kryz-go-flutter/.gitea/workflows/ci.yml

# kryz-go-flutter CI Pipeline
# Triggers on push and pull_request
# Stages: lint -> test -> build (Android + iOS) -> artifacts

name: CI

on:
  push:
    branches: [main, develop]
  pull_request:
    branches: [main]

# Cancel in-progress runs on new push to same branch
concurrency:
  group: ${{ gitea.workflow }}-${{ gitea.ref }}
  cancel-in-progress: true

env:
  FLUTTER_VERSION: "stable"

jobs:
  # ── Stage 1: Lint & static analysis ──────────────────────────────
  lint:
    name: Lint
    runs-on: [self-hosted, linux]
    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Setup Flutter
        run: |
          # Direct Flutter SDK download — subosito/flutter-action queries
          # GitHub internal APIs that are unavailable on self-hosted Gitea runners.
          if [ "$(uname)" = "Darwin" ]; then
            PLATFORM="macos"
            ARCH="darwin-x64"
          else
            PLATFORM="linux"
            ARCH="linux-x64"
          fi
          curl -fsSL "https://storage.googleapis.com/download.flutter.io/flutter_${ARCH}-stable.tar.xz" \
            -o flutter.tar.xz
          tar -xf flutter.tar.xz
          export PATH="$PWD/flutter/bin:$PATH"
          flutter --version
          # Persist for subsequent steps (Gitea Actions / act compatibility)
          echo "$PWD/flutter/bin" >> "$GITHUB_PATH" || echo "$PWD/flutter/bin" >> "$HOME/.env_path"

      - name: Install dependencies
        run: flutter pub get

      - name: Generate stubs (lint gate support)
        if: hashFiles('theme.json') == ''
        run: python3 ci_stub_gen.py

      - name: Analyze Dart code
        run: flutter analyze --fatal-warnings

      - name: Check formatting
        run: dart format --set-exit-if-changed lib/ test/


  # ── Stage 2: Unit & widget tests ─────────────────────────────────
  test:
    name: Test
    runs-on: [self-hosted, linux]
    needs: [lint]
    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Setup Flutter
        run: |
          if [ "$(uname)" = "Darwin" ]; then
            ARCH="darwin-x64"
          else
            ARCH="linux-x64"
          fi
          curl -fsSL "https://storage.googleapis.com/download.flutter.io/flutter_${ARCH}-stable.tar.xz" \
            -o flutter.tar.xz
          tar -xf flutter.tar.xz
          export PATH="$PWD/flutter/bin:$PATH"
          flutter --version
          echo "$PWD/flutter/bin" >> "$GITHUB_PATH" || echo "$PWD/flutter/bin" >> "$HOME/.env_path"

      - name: Install dependencies
        run: flutter pub get

      - name: Generate stubs (lint gate support)
        run: python3 ci_stub_gen.py

      - name: Run tests
        run: flutter test --reporter=expanded

      - name: Run tests with coverage
        if: gitea.ref == 'refs/heads/main' && gitea.event_name == 'push'
        run: flutter test --coverage

      - name: "Note: coverage artifact storage not configured"
        if: gitea.ref == 'refs/heads/main' && gitea.event_name == 'push'
        run: |
          echo "WARNING: Gitea Actions artifact storage is not configured."
          echo "Coverage report available at: coverage/lcov.info"


  # ── Stage 3: Android build ──────────────────────────────────────
  build-android:
    name: Build Android
    runs-on: ubuntu-latest
    needs: [test]
    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Setup Java 17
        run: |
          # Direct Temurin JDK download — actions/setup-java queries GitHub APIs
          curl -fsSL "https://github.com/adoptium/temurin17-binaries/releases/download/jdk-17.0.12%2B7/OpenJDK17U-jdk_x64_linux_hotspot_17.0.12_7.tar.gz" \
            -o jdk.tar.gz
          mkdir -p "$HOME/jdk"
          tar -xzf jdk.tar.gz -C "$HOME/jdk" --strip-components=1
          export JAVA_HOME="$HOME/jdk"
          export PATH="$JAVA_HOME/bin:$PATH"
          java -version
          echo "JAVA_HOME=$JAVA_HOME" >> "$GITHUB_ENV" || export JAVA_HOME="$JAVA_HOME"
          echo "$JAVA_HOME/bin" >> "$GITHUB_PATH" || export PATH="$JAVA_HOME/bin:$PATH"

      - name: Setup Flutter
        run: |
          curl -fsSL "https://storage.googleapis.com/download.flutter.io/flutter_linux-x64-stable.tar.xz" \
            -o flutter.tar.xz
          tar -xf flutter.tar.xz
          export PATH="$PWD/flutter/bin:$PATH"
          flutter --version
          echo "$PWD/flutter/bin" >> "$GITHUB_PATH" || echo "$PWD/flutter/bin" >> "$HOME/.env_path"

