release.yml

name: Release

on:
  push:
    tags:
      - 'v*'
  workflow_dispatch:
    inputs:
      tag_name:
        description: 'Release Tag Name (e.g. v0.1.2)'
        required: true
        default: 'v0.1.2'

permissions:
  contents: write

jobs:
  build-release:
    name: Build (${{ matrix.goos }}/${{ matrix.goarch }})
    runs-on: ubuntu-latest
    strategy:
      fail-fast: false
      matrix:
        include:
          # Linux
          - goos: linux
            goarch: amd64
            artifact_name: bramand-linux-amd64
            archive_format: tar.gz
          - goos: linux
            goarch: arm64
            artifact_name: bramand-linux-arm64
            archive_format: tar.gz
          - goos: linux
            goarch: arm
            artifact_name: bramand-linux-armv7
            archive_format: tar.gz
          - goos: linux
            goarch: '386'
            artifact_name: bramand-linux-386
            archive_format: tar.gz

          # Android (Termux)
          - goos: android
            goarch: arm64
            artifact_name: bramand-android-arm64
            archive_format: tar.gz
          - goos: linux
            goarch: arm
            artifact_name: bramand-android-armv7
            archive_format: tar.gz
          - goos: linux
            goarch: amd64
            artifact_name: bramand-android-amd64
            archive_format: tar.gz

          # macOS (Darwin)
          - goos: darwin
            goarch: amd64
            artifact_name: bramand-darwin-amd64
            archive_format: tar.gz
          - goos: darwin
            goarch: arm64
            artifact_name: bramand-darwin-arm64
            archive_format: tar.gz

          # Windows
          - goos: windows
            goarch: amd64
            artifact_name: bramand-windows-amd64
            archive_format: zip
          - goos: windows
            goarch: arm64
            artifact_name: bramand-windows-arm64
            archive_format: zip
          - goos: windows
            goarch: '386'
            artifact_name: bramand-windows-386
            archive_format: zip

    steps:
      - name: Check out repository
        uses: actions/checkout@v4

      - name: Set up Go
        uses: actions/setup-go@v5
        with:
          go-version: '1.27.3'
          cache: false

      - name: Compile Native Binary
        env:
          GOOS: ${{ matrix.goos }}
          GOARCH: ${{ matrix.goarch }}
          CGO_ENABLED: 0
        run: |
          mkdir -p build_output
          if [ "${{ matrix.goarch }}" = "arm" ]; then
            export GOARM=7
          fi
          if [ "${{ matrix.goos }}" = "windows" ]; then
            BINARY_NAME="bramand.exe"
            go build -ldflags="-s -w" -o "build_output/${BINARY_NAME}" main.go
            cp "build_output/${BINARY_NAME}" "build_output/bmd.exe"
          else
            BINARY_NAME="bramand"
            go build -ldflags="-s -w" -o "build_output/${BINARY_NAME}" main.go
            cp "build_output/${BINARY_NAME}" "build_output/bmd"
            chmod +x "build_output/${BINARY_NAME}" "build_output/bmd"
          fi

      - name: Package Release Archive
        id: package
        run: |
          mkdir -p dist
          TAG="${{ github.ref_name }}"
          if [ -z "$TAG" ] || [ "$TAG" = "main" ] || [ "$TAG" = "master" ]; then
            TAG="${{ github.event.inputs.tag_name }}"
          fi
          if [ -z "$TAG" ]; then
            TAG="v0.1.2"
          fi

          cp -r stdlib build_output/
          cp README.md build_output/
          if [ -f LICENSE ]; then cp LICENSE build_output/; fi

          cd build_output
          if [ "${{ matrix.archive_format }}" = "tar.gz" ]; then
            ARCHIVE_NAME="${{ matrix.artifact_name }}-${TAG}.tar.gz"
            tar -czvf "../dist/${ARCHIVE_NAME}" *
          else
            ARCHIVE_NAME="${{ matrix.artifact_name }}-${TAG}.zip"
            zip -r "../dist/${ARCHIVE_NAME}" *
          fi
          cd ..

