uses: PyO3/maturin-action@v1
        with:
          working-directory: bindings/python
          command: build
          args: --release --out dist
          sccache: 'true'
          # Ensure SIMD is enabled if using specific features
          # env:
          #   RUSTFLAGS: "-C target-cpu=native" 
      
      - uses: actions/upload-artifact@v4
        with:
          name: wheels-${{ matrix.os }}
          path: dist

  build_cli:
    name: Build CLI (${{ matrix.os }})
    runs-on: ${{ matrix.os }}
    timeout-minutes: 20
    strategy:
      fail-fast: false
      matrix:
        os: [ubuntu-latest, macos-latest, windows-latest]
    steps:
      - uses: actions/checkout@v4
        with:
          ref: ${{ env.TAG_NAME }}
      
      - name: Install Linux Dependencies
        if: runner.os == 'Linux'
        run: |
          sudo apt-get update
          sudo apt-get install -y libasound2-dev pkg-config libudev-dev
      
      - name: Build Binary
        # Explicitly build the Daemon bin
        run: cargo build --release --bin qres_daemon
      
      - name: Package Artifacts
        shell: bash
        run: |
          mkdir -p bin
          if [ "${{ matrix.os }}" = "windows-latest" ]; then
            cp target/release/qres_daemon.exe bin/qres-daemon-windows.exe
          elif [ "${{ matrix.os }}" = "macos-latest" ]; then
            cp target/release/qres_daemon bin/qres-daemon-macos
          else
            cp target/release/qres_daemon bin/qres-daemon-linux
          fi
      
      - uses: actions/upload-artifact@v4
        with:
          name: cli-${{ matrix.os }}
          path: bin/*
  
  build_wasm:
    name: Build WASM Core
    runs-on: ubuntu-latest
    timeout-minutes: 15
    steps:
      - uses: actions/checkout@v4
        with:
          ref: ${{ env.TAG_NAME }}
      - name: Install wasm-pack
        run: curl https://rustwasm.github.io/wasm-pack/installer/init.sh -sSf | sh
      - name: Build WASM
        working-directory: ./crates/qres_wasm
        run: wasm-pack build --target web --release
      - uses: actions/upload-artifact@v4
        with:
          name: wasm-pkg
          path: crates/qres_wasm/pkg

  build_studio:
    name: Build Studio (${{ matrix.os }})
    needs: [build_wasm]
    runs-on: ${{ matrix.os }}
    timeout-minutes: 45
    strategy:
      fail-fast: false
      matrix:
        os: [ubuntu-latest, macos-latest, windows-latest]
    env:
      # ✅ NEW V2 SIGNING VARIABLES
      TAURI_SIGNING_PRIVATE_KEY: ${{ secrets.TAURI_SIGNING_PRIVATE_KEY }}
      TAURI_SIGNING_PRIVATE_KEY_PASSWORD: ${{ secrets.TAURI_SIGNING_PRIVATE_KEY_PASSWORD }}
    steps:
      - uses: actions/checkout@v4
        with:
          ref: ${{ env.TAG_NAME }}
      
      # Download WASM so the GUI can link to it
      - uses: actions/download-artifact@v4
        with:
          name: wasm-pkg
          path: crates/qres_wasm/pkg

      - name: Install Node.js
        uses: actions/setup-node@v4
        with:
          node-version: 20

      - name: Install Rust
        uses: dtolnay/rust-toolchain@stable

      - name: Install Dependencies (Linux)
        if: runner.os == 'Linux'
        run: |
          sudo apt-get update
          sudo apt-get install -y libgtk-3-dev libwebkit2gtk-4.1-dev libappindicator3-dev librsvg2-dev patchelf

      - name: Install Frontend Dependencies
        working-directory: ./web
        run: npm install

      - name: Build Tauri App
        working-directory: ./web
        run: npm run tauri build

      - uses: actions/upload-artifact@v4
        with:
          name: studio-${{ matrix.os }}
          path: |
            web/src-tauri/target/release/bundle/deb/*.deb
            web/src-tauri/target/release/bundle/appimage/*.AppImage
            web/src-tauri/target/release/bundle/msi/*.msi
            web/src-tauri/target/release/bundle/nsis/*.exe
            web/src-tauri/target/release/bundle/dmg/*.dmg

  release:
    name: Publish Release
    needs: [build_wheels, build_cli, build_studio]
    runs-on: ubuntu-latest
    timeout-minutes: 10
    steps:
      - uses: actions/checkout@v4
        with:
          ref: ${{ env.TAG_NAME }}
      - uses: actions/download-artifact@v4
        with:
          pattern: wheels-*
          path: dist
          merge-multiple: true
      - uses: actions/download-artifact@v4
        with:
          pattern: cli-*
          path: dist
          merge-multiple: true
      - uses: actions/download-artifact@v4
        with:
          pattern: studio-*
          path: dist
          merge-multiple: true
      
      - name: Create GitHub Release
        uses: softprops/action-gh-release@v2
        with:
          name: QRES ${{ env.TAG_NAME }}
          body_path: docs/releases/RELEASE_NOTES.md
          files: dist/*
          generate_release_notes: true
          draft: false  # Explicit - ensures Zenodo webhook fires immediately