name: build

on:
  push:
    branches: [pro-features]
  workflow_dispatch:

env:
  # Cargo.lock is lockfile v4, which requires Rust >= 1.78. Upstream's
  # .github/workflows/build.yaml pins 1.90; mirror that here.
  RUST_VERSION: "1.90"

jobs:
  build-amd64:
    name: build-linux-amd64
    # Same self-hosted runner as the rustdesk client build. provision.sh on the
    # host installs the Rust toolchain and devscripts/debhelper used here.
    runs-on: [self-hosted, Linux, X64, ubuntu-22.04]
    timeout-minutes: 120
    steps:
      - name: Checkout source
        uses: actions/checkout@v4
        with:
          submodules: recursive

      - name: Verify host toolchain
        shell: bash
        run: |
          required=(git bash rustc cargo rustup pkg-config debuild dh dpkg-deb)
          missing=()
          for t in "${required[@]}"; do
            if command -v "$t" >/dev/null 2>&1; then
              printf '%-20s %s\n' "$t" "$(command -v "$t")"
            else
              missing+=("$t")
              printf '%-20s MISSING\n' "$t"
            fi
          done
          if [[ ${#missing[@]} -gt 0 ]]; then
            echo "Missing tools: ${missing[*]}. Install via: sudo apt install -y devscripts build-essential debhelper pkg-config"
            exit 1
          fi

      - name: Read version from Cargo.toml
        shell: bash
        run: |
          # Single source of truth: the top-level Cargo.toml's first `version =`
          # line (hbbs package). debian/changelog is patched to match below so
          # the produced .deb filenames carry the same version.
          display=$(grep -m1 -E '^version[[:space:]]*=' Cargo.toml \
                    | sed -E 's/^version[[:space:]]*=[[:space:]]*"([^"]+)".*/\1/')
          [[ -n "$display" ]] || { echo "Could not read version from Cargo.toml"; exit 1; }
          echo "Version : $display"
          echo "VERSION_DISPLAY=$display" >> "$GITHUB_ENV"

      - name: Patch debian/changelog with display version
        shell: bash
        run: |
          # The .deb filename is derived from the first changelog entry's
          # parenthesized version, NOT from Cargo.toml. Rewrite whatever
          # version is in the leading entry to match $VERSION_DISPLAY.
          sed -i -E "0,/^rustdesk-server \([^)]+\)/{s/^rustdesk-server \([^)]+\)/rustdesk-server (${VERSION_DISPLAY})/}" debian/changelog
          head -1 debian/changelog

      - name: Ensure Rust toolchain configured
        shell: bash
        run: |
          rustup toolchain install "$RUST_VERSION" --profile minimal --component rustfmt
          rustup default "$RUST_VERSION"
          rustup target add x86_64-unknown-linux-gnu
          rustc --version
          cargo --version

      - name: Build hbbs / hbbr / rustdesk-utils
        shell: bash
        run: |
          set -e
          # Native build for the runner's amd64 host. --all-features matches
          # what upstream's GitHub workflow uses for its musl cross builds.
          cargo build --release --all-features
          mkdir -p debian-build/amd64/bin
          cp -v target/release/hbbs           debian-build/amd64/bin/
          cp -v target/release/hbbr           debian-build/amd64/bin/
          cp -v target/release/rustdesk-utils debian-build/amd64/bin/
          chmod -v a+x debian-build/amd64/bin/*

      - name: Build .deb packages (amd64)
        shell: bash
        run: |
          set -e
          # Mirrors the deb-package job in upstream's .github/workflows/build.yaml:
          # stage debian/ and systemd/ next to the pre-built bin/ tree, then run
          # debuild -b so dh's auto_build step is a no-op (no source detected)
          # and dh_install just packages the binaries listed in the .install files.
          cp -vr debian systemd debian-build/amd64/
          sed "s/{{ ARCH }}/amd64/" debian/control.tpl > debian-build/amd64/debian/control
          (cd debian-build/amd64 && debuild -i -us -uc -b -aamd64)

          mkdir -p ./SignOutput
          mv -v ./debian-build/rustdesk-server-hbbs_${VERSION_DISPLAY}_amd64.deb   ./SignOutput/
          mv -v ./debian-build/rustdesk-server-hbbr_${VERSION_DISPLAY}_amd64.deb   ./SignOutput/
          mv -v ./debian-build/rustdesk-server-utils_${VERSION_DISPLAY}_amd64.deb  ./SignOutput/

      - name: Report signing status of build artifacts
        shell: bash
        run: |
          # .deb files are typically signed with debsign or via the apt repo
          # signing pipeline, not the .deb itself. Just list contents for now.
          for f in ./SignOutput/*.deb; do
            [[ -f "$f" ]] || continue
            size=$(stat -c%s "$f")
            printf '[UNSIGNED] %s (%d bytes)\n' "$(basename "$f")" "$size"
          done
          echo "::warning title=Unsigned .deb::Wire up debsigs / repo signing before distributing."

      - name: Upload artifacts
        uses: actions/upload-artifact@v3
        with:
          name: rustdesk-server-linux-amd64-${{ github.sha }}
          path: SignOutput/rustdesk-server-*.deb
          if-no-files-found: error
          retention-days: 14