          echo "archive_path=dist/${ARCHIVE_NAME}" >> $GITHUB_OUTPUT
          echo "archive_name=${ARCHIVE_NAME}" >> $GITHUB_OUTPUT

      - name: Upload Build Artifact
        uses: actions/upload-artifact@v4
        with:
          name: ${{ matrix.artifact_name }}
          path: ${{ steps.package.outputs.archive_path }}

  publish-release:
    name: Publish Release to GitHub
    needs: build-release
    runs-on: ubuntu-latest
    steps:
      - name: Check out repository
        uses: actions/checkout@v4

      - name: Download all built artifacts
        uses: actions/download-artifact@v4
        with:
          path: release_assets

      - name: Prepare Assets & Checksums
        run: |
          mkdir -p final_assets
          find release_assets/ -type f \( -name "*.tar.gz" -o -name "*.zip" \) -exec cp {} final_assets/ \;
          cd final_assets
          sha256sum * > checksums.txt
          cat checksums.txt
          cd ..

      - name: Publish Release via GitHub CLI
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        run: |
          TAG="${{ github.ref_name }}"
          if [ -z "$TAG" ] || [ "$TAG" = "main" ] || [ "$TAG" = "master" ]; then
            TAG="${{ github.event.inputs.tag_name }}"
          fi
          if [ -z "$TAG" ]; then
            TAG="v0.1.2"
          fi

          cat << 'EOF' > release_notes.md
          ✦ BramandScript Production Release ✦

          High-performance, general-purpose programming language built from scratch with a Stack-based 64-bit Bytecode Virtual Machine, Pratt Parser, Centralized Package Manager, and modular standard library in pure Go. Zero external dependencies.

          ### Key Capabilities in this Release (v0.1.2):
          - **Centralized Package & Module Architecture**: Full-featured package manager (`bmd install`, `bmd get`, `bmd cache info/prune/verify`, `bmd pkg init`), multi-tier entrypoint fallbacks, inter-process file locks, and offline determinism.
          - **Supply-Chain Security & Permission Contracts**: Granular capability enforcement (`--allow-all`, `--allow-run`, `--allow-write`, `--allow-net`), checksum integrity verification, and package sandboxing.
          - **Single-Binary Bundler**: Package and compile dependencies directly into self-contained standalone binaries (`bmd build -s`).
          - **Enterprise Language Syntax**: Null-coalescing (`??`, `??=`), optional chaining (`?.`), ternary conditional (`? :`), string interpolation (`f"..."`, template literals), array/hash spread (`...`), default function parameters (`fn f(a, b = 10)`), LIFO `defer` statements.
          - **Dynamic 64-Bit VM Engine**: 64-bit opcode operands, dynamic call frames (`--max-frames`), and configurable value stack.
          - **Enterprise Standard Library**: `std/log`, `std/retry`, `std/config`, `std/uuid`, `std/semaphore`, `std/circuitbreaker`, `std/pool`, and advanced `std/collections` primitives.
          - **Self-Contained Executable**: Standard library and packages fully embedded inside native binary via Go `embed.FS`.

          ### Available Binary Packages:
          - **Linux**: x86_64, aarch64 (ARM64), ARMv7, x86 (32-bit)
          - **Android Termux**: aarch64 (ARM64), ARMv7, x86_64
          - **macOS**: Apple Silicon (arm64), Intel (x86_64)
          - **Windows**: x86_64 (64-bit), ARM64, x86 (32-bit)

          ### Universal One-Liner Installer:
          ```bash
          curl -fsSL https://raw.githubusercontent.com/Codeleafly/bramandScript/main/install.sh | bash
          ```

          All archive checksums are verified in `checksums.txt`.
          EOF

          gh release create "$TAG" final_assets/* \
            --title "BramandScript ${TAG}" \
            --notes-file release_notes.md \
            --draft=false \
            --prerelease=false || \
          gh release upload "$TAG" final_assets/* --clobber