nightly.yml

name: Nightly

# Phase 1 (fork testing): triggered on push and dispatch so we iterate
# fast. Phase 2 (upstream): swap the trigger to schedule + fork guard.
on:
  push:
    branches: [master]
  workflow_dispatch:

permissions:
  contents: write

concurrency:
  group: nightly
  cancel-in-progress: true

env:
  RUSTUP_TOOLCHAIN: stable

jobs:
  # Exit early when master hasn't moved since the last nightly.
  check:
    runs-on: ubuntu-latest
    outputs:
      should-build: ${{ steps.compare.outputs.should-build }}
      short-sha: ${{ steps.compare.outputs.short-sha }}
      date: ${{ steps.compare.outputs.date }}
    steps:
      - uses: actions/checkout@v4
        with:
          fetch-depth: 0
      - id: compare
        run: |
          nightly_sha=$(git rev-parse nightly^{} 2>/dev/null || echo "none")
          head_sha=$(git rev-parse HEAD)
          short=$(echo "$head_sha" | head -c 7)
          date=$(date -u +%Y-%m-%d)
          echo "short-sha=$short" >> "$GITHUB_OUTPUT"
          echo "date=$date" >> "$GITHUB_OUTPUT"
          if [ "$nightly_sha" = "$head_sha" ]; then
            echo "No new commits since the last nightly ($short), skipping."
            echo "should-build=false" >> "$GITHUB_OUTPUT"
          else
            echo "New commits: nightly was $nightly_sha, HEAD is $head_sha"
            echo "should-build=true" >> "$GITHUB_OUTPUT"
          fi

  # -- Gateway: Linux x86_64 and aarch64 --------------------------------

  gateway-x64:
    needs: check
    if: needs.check.outputs.should-build == 'true'
    runs-on: ubuntu-22.04
    env:
      ARTIFACT: gateway-nightly-${{ needs.check.outputs.date }}-${{ needs.check.outputs.short-sha }}-linux-x64
    steps:
      - uses: actions/checkout@v4
      - uses: dtolnay/rust-toolchain@6bed0761d98439e5a578e2877258200ad565ba87 # stable
      - uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2
      - uses: actions/setup-node@v4
        with:
          node-version: 22
          cache: npm
          cache-dependency-path: |
            crates/workshop/package-lock.json
            crates/gateway/*/ui/package-lock.json
      - name: Install UI dependencies
        run: |
          npm ci --prefix crates/workshop
          npm ci --prefix crates/gateway/config-ui/ui
      - name: Build
        run: cargo build --release --locked -p gateway
      - name: Package
        run: |
          mkdir -p "$ARTIFACT"
          cp target/release/runvil-gateway "$ARTIFACT/"
          tar czf "${ARTIFACT}.tar.gz" "$ARTIFACT"
      - uses: actions/upload-artifact@v4
        with:
          name: ${{ env.ARTIFACT }}
          path: ${{ env.ARTIFACT }}.tar.gz

  gateway-arm64:
    needs: check
    if: needs.check.outputs.should-build == 'true'
    runs-on: ubuntu-22.04-arm
    env:
      ARTIFACT: gateway-nightly-${{ needs.check.outputs.date }}-${{ needs.check.outputs.short-sha }}-linux-arm64
    steps:
      - uses: actions/checkout@v4
      - uses: dtolnay/rust-toolchain@6bed0761d98439e5a578e2877258200ad565ba87 # stable
      - uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2
      - uses: actions/setup-node@v4
        with:
          node-version: 22
          cache: npm
          cache-dependency-path: |
            crates/workshop/package-lock.json
            crates/gateway/*/ui/package-lock.json
      - name: Install UI dependencies
        run: |
          npm ci --prefix crates/workshop
          npm ci --prefix crates/gateway/config-ui/ui
      - name: Build
        run: cargo build --release --locked -p gateway
      - name: Package
        run: |
          mkdir -p "$ARTIFACT"
          cp target/release/runvil-gateway "$ARTIFACT/"
          tar czf "${ARTIFACT}.tar.gz" "$ARTIFACT"
      - uses: actions/upload-artifact@v4
        with:
          name: ${{ env.ARTIFACT }}
          path: ${{ env.ARTIFACT }}.tar.gz

  # -- Workshop: Windows, macOS ARM, macOS Intel, Linux x64 and ARM64 ----

  workshop:
    needs: check
    if: needs.check.outputs.should-build == 'true'
    strategy:
      fail-fast: false
      matrix:
        include:
          - name: windows
            runs-on: windows-latest
            args: ""
            suffix: win-x64
          - name: macos-arm
            runs-on: macos-latest
            args: "--target aarch64-apple-darwin"
            suffix: macos-arm64
          - name: macos-intel
            runs-on: macos-latest
            args: "--target x86_64-apple-darwin"
            suffix: macos-x64
          - name: linux
            runs-on: ubuntu-22.04
            args: ""
            suffix: linux-x64
          - name: linux-arm
            runs-on: ubuntu-22.04-arm
            args: ""
            suffix: linux-arm64
    runs-on: ${{ matrix.runs-on }}
    steps:
      - uses: actions/checkout@v4
      - uses: dtolnay/rust-toolchain@6bed0761d98439e5a578e2877258200ad565ba87 # stable
      - uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2

