name: Release Binaries & Packages

on:
  push:
    tags:
      - 'v*'
  release:
    types: [published]
  workflow_dispatch:
    inputs:
      tag:
        description: 'Release tag to publish assets to (default: v0.3.1)'
        required: false
        default: 'v0.3.1'

jobs:
  release:
    name: Build & Release Standalone Binaries (Linux & Windows Cross-Compilation)
    runs-on: logar
    steps:
      - name: Checkout Code
        uses: actions/checkout@v4
        with:
          fetch-depth: 0

      - name: Install System and Cross-Compilation Build Dependencies
        run: |
          echo "=== SYSTEM DIAGNOSTICS ==="
          uname -a || true
          python3 --version || true
          SUDO=""
          if [ "$(id -u)" -ne 0 ] && command -v sudo >/dev/null 2>&1; then
            SUDO="sudo"
          fi
          if command -v apt-get >/dev/null 2>&1; then
            echo "[*] Installing Python shared libraries, headers, NSIS via apt-get..."
            export DEBIAN_FRONTEND=noninteractive
            $SUDO apt-get clean || true
            $SUDO apt-get update --allow-releaseinfo-change -o Acquire::Check-Valid-Until=false -y || $SUDO apt-get update -y || true
            $SUDO apt-get -f install -y || true
            PY_VER=$(python3 -c "import sys; print(f'{sys.version_info.major}.{sys.version_info.minor}')" 2>/dev/null || echo "3.9")
            echo "[*] Detected Python version: ${PY_VER}"
            $SUDO apt-get install -y --fix-broken --fix-missing --allow-unauthenticated --no-install-recommends \
              nsis nsis-common "libpython${PY_VER}" "libpython${PY_VER}-dev" "python${PY_VER}-dev" \
              python3-dev libpython3-dev build-essential gcc make curl tar gzip zip unzip || true
            $SUDO apt-get install -y --fix-broken --fix-missing --allow-unauthenticated --no-install-recommends nsis nsis-common || true
            for pkg in nsis nsis-common "libpython${PY_VER}" "libpython${PY_VER}-dev" "python${PY_VER}-dev" python3-dev libpython3-dev build-essential; do
              $SUDO apt-get install -y --fix-broken --fix-missing --allow-unauthenticated --no-install-recommends "$pkg" || true
            done
            echo "[*] Verifying makensis:"
            which makensis || echo "makensis not in PATH"
            echo "[*] Verifying libpython shared library:"
            find /usr/lib /usr/local/lib -name "libpython*.so*" 2>/dev/null || true
          elif command -v apk >/dev/null 2>&1; then
            echo "[*] Installing dependencies via apk..."
            $SUDO apk add --no-cache nsis python3-dev build-base gcc make curl tar gzip zip unzip || true
          elif command -v dnf >/dev/null 2>&1; then
            echo "[*] Installing dependencies via dnf..."
            $SUDO dnf install -y mingw32-nsis nsis python3-devel gcc make curl tar gzip zip unzip || true
          fi
          python3 compilation/ensure_pip.py
          python3 -m pip install --upgrade pip --break-system-packages 2>/dev/null || python3 -m pip install --upgrade pip 2>/dev/null || true
          python3 -m pip install pyinstaller distlib cryptography -r compilation/requirements.txt --break-system-packages 2>/dev/null || python3 -m pip install pyinstaller distlib cryptography -r compilation/requirements.txt

      - name: Compile Standalone Binaries (Linux & Windows)
        run: |
          python3 compilation/package_dist.py --target all

      - name: Publish Unified Release Assets
        env:
          GITEA_TOKEN: ${{ secrets.TAG_TOKEN || github.token }}
          GITEA_SERVER_URL: ${{ github.server_url }}
          GITEA_REPOSITORY: ${{ github.repository }}
          GITEA_REF_NAME: ${{ inputs.tag || github.event.release.tag_name || github.ref_name }}
        run: |
          python3 compilation/upload_release.py --skip-build