release-binary-and-wrapper.yaml

# Creates GitHub releases with multi-platform CodingBooth binaries, wrapper, and examples.
# Triggers on: manual dispatch only.
name: Release CodingBooth

on:
  workflow_dispatch:
  # Callable from `release-all.yaml`, which must grant contents: write --
  # a caller caps a callee's permissions, it cannot widen them.
  workflow_call:

permissions:
  contents: write

jobs:
  publish:
    runs-on: ubuntu-latest

    steps:
      # ---------------------------------------------------------
      # Checkout and Setup
      # ---------------------------------------------------------
      - name: Check out repository
        uses: actions/checkout@v4
        with:
          # Full history and tags: the catalog version check compares against the
          # manifest at the previous release tag.
          fetch-depth: 0

      - name: Set up Go
        run: |
          ./build/init-go-setup.sh
          echo "/usr/local/go/bin" >> $GITHUB_PATH

      # ---------------------------------------------------------
      # Read version.txt → output "version"
      # ---------------------------------------------------------
      - name: Read version from version.txt
        id: get_version
        run: |
          set -euo pipefail
          VERSION=$(tr -d ' \t\r\n' < version.txt)
          if [ -z "$VERSION" ]; then
            echo "version.txt is empty" >&2
            exit 1
          fi
          echo "version=$VERSION" >> "$GITHUB_OUTPUT"

      - name: Show version
        run: echo "Publishing CodingBooth for version ${{ steps.get_version.outputs.version }}"

      - name: Reject pre-release (--rc) versions
        run: |
          set -euo pipefail
          VERSION="${{ steps.get_version.outputs.version }}"
          if [[ "$VERSION" =~ --rc([0-9]+)?$ ]]; then
            echo "::error::Refusing to release pre-release version '$VERSION'. Binary releases are only allowed for stable (non-rc) versions."
            exit 1
          fi
          echo "Stable version — proceeding."

      - name: Verify README version matches version.txt
        run: |
          set -euo pipefail
          VERSION="${{ steps.get_version.outputs.version }}"
          README_VERSION=$(grep -oP '(?<=\*\*Current Version:\*\* v)[^ ]+' README.md)
          if [ "$VERSION" != "$README_VERSION" ]; then
            echo "::error::Version mismatch — version.txt: $VERSION, README.md: $README_VERSION"
            exit 1
          fi
          echo "Versions match: $VERSION"

      # ---------------------------------------------------------
      # Cleanup old untagged releases
      # ---------------------------------------------------------
      - name: Delete untagged releases
        run: |
          set -euo pipefail
          gh release list --limit 100 --json tagName \
            --jq '.[] | select(.tagName | startswith("untagged-")) | .tagName' \
            | xargs -r -I {} gh release delete {} -y
        env:
          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}

      # ---------------------------------------------------------
      # Build binary artifacts
      # ---------------------------------------------------------
      - name: Build Go binaries for all platforms
        run: |
          ./build/cli-build.sh
          ls -la bin

      - name: Make wrapper executable
        run: chmod +x booth

      - name: Generate SHA256 checksums for all binaries
        run: |
          cd bin
          echo "BIN"
          ls -la 
          for binary in codingbooth-*; do
            sha256sum "$binary" > "${binary}.sha256"
          done
          cd ..
          echo "ROOT"
          ls -la 

      # ---------------------------------------------------------
      # Build example artifacts
      # ---------------------------------------------------------
      - name: Update booth wrappers
        run: |
          cd ./examples
          ./update-booth.sh
          cd ..

      - name: Create example-list.txt
        run: |
          echo "# CodingBooth Examples" > example-list.txt
          echo "" >> example-list.txt
          echo "## Workspace Examples" >> example-list.txt
          for dir in examples/workspaces/*-example/; do
            name=$(basename "$dir")
            echo "- $name" >> example-list.txt
          done
          echo "" >> example-list.txt
          echo "## Demo" >> example-list.txt
          echo "- demo" >> example-list.txt

      - name: Package workspace examples
        run: |
          mkdir -p dist
          cd examples/workspaces
          for dir in *-example/; do
            name=$(basename "$dir")
            zip -r "../../dist/${name}.zip" "$dir"
          done

      - name: Package demo
        run: |
          cd examples
          zip -r ../dist/demo.zip demo/

      - name: Move example-list.txt to dist
        run: mv example-list.txt dist/

      # ---------------------------------------------------------
      # Build template artifacts
      # ---------------------------------------------------------
      # Every catalog item that changed since the previous release must have
      # bumped its cb-version (docs/CATALOG_VERSIONING.md). Refuse to publish otherwise.
      - name: Check catalog item versions
        run: ./build/check-catalog-versions.sh

      # No test fixture or example may carry a copy of a built-in setup in its
      # .booth/setups/: the copy runs instead of what the image ships, so the
      # test stops testing the catalog. Refuse to publish otherwise.
      - name: Check no .booth/setups/ shadows a built-in
        run: ./build/check-setup-shadowing.sh

      - name: Package templates
        run: |
          zip -r dist/templates.zip templates/
          # Published beside the templates: what each catalog item was in this release.
          cp build/catalog-manifest.tsv dist/catalog-manifest.tsv

      # ---------------------------------------------------------
      # Publish versioned release (binary + examples)
      # ---------------------------------------------------------
      - name: Publish versioned release
        uses: softprops/action-gh-release@v2
        with:
          tag_name: ${{ steps.get_version.outputs.version }}
          name: ${{ steps.get_version.outputs.version }}
          body: |
            CodingBooth ${{ steps.get_version.outputs.version }}

            Multi-platform binaries and example workspaces.
          prerelease: false
          files: |
            bin/codingbooth-linux-amd64
            bin/codingbooth-linux-amd64.sha256
            bin/codingbooth-linux-arm64
            bin/codingbooth-linux-arm64.sha256
            bin/codingbooth-darwin-amd64
            bin/codingbooth-darwin-amd64.sha256
            bin/codingbooth-darwin-arm64
            bin/codingbooth-darwin-arm64.sha256
            bin/codingbooth-windows-amd64.exe
            bin/codingbooth-windows-amd64.exe.sha256
            bin/codingbooth-windows-arm64.exe
            bin/codingbooth-windows-arm64.exe.sha256
            booth
            version.txt
            dist/*
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

      # ---------------------------------------------------------
      # Publish latest release (stable only, replaces on each run)
      # ---------------------------------------------------------
      - name: Publish latest release
        uses: softprops/action-gh-release@v2
        with:
          tag_name: latest
          name: latest
          body: |
            CodingBooth ${{ steps.get_version.outputs.version }}

            Multi-platform binaries and example workspaces.
            This release is updated with each stable version.
          prerelease: false
          draft: false
          files: |
            bin/codingbooth-linux-amd64
            bin/codingbooth-linux-amd64.sha256
            bin/codingbooth-linux-arm64
            bin/codingbooth-linux-arm64.sha256
            bin/codingbooth-darwin-amd64
            bin/codingbooth-darwin-amd64.sha256
            bin/codingbooth-darwin-arm64
            bin/codingbooth-darwin-arm64.sha256
            bin/codingbooth-windows-amd64.exe
            bin/codingbooth-windows-amd64.exe.sha256
            bin/codingbooth-windows-arm64.exe
            bin/codingbooth-windows-arm64.exe.sha256
            booth
            version.txt
            dist/*
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}