tftsr-devops_investigation/.woodpecker/release.yml

---
# Release pipeline — triggered on v* tags
# Agents:
#   linux/amd64 → woodpecker_agent (native x86_64 on 172.0.0.29, gogs_default network)
#   linux/arm64 → woodpecker-agent.service on sarman's local arm64 machine (direct IP access)
#
# Note: amd64 steps share a workspace (same agent). The arm64 step runs on a separate
# agent with its own workspace and clones the repo directly via host IP.

clone:
  git:
    image: alpine/git
    network_mode: gogs_default
    commands:
      - git init -b master
      - git remote add origin http://gitea_app:3000/sarman/tftsr-devops_investigation.git
      - git fetch --depth=1 origin +refs/tags/${CI_COMMIT_TAG}:refs/tags/${CI_COMMIT_TAG}
      - git checkout ${CI_COMMIT_TAG}

steps:
  - name: build-linux-amd64
    image: rust:1.88-slim
    labels:
      platform: linux/amd64
    environment:
      TARGET: x86_64-unknown-linux-gnu
    when:
      - event: tag
    commands:
      - apt-get update -qq && apt-get install -y -qq libwebkit2gtk-4.1-dev libssl-dev libgtk-3-dev libayatana-appindicator3-dev librsvg2-dev patchelf pkg-config curl perl
      - curl -fsSL https://deb.nodesource.com/setup_22.x | bash -
      - apt-get install -y nodejs
      - npm ci --legacy-peer-deps
      - rustup target add $TARGET
      - cargo install tauri-cli --version "^2" --locked
      - CI=true cargo tauri build --target $TARGET
      - mkdir -p artifacts/linux-amd64
      - find src-tauri/target/$TARGET/release/bundle -name "*.deb" -o -name "*.rpm" -o -name "*.AppImage" | xargs -I{} cp {} artifacts/linux-amd64/

  - name: build-windows-amd64
    image: rust:1.88-slim
    labels:
      platform: linux/amd64
    environment:
      TARGET: x86_64-pc-windows-gnu
      CC_x86_64_pc_windows_gnu: x86_64-w64-mingw32-gcc
      CXX_x86_64_pc_windows_gnu: x86_64-w64-mingw32-g++
      AR_x86_64_pc_windows_gnu: x86_64-w64-mingw32-ar
      CARGO_TARGET_X86_64_PC_WINDOWS_GNU_LINKER: x86_64-w64-mingw32-gcc
    when:
      - event: tag
    commands:
      - apt-get update -qq && apt-get install -y -qq mingw-w64 curl nsis perl make
      - curl -fsSL https://deb.nodesource.com/setup_22.x | bash -
      - apt-get install -y nodejs
      - npm ci --legacy-peer-deps
      - rustup target add $TARGET
      - cargo install tauri-cli --version "^2" --locked
      - CI=true cargo tauri build --target $TARGET
      - mkdir -p artifacts/windows-amd64
      - find src-tauri/target/$TARGET/release/bundle -name "*.exe" -o -name "*.msi" | xargs -I{} cp {} artifacts/windows-amd64/ 2>/dev/null || true

  - name: build-linux-arm64
    image: rust:1.88-slim
    environment:
      TARGET: aarch64-unknown-linux-gnu
    when:
      - event: tag
    secrets: [GOGS_TOKEN]
    commands:
      - apt-get update -qq && apt-get install -y -qq libwebkit2gtk-4.1-dev libssl-dev libgtk-3-dev libayatana-appindicator3-dev librsvg2-dev patchelf pkg-config curl perl git
      - curl -fsSL https://deb.nodesource.com/setup_22.x | bash -
      - apt-get install -y nodejs
      # Clone repo directly (arm64 agent is on local machine, not on gogs_default network)
      - git init -b master
      - git remote add origin http://172.0.0.29:3000/sarman/tftsr-devops_investigation.git
      - git fetch --depth=1 origin +refs/tags/${CI_COMMIT_TAG}:refs/tags/${CI_COMMIT_TAG}
      - git checkout ${CI_COMMIT_TAG}
      - npm ci --legacy-peer-deps
      - rustup target add $TARGET
      - cargo install tauri-cli --version "^2" --locked
      - CI=true cargo tauri build --target $TARGET
      - mkdir -p artifacts/linux-arm64
      - find src-tauri/target/$TARGET/release/bundle -name "*.deb" -o -name "*.rpm" -o -name "*.AppImage" | xargs -I{} cp {} artifacts/linux-arm64/
      # Upload arm64 artifacts inline (uses host IP, accessible from local arm64 machine)
      - |
        TAG=${CI_COMMIT_TAG}
        REPO=${CI_REPO}
        API="http://172.0.0.29:3000/api/v1"
        curl -sf -X POST "$API/repos/$REPO/releases" \
          -H "Authorization: token $GOGS_TOKEN" \
          -H "Content-Type: application/json" \
          -d "{\"tag_name\":\"$TAG\",\"name\":\"TFTSR $TAG\",\"body\":\"Release $TAG\",\"draft\":false}" || true
        RELEASE_ID=$(curl -sf "$API/repos/$REPO/releases/tags/$TAG" \
          -H "Authorization: token $GOGS_TOKEN" | grep -o '"id":[0-9]*' | head -1 | cut -d: -f2)
        echo "Release ID: $RELEASE_ID"
        for f in artifacts/linux-arm64/*; do
          [ -f "$f" ] || continue
          echo "Uploading $f..."
          curl -sf -X POST "$API/repos/$REPO/releases/$RELEASE_ID/assets" \
            -H "Authorization: token $GOGS_TOKEN" \
            -F "attachment=@$f;filename=$(basename $f)" && echo "OK" || echo "Upload failed: $f"
        done        

  - name: upload-release
    image: curlimages/curl:latest
    labels:
      platform: linux/amd64
    network_mode: gogs_default
    when:
      - event: tag
    secrets: [GOGS_TOKEN]
    commands:
      - |
        TAG=${CI_COMMIT_TAG}
        REPO=${CI_REPO}
        API="http://gitea_app:3000/api/v1"

        # Create release (idempotent — arm64 step may have already created it)
        curl -sf -X POST "$API/repos/$REPO/releases" \
          -H "Authorization: token $GOGS_TOKEN" \
          -H "Content-Type: application/json" \
          -d "{\"tag_name\":\"$TAG\",\"name\":\"TFTSR $TAG\",\"body\":\"Release $TAG\",\"draft\":false}" || true

        # Get release ID
        RELEASE_ID=$(curl -sf "$API/repos/$REPO/releases/tags/$TAG" \
          -H "Authorization: token $GOGS_TOKEN" | grep -o '"id":[0-9]*' | head -1 | cut -d: -f2)
        echo "Release ID: $RELEASE_ID"

        # Upload linux-amd64 and windows-amd64 artifacts
        for dir in artifacts/linux-amd64 artifacts/windows-amd64; do
          [ -d "$dir" ] || continue
          for f in "$dir"/*; do
            [ -f "$f" ] || continue
            echo "Uploading $f..."
            curl -sf -X POST "$API/repos/$REPO/releases/$RELEASE_ID/assets" \
              -H "Authorization: token $GOGS_TOKEN" \
              -F "attachment=@$f;filename=$(basename $f)" && echo "OK" || echo "Upload failed: $f"
          done
        done