name: Android Release (Signed)

on:
  push:
    tags:
      - 'v*'

jobs:
  release:
    runs-on: android
    
    steps:
    - name: Checkout code
      uses: actions/checkout@v4

    - name: Setup Java 21
      run: |
        export JAVA_HOME=/usr/lib/jvm/java-21-openjdk
        export PATH=$JAVA_HOME/bin:$PATH
        echo '=== Java 环境 ==='
        java -version

    - name: Setup Keystore
      run: |
        echo '=== 配置签名证书 ==='
        mkdir -p app
        echo '${{ secrets.KEYSTORE_BASE64 }}' | base64 -d > app/release.keystore
        echo '✅ 证书已解压'
        ls -lh app/release.keystore

    - name: Setup Gradle Properties
      run: |
        echo '=== 创建 gradle.properties ==='
        export CUSTOM_AAPT2_PATH=/usr/bin/aapt2
        echo "android.aapt2FromMavenOverride=$CUSTOM_AAPT2_PATH" > gradle.properties
        echo "org.gradle.daemon=false" >> gradle.properties
        echo "org.gradle.jvmargs=-Xmx2g" >> gradle.properties
        cat gradle.properties

    - name: Configure Signing in build.gradle
      run: |
        echo '=== 配置签名到 build.gradle ==='
        
        # 在 android {} 块内添加 signingConfigs 和修改 buildTypes
        # 使用 sed 在 'buildTypes {' 之前插入 signingConfigs
        sed -i '/^    buildTypes {/i\    signingConfigs {\n        release {\n            storeFile file("release.keystore")\n            storePassword System.getenv("KEYSTORE_PASSWORD")\n            keyAlias System.getenv("KEY_ALIAS")\n            keyPassword System.getenv("KEY_PASSWORD")\n            v1SigningEnabled true\n            v2SigningEnabled true\n        }\n    }' app/build.gradle
        
        # 修改 buildTypes 中的 release 块，添加 signingConfig
        sed -i '/release {/,/}/ { /minifyEnabled/i\            signingConfig signingConfigs.release
}' app/build.gradle
        
        echo '✅ 签名配置已添加'
        cat app/build.gradle

    - name: Build Signed Release APK
      env:
        KEYSTORE_PASSWORD: ${{ secrets.KEYSTORE_PASSWORD }}
        KEY_PASSWORD: ${{ secrets.KEY_PASSWORD }}
        KEY_ALIAS: ${{ secrets.KEY_ALIAS }}
      run: |
        echo '=== 编译签名 Release APK ==='
        export ANDROID_HOME=/opt/android-sdk
        export ANDROID_SDK_ROOT=$ANDROID_HOME
        export PATH=$ANDROID_HOME/cmdline-tools/latest/bin:$ANDROID_HOME/platform-tools:$PATH
        
        gradle assembleRelease --no-daemon --stacktrace
        
        VERSION=${GITHUB_REF#refs/tags/}
        cp app/build/outputs/apk/release/app-release.apk app/build/outputs/apk/release/app-${VERSION}-signed.apk
        echo 'APK_NAME=app-'"${VERSION}"'-signed.apk' >> $GITHUB_ENV
        
        echo ''
        echo '✅ 编译完成！'
        ls -lh app/build/outputs/apk/release/

    - name: Create Gitea Release
      run: |
        echo '=== 创建 Gitea Release ==='
        VERSION=${GITHUB_REF#refs/tags/}
        
        curl -s -X POST \
          "https://gitea.kg8.net/api/v1/repos/${{ github.repository }}/releases" \
          -H "Authorization: token ${{ secrets.ACTIONS_TOKEN }}" \
          -H "Content-Type: application/json" \
          -d "{\"tag_name\":\"$VERSION\",\"name\":\"Release $VERSION\",\"body\":\"## 自动发布的签名版本\\n\\n- ✅ 已签名\\n- 🔐 开发者证书签名\",\"draft\":false,\"prerelease\":false}"
        
        echo ''
        echo '✅ Release 创建完成'

    - name: Upload Signed APK
      run: |
        echo '=== 上传签名 APK ==='
        echo 'APK: ${{ env.APK_NAME }}'
        VERSION=${GITHUB_REF#refs/tags/}
        
        curl -s -X POST \
          "https://gitea.kg8.net/api/v1/repos/${{ github.repository }}/releases/assets?name=${{ env.APK_NAME }}" \
          -H "Authorization: token ${{ secrets.ACTIONS_TOKEN }}" \
          -H "Content-Type: application/vnd.android.package-archive" \
          --data-binary "@app/build/outputs/apk/release/${{ env.APK_NAME }}"
        
        echo ''
        echo '✅ APK 上传成功！'