name: Android Release (Signed)

on:
  push:
    tags:
      - 'v*'

jobs:
  release:
    runs-on: android
    
    steps:
    - name: Checkout code
      uses: actions/checkout@v4

    - name: Setup Java 21
      run: |
        export JAVA_HOME=/usr/lib/jvm/java-21-openjdk
        export PATH=$JAVA_HOME/bin:$PATH
        echo '=== Java 环境 ==='
        java -version

    - name: Setup Keystore
      run: |
        echo '=== 配置签名证书 ==='
        mkdir -p app
        echo '${{ secrets.KEYSTORE_BASE64 }}' | base64 -d > app/release.keystore
        echo '✅ 证书已解压'
        ls -lh app/release.keystore

    - name: Setup Gradle Properties
      run: |
        echo '=== 创建 gradle.properties ==='
        export CUSTOM_AAPT2_PATH=/usr/bin/aapt2
        echo "android.aapt2FromMavenOverride=$CUSTOM_AAPT2_PATH" > gradle.properties
        echo "org.gradle.daemon=false" >> gradle.properties
        echo "org.gradle.jvmargs=-Xmx2g" >> gradle.properties
        cat gradle.properties

    - name: Setup Signing Config
      run: |
        echo '=== 创建签名配置 ==='
        echo 'android {' > app/signing-config.gradle
        echo '    signingConfigs {' >> app/signing-config.gradle
        echo '        release {' >> app/signing-config.gradle
        echo "            storeFile file('release.keystore')" >> app/signing-config.gradle
        echo "            storePassword System.getenv('KEYSTORE_PASSWORD')" >> app/signing-config.gradle
        echo "            keyAlias System.getenv('KEY_ALIAS')" >> app/signing-config.gradle
        echo "            keyPassword System.getenv('KEY_PASSWORD')" >> app/signing-config.gradle
        echo '            v1SigningEnabled true' >> app/signing-config.gradle
        echo '            v2SigningEnabled true' >> app/signing-config.gradle
        echo '        }' >> app/signing-config.gradle
        echo '    }' >> app/signing-config.gradle
        echo '    buildTypes {' >> app/signing-config.gradle
        echo '        release {' >> app/signing-config.gradle
        echo '            signingConfig signingConfigs.release' >> app/signing-config.gradle
        echo '            minifyEnabled false' >> app/signing-config.gradle
        echo '            shrinkResources false' >> app/signing-config.gradle
        echo '        }' >> app/signing-config.gradle
        echo '    }' >> app/signing-config.gradle
        echo '}' >> app/signing-config.gradle
        echo '✅ 签名配置已创建'
        cat app/signing-config.gradle

    - name: Apply Signing Config
      run: |
        echo '=== 应用签名配置到 build.gradle ==='
        if ! grep -q 'signing-config.gradle' app/build.gradle; then
            sed -i "1i apply from: 'signing-config.gradle'" app/build.gradle
            echo '✅ 签名配置已应用'
        else
            echo '⚠️ 签名配置已存在'
        fi
        head -5 app/build.gradle

    - name: Build Signed Release APK
      env:
        KEYSTORE_PASSWORD: ${{ secrets.KEYSTORE_PASSWORD }}
        KEY_PASSWORD: ${{ secrets.KEY_PASSWORD }}
        KEY_ALIAS: ${{ secrets.KEY_ALIAS }}
      run: |
        echo '=== 编译签名 Release APK ==='
        export ANDROID_HOME=/opt/android-sdk
        export ANDROID_SDK_ROOT=$ANDROID_HOME
        export PATH=$ANDROID_HOME/cmdline-tools/latest/bin:$ANDROID_HOME/platform-tools:$PATH
        
        gradle assembleRelease --no-daemon --stacktrace
        
        VERSION=${GITHUB_REF#refs/tags/}
        cp app/build/outputs/apk/release/app-release.apk app/build/outputs/apk/release/app-${VERSION}-signed.apk
        echo 'APK_NAME=app-'"${VERSION}"'-signed.apk' >> $GITHUB_ENV
        
        echo ''
        echo '✅ 编译完成！'
        ls -lh app/build/outputs/apk/release/

    - name: Create Gitea Release
      run: |
        echo '=== 创建 Gitea Release ==='
        VERSION=${GITHUB_REF#refs/tags/}
        
        curl -s -X POST \
          "https://gitea.kg8.net/api/v1/repos/${{ github.repository }}/releases" \
          -H "Authorization: token ${{ secrets.ACTIONS_TOKEN }}" \
          -H "Content-Type: application/json" \
          -d "{\"tag_name\":\"$VERSION\",\"name\":\"Release $VERSION\",\"body\":\"## 自动发布的签名版本\\n\\n- ✅ 已签名\\n- 🔐 开发者证书签名\",\"draft\":false,\"prerelease\":false}"
        
        echo ''
        echo '✅ Release 创建完成'

    - name: Upload Signed APK
      run: |
        echo '=== 上传签名 APK ==='
        echo 'APK: ${{ env.APK_NAME }}'
        VERSION=${GITHUB_REF#refs/tags/}
        
        curl -s -X POST \
          "https://gitea.kg8.net/api/v1/repos/${{ github.repository }}/releases/assets?name=${{ env.APK_NAME }}" \
          -H "Authorization: token ${{ secrets.ACTIONS_TOKEN }}" \
          -H "Content-Type: application/vnd.android.package-archive" \
          --data-binary "@app/build/outputs/apk/release/${{ env.APK_NAME }}"
        
        echo ''
        echo '✅ APK 上传成功！'