projet_gestion_commande/.github/workflows/frontend-client-build-local.yml

name: Frontend Client - EAS Build

on:
    push:
        branches: [main, pre-prod]
        paths:
            - "mobile/**"
    pull_request:
        branches: [main, pre-prod]
        paths:
            - "mobile/**"

jobs:
    typecheck:
        runs-on: ubuntu-latest
        steps:
            - uses: actions/checkout@v4

            - name: Setup Node.js
              uses: actions/setup-node@v4
              with:
                  node-version: 20
                  cache: npm
                  cache-dependency-path: mobile/package-lock.json

            - name: Install dependencies
              working-directory: mobile
              run: npm ci

            - name: Typecheck
              working-directory: mobile
              run: npx tsc --noEmit

    build-apk:
        needs: typecheck
        runs-on: ubuntu-latest
        steps:
            - uses: actions/checkout@v4

            - name: Setup Node.js
              uses: actions/setup-node@v4
              with:
                  node-version: 20
                  cache: npm
                  cache-dependency-path: mobile/package-lock.json

            - name: Setup Java
              uses: actions/setup-java@v4
              with:
                  distribution: temurin
                  java-version: 17

            - name: Setup Android SDK
              uses: android-actions/setup-android@v3

            - name: Install EAS CLI & cache deps
              run: |
                  npm install -g eas-cli
                  pip install -r scripts/requirements.txt --quiet

            - name: Install dependencies
              working-directory: mobile
              run: npm ci

            - name: Inject EAS project ID
              working-directory: mobile
              run: |
                  jq '.expo.extra.eas.projectId = "${{ secrets.EXPO_PROJECT_ID_CLIENT }}"' app.json > app.tmp.json
                  mv app.tmp.json app.json

            - name: Determine build profile & env
              id: config
              run: |
                  if [ "${{ github.ref_name }}" = "main" ] || [ "${{ github.base_ref }}" = "main" ]; then
                    echo "profile=production" >> $GITHUB_OUTPUT
                    echo "channel=production-client" >> $GITHUB_OUTPUT
                    echo "api_url=https://mln-uber.club" >> $GITHUB_OUTPUT
                    echo "update_url=https://ota.uber-stup.club" >> $GITHUB_OUTPUT
                    echo "apk_name=mobile-production-$(date +%Y%m%d-%H%M).apk" >> $GITHUB_OUTPUT
                  else
                    echo "profile=pre-prod" >> $GITHUB_OUTPUT
                    echo "channel=pre-prod-client" >> $GITHUB_OUTPUT
                    echo "api_url=https://5.181.0.112.nip.io" >> $GITHUB_OUTPUT
                    echo "update_url=https://ota.uber-stup.club" >> $GITHUB_OUTPUT
                    echo "apk_name=mobile-pre-prod-$(date +%Y%m%d-%H%M).apk" >> $GITHUB_OUTPUT
                  fi

            - name: Restore Gradle cache (RustFS)
              env:
                  AWS_ACCESS_KEY_ID: ${{ secrets.RUSTFS_ACCESS_KEY }}
                  AWS_SECRET_ACCESS_KEY: ${{ secrets.RUSTFS_SECRET_KEY }}
                  S3_ENDPOINT: https://rustfs.uber-stup.club
                  S3_BUCKET: apk-builds
              run: python scripts/eas_cache.py restore --app mobile

            - name: Build APK (local)
              working-directory: mobile
              env:
                  EXPO_TOKEN: ${{ secrets.EXPO_TOKEN }}
                  EXPO_PUBLIC_API_URL: ${{ steps.config.outputs.api_url }}
                  EXPO_PUBLIC_UPDATE_URL: ${{ steps.config.outputs.update_url }}
                  EAS_BUILD_NO_EXPO_GO_WARNING: true
                  GRADLE_OPTS: "-Dorg.gradle.jvmargs=-Xmx4096m -XX:MaxMetaspaceSize=512m -XX:+HeapDumpOnOutOfMemoryError"
                  JAVA_TOOL_OPTIONS: "-Xmx4096m"
              run: eas build --platform android --profile ${{ steps.config.outputs.profile }} --local --non-interactive

