name: Android Build Final Fixed
on:
  push:
    branches: [main]
    tags: ["v*"]

jobs:
  build-android:
    runs-on: ubuntu-latest
    container:
      image: node:20-bookworm

    steps:
      - name: Checkout Main Project
        uses: actions/checkout@v4
        with:
          submodules: false
          token: ${{ secrets.GITHUB_TOKEN }}

      - name: Manual Clone easy-nostr
        run: |
          git clone https://${{ github.actor }}:${{ secrets.GITHUB_TOKEN }}@gitea.malxte.de/Bytemalte/easy-nostr.git src-tauri/easy-nostr

      - name: Install System Dependencies
        run: |
          apt-get update
          apt-get install -y build-essential curl wget file libssl-dev pkg-config openjdk-17-jdk git unzip libgtk-3-dev webkit2gtk-4.1 libwebkit2gtk-4.1-dev libappindicator3-dev librsvg2-dev python3

      - name: Install Rust & Targets
        run: |
          curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh -s -- -y
          echo "$HOME/.cargo/bin" >> $GITHUB_PATH
          export PATH="$HOME/.cargo/bin:$PATH"
          rustup target add aarch64-linux-android armv7-linux-androideabi i686-linux-android x86_64-linux-android
          rustup target add wasm32-unknown-unknown

      - name: Install Trunk & Tauri-CLI (Fixed)
        run: |
          export PATH="$HOME/.cargo/bin:$PATH"
          # Installation via Cargo ist sicherer als wget von GitHub Releases
          cargo install trunk
          cargo install tauri-cli --version "^2.0.0"

      - name: Setup Android SDK
        run: |
          export ANDROID_HOME=$HOME/android-sdk
          mkdir -p $ANDROID_HOME/cmdline-tools
          cd $ANDROID_HOME/cmdline-tools
          wget -q https://dl.google.com/android/repository/commandlinetools-linux-9477386_latest.zip
          unzip -q commandlinetools-linux-9477386_latest.zip
          mv cmdline-tools latest
          yes | $ANDROID_HOME/cmdline-tools/latest/bin/sdkmanager --sdk_root=$ANDROID_HOME "platform-tools" "platforms;android-33" "build-tools;33.0.1" "ndk;25.1.8937393"
          echo "ANDROID_HOME=$ANDROID_HOME" >> $GITHUB_ENV
          echo "NDK_HOME=$ANDROID_HOME/ndk/25.1.8937393" >> $GITHUB_ENV

      - name: Build and Compile
        run: |
          export PATH="$HOME/.cargo/bin:$PATH"
          export ANDROID_HOME=$HOME/android-sdk
          export NDK_HOME=$ANDROID_HOME/ndk/25.1.8937393
          export JAVA_HOME=/usr/lib/jvm/java-17-openjdk-amd64

          # 1. Frontend bauen
          trunk build --release

          # 2. Android Build
          if [ ! -d "src-tauri/gen/android" ]; then
            cargo tauri android init
          fi

          cargo tauri android build --release --apk

          # 3. APK manuell signieren
          echo "${{ secrets.ANDROID_KEYSTORE_BASE64 }}" | tr -d '[:space:]' > keystore.b64
          base64 -d keystore.b64 > release.keystore

          UNSIGNED_APK=$(find src-tauri/gen/android/app/build/outputs/apk/universal/release -name "app-universal-release-unsigned.apk" | head -n 1)

          if [ -z "$UNSIGNED_APK" ]; then
             UNSIGNED_APK="src-tauri/gen/android/app/build/outputs/apk/universal/release/app-universal-release-unsigned.apk"
          fi

          APKSIGNER=$(find $ANDROID_HOME/build-tools -name apksigner | sort -r | head -n 1)

          $APKSIGNER sign --ks release.keystore \
            --ks-type PKCS12 \
            --ks-key-alias "${{ secrets.ANDROID_KEY_ALIAS }}" \
            --ks-pass pass:"${{ secrets.ANDROID_KEYSTORE_PASSWORD }}" \
            --key-pass pass:"${{ secrets.ANDROID_KEY_PASSWORD }}" \
            --v4-signing-enabled true \
            --out Marstemedia-Universal-Signed.apk \
            "$UNSIGNED_APK"

          echo "Signierung erfolgreich!"
        env:
          JAVA_HOME: /usr/lib/jvm/java-17-openjdk-amd64

      - name: Upload Artifact
        uses: actions/upload-artifact@v3
        with:
          name: Marstemedia-Universal-Signed
          path: Marstemedia-Universal-Signed.apk

      - name: Create Gitea Release
        if: startsWith(github.ref, 'refs/tags/')
        uses: softprops/action-gh-release@v1
        with:
          files: Marstemedia-Universal-Signed.apk
          name: "Release ${{ github.ref_name }}"
          draft: false
          prerelease: false
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}