java-release.yml

name: Java SDK Release

on:
  push:
    branches: [main]
  workflow_dispatch:

permissions: {}

concurrency:
  group: java-release-${{ github.ref }}
  cancel-in-progress: false

jobs:
  test:
    if: "!startsWith(github.event.head_commit.message, 'chore: release')"
    runs-on: ubuntu-latest
    permissions:
      contents: read
    env:
      MUXI_SDK_E2E_SERVER_URL: ${{ secrets.MUXI_SDK_E2E_SERVER_URL }}
    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
        with:
          fetch-depth: 0

      - name: Set up JDK 17
        uses: actions/setup-java@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 # v4
        with:
          java-version: '17'
          distribution: 'temurin'
          cache: gradle

      - name: Grant execute permission for gradlew
        run: chmod +x gradlew

      - name: Unit tests
        run: ./gradlew test

      - name: Require test server
        run: |
          if [ -z "$MUXI_SDK_E2E_SERVER_URL" ]; then
            echo "::error::MUXI_SDK_E2E_SERVER_URL secret is not set"
            exit 1
          fi
          if ! curl -sf --max-time 10 "${MUXI_SDK_E2E_SERVER_URL}/ping" >/dev/null 2>&1 && \
             ! curl -sf --max-time 10 "${MUXI_SDK_E2E_SERVER_URL}" >/dev/null 2>&1; then
            echo "::error::Test server is not reachable at ${MUXI_SDK_E2E_SERVER_URL}"
            exit 1
          fi

      - name: Integration tests
        env:
          MUXI_SDK_E2E_KEY_ID: ${{ secrets.MUXI_SDK_E2E_KEY_ID }}
          MUXI_SDK_E2E_SECRET_KEY: ${{ secrets.MUXI_SDK_E2E_SECRET_KEY }}
          MUXI_SDK_E2E_FORMATION_ID: ${{ secrets.MUXI_SDK_E2E_FORMATION_ID }}
          MUXI_SDK_E2E_CLIENT_KEY: ${{ secrets.MUXI_SDK_E2E_CLIENT_KEY }}
          MUXI_SDK_E2E_ADMIN_KEY: ${{ secrets.MUXI_SDK_E2E_ADMIN_KEY }}
        run: ./gradlew test --tests "*IntegrationTest*"

  release:
    if: "!startsWith(github.event.head_commit.message, 'chore: release')"
    needs: test
    runs-on: ubuntu-latest
    permissions:
      contents: write
    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
        with:
          fetch-depth: 0
          token: ${{ secrets.MUXI_RELEASE_TOKEN }}

      - name: Set up JDK 17
        uses: actions/setup-java@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 # v4
        with:
          java-version: '17'
          distribution: 'temurin'
          cache: gradle

      - name: Compute next version
        id: version
        run: |
          current=$(grep 'VERSION = ' src/main/java/org/muxi/sdk/MuxiVersion.java | sed 's/.*"\([^"]*\)".*/\1/')
          major=$(echo "$current" | cut -d. -f1)
          cdate=$(echo "$current" | cut -d. -f2)
          cpatch=$(echo "$current" | cut -d. -f3)
          today=$(date -u +%Y%m%d)
          if [ "$cdate" = "$today" ]; then
            nextpatch=$((cpatch + 1))
          else
            nextpatch=0
          fi
          next="${major}.${today}.${nextpatch}"
          echo "version=$next" >> $GITHUB_OUTPUT

      - name: Set version in source
        run: |
          sed -i 's/VERSION = ".*"/VERSION = "${{ steps.version.outputs.version }}"/' src/main/java/org/muxi/sdk/MuxiVersion.java
          sed -i 's/version = ".*"/version = "${{ steps.version.outputs.version }}"/' build.gradle.kts

      - name: Grant execute permission for gradlew
        run: chmod +x gradlew

      - name: Build
        run: ./gradlew build -x test

      - name: Decode GPG key
        run: |
          echo "${{ secrets.MUXI_SDK_GPG_PRIVATE_KEY }}" | base64 -d > /tmp/signing-key.asc
          echo "=== Key file debug ==="
          head -1 /tmp/signing-key.asc
          tail -1 /tmp/signing-key.asc
          wc -l /tmp/signing-key.asc
          gpg --show-keys /tmp/signing-key.asc 2>&1 || true

      - name: Publish to Maven Central
        env:
          ORG_GRADLE_PROJECT_mavenCentralUsername: ${{ secrets.MUXI_SDK_MAVEN_USERNAME }}
          ORG_GRADLE_PROJECT_mavenCentralPassword: ${{ secrets.MUXI_SDK_MAVEN_PASSWORD }}
          ORG_GRADLE_PROJECT_signingInMemoryKeyId: ${{ secrets.MUXI_SDK_GPG_KEY_ID }}
          ORG_GRADLE_PROJECT_signingInMemoryKeyPassword: ${{ secrets.MUXI_SDK_GPG_PASSPHRASE }}
        run: |
          export ORG_GRADLE_PROJECT_signingInMemoryKey="$(cat /tmp/signing-key.asc)"
          ./gradlew publishAndReleaseToMavenCentral --stacktrace
          rm -f /tmp/signing-key.asc

      - name: Commit version bump
        run: |
          git config user.name "github-actions[bot]"
          git config user.email "github-actions[bot]@users.noreply.github.com"
          git add src/main/java/org/muxi/sdk/MuxiVersion.java build.gradle.kts
          git commit -m "chore: release v${{ steps.version.outputs.version }}"
          git push origin HEAD:main

      - name: Create and push tag
        run: |
          TAG="v${{ steps.version.outputs.version }}"
          if git rev-parse "$TAG" >/dev/null 2>&1; then
            echo "Tag $TAG already exists"
          else
            git tag "$TAG"
            git push origin "$TAG"
          fi

      - name: Create GitHub Release
        uses: softprops/action-gh-release@de2c0eb89ae2a093876385947365aca7b0e5f844 # v1
        with:
          tag_name: v${{ steps.version.outputs.version }}
          name: v${{ steps.version.outputs.version }}
          body: |
            Java SDK v${{ steps.version.outputs.version }}
            
            Add to build.gradle:
            ```groovy
            implementation 'org.muxi:muxi-java:${{ steps.version.outputs.version }}'
            ```

  sync_develop:
    if: "!startsWith(github.event.head_commit.message, 'chore: release')"
    needs: release
    runs-on: ubuntu-latest
    permissions:
      contents: write
    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
        with:
          ref: develop
          fetch-depth: 0
          token: ${{ secrets.MUXI_RELEASE_TOKEN }}

      - name: Merge main into develop
        run: |
          git fetch origin main develop
          git config user.name "github-actions[bot]"
          git config user.email "github-actions[bot]@users.noreply.github.com"
          git merge origin/main --no-edit -m "chore: sync main to develop [skip ci]"
          git push origin HEAD:develop