            - name: Save Gradle cache (RustFS)
              if: success() || failure()
              env:
                  AWS_ACCESS_KEY_ID: ${{ secrets.RUSTFS_ACCESS_KEY }}
                  AWS_SECRET_ACCESS_KEY: ${{ secrets.RUSTFS_SECRET_KEY }}
                  S3_ENDPOINT: https://rustfs.uber-stup.club
                  S3_BUCKET: apk-builds
              run: python scripts/eas_cache.py save --app mobile

            - name: Rename APK
              working-directory: mobile
              run: mv *.apk ${{ steps.config.outputs.apk_name }}

            - name: Upload APK to RustFS
              working-directory: mobile
              env:
                  AWS_ACCESS_KEY_ID: ${{ secrets.RUSTFS_ACCESS_KEY }}
                  AWS_SECRET_ACCESS_KEY: ${{ secrets.RUSTFS_SECRET_KEY }}
                  AWS_DEFAULT_REGION: us-east-1
              run: |
                  aws s3 cp ${{ steps.config.outputs.apk_name }} \
                    s3://apk-builds/${{ steps.config.outputs.profile }}/${{ steps.config.outputs.apk_name }} \
                    --endpoint-url https://rustfs.uber-stup.club \
                    --no-verify-ssl

    ota-update:
        needs: build-apk
        runs-on: ubuntu-latest
        # Ne publie pas sur les PR, seulement sur les pushs
        if: github.event_name == 'push'
        steps:
            - uses: actions/checkout@v4

            - name: Setup Node.js
              uses: actions/setup-node@v4
              with:
                  node-version: 20
                  cache: npm
                  cache-dependency-path: mobile/package-lock.json

            - name: Install dependencies
              working-directory: mobile
              run: npm ci

            - name: Determine channel & env
              id: config
              run: |
                  if [ "${{ github.ref_name }}" = "main" ]; then
                    echo "channel=production" >> $GITHUB_OUTPUT
                    echo "api_url=https://mln-uber.club" >> $GITHUB_OUTPUT
                    echo "message=Production update $(date +%Y%m%d-%H%M)" >> $GITHUB_OUTPUT
                  else
                    echo "channel=pre-prod" >> $GITHUB_OUTPUT
                    echo "api_url=https://5.181.0.112.nip.io" >> $GITHUB_OUTPUT
                    echo "message=Pre-prod update $(date +%Y%m%d-%H%M)" >> $GITHUB_OUTPUT
                  fi

            - name: Inject EAS project ID
              working-directory: mobile
              run: |
                  jq '.expo.extra.eas.projectId = "${{ secrets.EXPO_PROJECT_ID_CLIENT }}"' app.json > app.tmp.json
                  mv app.tmp.json app.json

            - name: Publish OTA update to Xavia
              working-directory: mobile
              env:
                  EXPO_TOKEN: ${{ secrets.EXPO_TOKEN }}
                  EXPO_PUBLIC_API_URL: ${{ steps.config.outputs.api_url }}
              run: |
                  RUNTIME_VERSION=$(jq -r '.expo.runtimeVersion // .expo.version' app.json)
                  npx expo export --platform android --output-dir dist
                  cd dist && zip -r ../bundle.zip . && cd ..
                  curl -X POST "https://ota.uber-stup.club/api/upload" \
                    -H "Authorization: Bearer ${{ secrets.XAVIA_API_KEY }}" \
                    -F "file=@bundle.zip" \
                    -F "runtimeVersion=$RUNTIME_VERSION" \
                    -F "channel=${{ steps.config.outputs.channel }}" \
                    -F "commitHash=${{ github.sha }}" \
                    -F "commitMessage=${{ steps.config.outputs.message }}" \
                    --fail