      - name: Add the Rust target
        if: matrix.name == 'macos-arm' || matrix.name == 'macos-intel'
        run: rustup target add aarch64-apple-darwin x86_64-apple-darwin

      - uses: actions/setup-node@v4
        with:
          node-version: 22
          cache: npm
          cache-dependency-path: |
            crates/workshop/package-lock.json
            crates/gateway/*/ui/package-lock.json

      - name: Install UI dependencies
        working-directory: crates/workshop
        run: npm ci

      - name: Install config UI dependencies
        working-directory: crates/gateway/config-ui/ui
        run: npm ci

      - name: Install Tauri system packages
        if: startsWith(matrix.name, 'linux')
        run: |
          sudo apt-get update
          # xdg-utils: the AppImage bundler shells out to xdg-open, which the
          # ARM runner images do not preinstall (the x64 image does).
          # https://github.com/tauri-apps/tauri-action/issues/1319
          sudo apt-get install -y libwebkit2gtk-4.1-dev libssl-dev librsvg2-dev xdg-utils

      # tauri.conf.json ships the gateway via bundle.externalBin, which
      # resolves binaries/runvil-gateway-<target-triple> at bundle
      # time; build and stage it before tauri-action runs.
      - name: Build and stage the gateway sidecar
        shell: bash
        run: |
          set -e
          case "${{ matrix.name }}" in
            windows)     triple="x86_64-pc-windows-msvc";  ext=".exe" ;;
            macos-arm)   triple="aarch64-apple-darwin";    ext="" ;;
            macos-intel) triple="x86_64-apple-darwin";     ext="" ;;
            linux)       triple="x86_64-unknown-linux-gnu"; ext="" ;;
            linux-arm)   triple="aarch64-unknown-linux-gnu"; ext="" ;;
          esac
          case "${{ matrix.args }}" in
            *--target*)
              cargo build --release --locked -p gateway --target "$triple"
              src="target/$triple/release/runvil-gateway$ext"
              ;;
            *)
              cargo build --release --locked -p gateway
              src="target/release/runvil-gateway$ext"
              ;;
          esac
          mkdir -p crates/workshop/desktop/binaries
          cp "$src" "crates/workshop/desktop/binaries/runvil-gateway-$triple$ext"

      - name: Build the app
        uses: tauri-apps/tauri-action@84b9d35b5fc46c1e45415bdb6144030364f7ebc5 # v0
        with:
          projectPath: crates/workshop/desktop
          args: ${{ matrix.args }} --config tauri.nightly.conf.json

      - name: Upload the installers
        uses: actions/upload-artifact@v4
        with:
          name: workshop-nightly-${{ matrix.suffix }}
          path: |
            target/**/bundle/nsis/*.exe
            target/**/bundle/dmg/*.dmg
            target/**/bundle/deb/*.deb
            target/**/bundle/appimage/*.AppImage
          if-no-files-found: error

  # -- Publish: rolling nightly release ----------------------------------

  publish:
    needs: [check, gateway-x64, gateway-arm64, workshop]
    if: needs.check.outputs.should-build == 'true'
    runs-on: ubuntu-latest
    env:
      DATE: ${{ needs.check.outputs.date }}
      SHORT_SHA: ${{ needs.check.outputs.short-sha }}
    steps:
      - uses: actions/checkout@v4

      - name: Download all artifacts
        uses: actions/download-artifact@v4
        with:
          path: dist
          merge-multiple: true

      - name: List artifacts
        run: find dist -type f | sort

      - name: SHA256SUMS
        working-directory: dist
        run: |
          shopt -s globstar nullglob
          sha256sum **/*.tar.gz **/*.exe **/*.dmg **/*.deb **/*.AppImage 2>/dev/null > SHA256SUMS || true
          cat SHA256SUMS

      - name: Delete the previous nightly release
        run: gh release delete nightly --cleanup-tag --yes 2>/dev/null || true
        env:
          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}

      - name: Create the nightly release
        run: |
          shopt -s globstar nullglob
          gh release create nightly \
            --title "Nightly ($DATE, $SHORT_SHA)" \
            --prerelease \
            --target "$GITHUB_SHA" \
            --notes "Automated nightly build from master at $SHORT_SHA ($DATE). Not a stable release." \
            dist/**/*.tar.gz dist/**/*.exe dist/**/*.dmg dist/**/*.deb dist/**/*.AppImage dist/SHA256SUMS
        env:
          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}