      - name: Install Android SDK command-line tools
        run: |
          export ANDROID_HOME="${HOME}/android-sdk"
          mkdir -p "${ANDROID_HOME}/cmdline-tools"
          curl -fsSL "https://dl.google.com/android/repository/commandlinetools-linux-11076708_latest.zip" -o cmdline-tools.zip
          unzip -q cmdline-tools.zip -d "${ANDROID_HOME}/cmdline-tools"
          mv "${ANDROID_HOME}/cmdline-tools/cmdline-tools" "${ANDROID_HOME}/cmdline-tools/latest"
          export PATH="${ANDROID_HOME}/cmdline-tools/latest/bin:${PATH}"
          yes | sdkmanager --licenses >/dev/null 2>&1 || true
          sdkmanager "platform-tools" "platforms;android-35" "build-tools;35.0.0"
          echo "ANDROID_HOME=${ANDROID_HOME}" >> "$GITHUB_ENV" || echo "ANDROID_HOME=${ANDROID_HOME}" >> "$HOME/.env"
          echo "${ANDROID_HOME}/cmdline-tools/latest/bin" >> "$GITHUB_PATH" || export PATH="${ANDROID_HOME}/cmdline-tools/latest/bin:${PATH}"
          echo "${ANDROID_HOME}/platform-tools" >> "$GITHUB_PATH" || export PATH="${ANDROID_HOME}/platform-tools:${PATH}"

      - name: Pre-cache Android platform artifacts
        run: flutter precache --android

      - name: Accept Android SDK licenses
        run: |
          yes | sdkmanager --licenses || true

      - name: Install Python dependencies
        run: |
          # Use system Python — actions/setup-python queries GitHub APIs
          if command -v python3 &>/dev/null; then
            python3 -m pip install --upgrade pip 2>/dev/null || true
            if [ -f requirements.txt ]; then
              python3 -m pip install -r requirements.txt
            fi
          else
            echo "WARNING: Python3 not found, skipping pip install"
          fi

      - name: Install dependencies
        run: flutter pub get

      - name: Generate stubs (lint gate support)
        run: python3 ci_stub_gen.py

      - name: Analyze (gate before build)
        run: flutter analyze --fatal-warnings

      - name: Run tests (gate before build)
        run: flutter test --reporter=expanded

      # Optional: run whitelabel build script to regenerate lib/generated/
      # Skip gracefully if theme.json is missing or script fails
      - name: Run whitelabel build script
        if: hashFiles('theme.json') != ''
        run: python3 build_whitelabel.py

      - name: Configure release signing
        if: env.ANDROID_KEYSTORE_BASE64 != ''
        env:
          ANDROID_KEYSTORE_BASE64: ${{ secrets.ANDROID_KEYSTORE_BASE64 }}
          ANDROID_KEYSTORE_PASS: ${{ secrets.ANDROID_KEYSTORE_PASS }}
          ANDROID_KEY_ALIAS: ${{ secrets.ANDROID_KEY_ALIAS }}
          ANDROID_KEY_PASS: ${{ secrets.ANDROID_KEY_PASS }}
        run: |
          # Decode keystore
          echo "$ANDROID_KEYSTORE_BASE64" | base64 -d > android/app/release.keystore

          # Write key.properties for Gradle to consume
          cat > android/key.properties <<EOF
          storePassword=$ANDROID_KEYSTORE_PASS
          keyPassword=$ANDROID_KEY_PASS
          keyAlias=$ANDROID_KEY_ALIAS
          storeFile=../release.keystore
          EOF

      - name: Build APK (release)
        run: flutter build apk --release

      - name: Build App Bundle (release)
        run: flutter build appbundle --release

      - name: List build outputs
        run: |
          echo "=== APK output ==="
          ls -lh build/app/outputs/flutter-apk/ || true
          echo "=== AAB output ==="
          ls -lh build/app/outputs/bundle/release/ || true

      - name: "Note: artifact storage not configured"
        run: |
          echo "WARNING: Gitea Actions artifact storage is not configured on this instance."
          echo "Build outputs available in runner workspace:"
          echo "  APK: build/app/outputs/flutter-apk/app-release.apk"
          echo "  AAB: build/app/outputs/bundle/release/app-release.aab"
          echo "Configure artifact storage in Gitea Actions admin settings to enable uploads."


  # ── Stage 3 (parallel): iOS build ───────────────────────────────
  # Note: requires a macOS runner. Uses 'self-hosted' label which
  # matches our Gitea Actions runner. Falls back to --no-codesign
  # if Apple signing secrets are not configured.
  build-ios:
    name: Build iOS
    runs-on: [self-hosted, macos]
    needs: [test]
    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Setup Flutter
        run: |
          # macOS-specific Flutter download
          curl -fsSL "https://storage.googleapis.com/download.flutter.io/flutter_darwin-x64-stable.tar.xz" \
            -o flutter.tar.xz
          tar -xf flutter.tar.xz
          export PATH="$PWD/flutter/bin:$PATH"
          flutter --version
          echo "$PWD/flutter/bin" >> "$GITHUB_PATH" || echo "$PWD/flutter/bin" >> "$HOME/.env_path"

      - name: Install dependencies
        run: flutter pub get

      - name: Install CocoaPods dependencies
        run: cd ios && pod install --repo-update

      - name: Build iOS (release, no-codesign)
        run: flutter build ios --release --no-codesign

      - name: "Note: iOS artifact storage not configured"
        run: |
          echo "WARNING: Gitea Actions artifact storage is not configured on this instance."
          echo "iOS build outputs available in runner workspace:"
          echo "  build/ios/iphoneos/"
          echo "Configure artifact storage in Gitea Actions admin settings to enable uploads."