release.yml

# SPDX-FileCopyrightText: © 2025 StreamKit Contributors
#
# SPDX-License-Identifier: MPL-2.0

name: Release

on:
  push:
    tags:
      - 'v*.*.*'
  workflow_dispatch:
    inputs:
      dry_run:
        description: "Build and validate without creating a GitHub release"
        required: false
        default: true
        type: boolean

env:
  CARGO_TERM_COLOR: always
  RUST_BACKTRACE: 1
  RUSTC_WRAPPER: sccache

jobs:
  build-linux-x64:
    name: Build Linux x64
    runs-on: ubuntu-22.04
    steps:
      - name: Compute version
        id: version
        run: |
          if [[ "${GITHUB_REF}" == refs/tags/* ]]; then
            echo "version=${GITHUB_REF#refs/tags/}" >> "$GITHUB_OUTPUT"
          else
            echo "version=dry-run-sha-${GITHUB_SHA::12}" >> "$GITHUB_OUTPUT"
          fi

      - uses: actions/checkout@v5

      - name: Setup Bun
        uses: oven-sh/setup-bun@v2
        with:
          bun-version: "1.3.14"

      - name: Build UI
        working-directory: ./ui
        run: |
          bun install --frozen-lockfile
          bun run build

      - name: Install Rust toolchain
        uses: dtolnay/rust-toolchain@master
        with:
          toolchain: "1.95.0"

      - name: Restore sccache cache
        uses: actions/cache/restore@v4
        with:
          path: ~/.cache/sccache
          key: sccache-release-${{ runner.os }}-${{ hashFiles('Cargo.lock') }}
          restore-keys: |
            sccache-release-${{ runner.os }}-

      - uses: mozilla-actions/sccache-action@v0.0.9

      - uses: Swatinem/rust-cache@v2
        with:
          cache-on-failure: true

      - name: Install system dependencies (libvpx for VP9, cmake + nasm for AV1 static build)
        run: sudo apt-get update && sudo apt-get install -y libvpx-dev nasm libclang-dev cmake

      - name: Build release binaries
        # -fuse-ld=bfd: override rust-lld with the system linker (ld.bfd).
        # rust-lld (default since Rust 1.85 on x86_64-linux) ignores
        # --whole-archive for native static archives under thin LTO,
        # causing undefined SVT-AV1 symbols.
        run: |
          RUSTFLAGS="-C link-arg=-fuse-ld=bfd" \
            cargo build --locked --profile release-lto -p streamkit-server --bin skit --features "moq,svt_av1_static"
          cargo build --locked --profile release-lto -p streamkit-client --bin skit-cli

      - name: Strip binaries
        run: |
          strip target/release-lto/skit
          strip target/release-lto/skit-cli

      - name: Prepare release directory
        run: |
          VERSION="${{ steps.version.outputs.version }}"
          mkdir -p streamkit-${VERSION}/plugins/{wasm,native}
          mkdir -p streamkit-${VERSION}/samples
          cp target/release-lto/skit streamkit-${VERSION}/
          cp target/release-lto/skit-cli streamkit-${VERSION}/
          cp LICENSE streamkit-${VERSION}/
          cp README.md streamkit-${VERSION}/
          cp DOCKER.md streamkit-${VERSION}/
          cp NOTICE streamkit-${VERSION}/
          cp -r LICENSES streamkit-${VERSION}/
          cp docker-skit.toml streamkit-${VERSION}/
          cp docker-skit-gpu.toml streamkit-${VERSION}/
          cp samples/skit.toml streamkit-${VERSION}/samples/skit.toml
          cp -r samples/pipelines streamkit-${VERSION}/samples/

      - name: Create tarball
        run: |
          VERSION="${{ steps.version.outputs.version }}"
          tar -czf streamkit-${VERSION}-linux-x64.tar.gz streamkit-${VERSION}/

      - name: Generate checksum
        run: |
          VERSION="${{ steps.version.outputs.version }}"
          sha256sum streamkit-${VERSION}-linux-x64.tar.gz > streamkit-${VERSION}-linux-x64.tar.gz.sha256

      - name: Save sccache cache
        if: always()
        uses: actions/cache/save@v4
        with:
          path: ~/.cache/sccache
          key: sccache-release-${{ runner.os }}-${{ hashFiles('Cargo.lock') }}

      - name: Upload artifacts
        uses: actions/upload-artifact@v4
        with:
          name: linux-x64
          path: |
            streamkit-${{ steps.version.outputs.version }}-linux-x64.tar.gz
            streamkit-${{ steps.version.outputs.version }}-linux-x64.tar.gz.sha256

  create-release:
    name: Create GitHub Release
    needs: [build-linux-x64]
    if: ${{ github.event_name == 'push' }}
    runs-on: ubuntu-22.04
    permissions:
      contents: write
    steps:
      - uses: actions/checkout@v5
        with:
          fetch-depth: 0  # Full history for changelog

      - name: Download all artifacts
        uses: actions/download-artifact@v4
        with:
          path: artifacts

      - name: Generate changelog
        id: changelog
        run: |
          # Extract version tag
          VERSION="${{ github.ref_name }}"

          # Simple changelog from git log (can be enhanced with git-cliff later)
          echo "## What's Changed" > changelog.md
          PREV_TAG=$(git describe --tags --abbrev=0 --match 'v[0-9]*' HEAD^ 2>/dev/null || echo "")
          if [ -n "$PREV_TAG" ]; then
            git log --pretty=format:"- %s (%h)" ${PREV_TAG}..HEAD >> changelog.md
          else
            echo "- Initial release" >> changelog.md
          fi

          echo "" >> changelog.md
          echo "" >> changelog.md
          echo "**Full Changelog**: https://github.com/${{ github.repository }}/compare/${PREV_TAG}...${{ github.ref_name }}" >> changelog.md

          cat changelog.md

      - name: Create Release
        uses: softprops/action-gh-release@v2
        with:
          files: |
            artifacts/**/streamkit-*.tar.gz
            artifacts/**/streamkit-*.tar.gz.sha256
          body_path: changelog.md
          draft: false
          prerelease: ${{ contains(github.ref_name, '-rc') || contains(github.ref_name, '-beta') || contains(github.ref_name, '-alpha') }}
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}