name: MobileGL Plugin APK

on:
  push:
    branches:
      - dev
      - Feat/Backend-Direct-GLES
      - Feat/Backend-Direct-Vulkan
  workflow_dispatch:

jobs:
  build:
    runs-on: ubuntu-latest

    steps:
      - name: Checkout repo
        uses: actions/checkout@v4
        with:
          submodules: recursive

      - name: Set artifact metadata
        run: |
          echo "date_today=$(date +'%Y-%m-%d')" >> "$GITHUB_ENV"
          echo "short_sha=${GITHUB_SHA::7}" >> "$GITHUB_ENV"

      - name: Set up JDK
        uses: actions/setup-java@v4
        with:
          distribution: zulu
          java-version: '17'

      - name: Setup Gradle
        uses: gradle/actions/setup-gradle@v4
        with:
          gradle-version: 8.10.2

      - name: Setup Android SDK
        uses: android-actions/setup-android@v3

      - name: Install Android NDK
        run: |
          sdkmanager "ndk;27.3.13750724"
          echo "ndk.dir=$ANDROID_HOME/ndk/27.3.13750724" >> android-plugin/local.properties

      - name: Update glslang external sources
        working-directory: 3rdparty/glslang
        run: python update_glslang_sources.py

      - name: Build plugin APK
        run: gradle --no-daemon -p android-plugin :app:assembleRelease
        env:
          SIGNING_STORE_PASSWORD: ${{ secrets.SIGNING_STORE_PASSWORD }}
          SIGNING_KEY_ALIAS: ${{ secrets.SIGNING_KEY_ALIAS }}
          SIGNING_KEY_PASSWORD: ${{ secrets.SIGNING_KEY_PASSWORD }}

      - name: Verify signed APK
        run: |
          APKSIGNER="$(find "$ANDROID_HOME/build-tools" -name apksigner -type f | sort -V | tail -n 1)"
          mapfile -t APKS < <(find android-plugin/app/build/outputs/apk -type f -path '*/release/*.apk' | sort)
          if [ "${#APKS[@]}" -eq 0 ]; then
            echo "::error::No release APKs found under android-plugin/app/build/outputs/apk"
            find android-plugin/app/build/outputs/apk -type f -print || true
            exit 1
          fi

          for APK in "${APKS[@]}"; do
            if [[ "$APK" == *-unsigned.apk ]]; then
              echo "::error::Unsigned release APK produced: $APK"
              exit 1
            fi
            "$APKSIGNER" verify --verbose "$APK"
          done

      - name: Upload plugin APK
        uses: actions/upload-artifact@v4
        with:
          name: MobileGL-plugin-${{ env.date_today }}-${{ env.short_sha }}
          path: |
            android-plugin/app/build/outputs/apk/release/*.apk
            android-plugin/app/build/outputs/apk/**/release/*.apk