.goreleaser.yaml

# GoReleaser configuration for basecamp
# Docs: https://goreleaser.com
version: 2
project_name: basecamp

before:
  hooks:
    # PGO profile should be generated by release workflow before GoReleaser runs
    - sh -c 'if [ -f default.pgo ]; then echo "PGO profile found ($(du -h default.pgo | cut -f1))"; else echo "No PGO profile - build will use standard optimization"; fi'
    - sh -c 'mkdir -p completions && go run ./cmd/basecamp completion bash > completions/basecamp.bash && go run ./cmd/basecamp completion zsh > completions/_basecamp && go run ./cmd/basecamp completion fish > completions/basecamp.fish'

builds:
  - id: basecamp
    main: ./cmd/basecamp
    binary: basecamp
    env:
      - CGO_ENABLED=0
    goos:
      - darwin
      - linux
      - windows
      - freebsd
      - openbsd
    goarch:
      - amd64
      - arm64
    # PGO: Use profile if available (Go 1.21+)
    flags:
      - -pgo=auto
    ldflags:
      - -s -w
      - -X github.com/basecamp/basecamp-cli/internal/version.Version={{.Version}}
      - -X github.com/basecamp/basecamp-cli/internal/version.Commit={{.Commit}}
      - -X github.com/basecamp/basecamp-cli/internal/version.Date={{.Date}}

archives:
  - id: default
    formats:
      - tar.gz
    name_template: "{{ .ProjectName }}_{{ .Version }}_{{ .Os }}_{{ .Arch }}"
    format_overrides:
      - goos: windows
        formats:
          - zip
    files:
      - LICENSE*
      - MIT-LICENSE
      - README*
      - completions/*

checksum:
  name_template: 'checksums.txt'
  algorithm: sha256

# Generate SBOM for supply chain transparency
sboms:
  - artifacts: archive

# Sign checksums with cosign (keyless via Sigstore)
# Requires: permissions.id-token: write in workflow for OIDC
signs:
  - cmd: cosign
    signature: '${artifact}.bundle'
    args:
      - sign-blob
      - '--bundle=${signature}'
      - '${artifact}'
      - '--yes'
    artifacts: checksum
    output: true

# Sign and notarize macOS binaries (cross-platform via embedded quill)
notarize:
  macos:
    - enabled: '{{ and .Env.MACOS_SIGN_P12 .Env.MACOS_SIGN_PASSWORD .Env.MACOS_NOTARY_KEY .Env.MACOS_NOTARY_KEY_ID .Env.MACOS_NOTARY_ISSUER_ID }}'
      ids:
        - basecamp
      sign:
        certificate: "{{.Env.MACOS_SIGN_P12}}"
        password: "{{.Env.MACOS_SIGN_PASSWORD}}"
      notarize:
        issuer_id: "{{.Env.MACOS_NOTARY_ISSUER_ID}}"
        key_id: "{{.Env.MACOS_NOTARY_KEY_ID}}"
        key: "{{.Env.MACOS_NOTARY_KEY}}"
        wait: true
        timeout: 20m

changelog:
  # Use GitHub's auto-generated release notes (categories configured in .github/release.yml)
  use: github-native

release:
  github:
    owner: basecamp
    name: basecamp-cli
  draft: false
  prerelease: auto
  name_template: "{{.ProjectName}} v{{.Version}}"
  header: |
    {{ if .Env.RELEASE_CHANGELOG }}{{ .Env.RELEASE_CHANGELOG }}

    ---
    {{ end }}
    ### Install

    **macOS:**
    ```sh
    brew install --cask basecamp/tap/basecamp
    basecamp auth login
    ```

    **Arch Linux / Omarchy:**
    ```sh
    yay -S basecamp-cli
    basecamp auth login
    ```

    **Other platforms:** download the matching archive from the assets below.

homebrew_casks:
  - name: basecamp
    repository:
      owner: basecamp
      name: homebrew-tap
      token: "{{ .Env.HOMEBREW_TAP_TOKEN }}"
    directory: Casks
    homepage: "https://github.com/basecamp/basecamp-cli"
    description: "Command-line interface for Basecamp"
    binaries:
      - basecamp
    skip_upload: auto

scoops:
  - name: basecamp
    repository:
      owner: basecamp
      name: homebrew-tap
      token: "{{ .Env.HOMEBREW_TAP_TOKEN }}"
    homepage: "https://github.com/basecamp/basecamp-cli"
    description: "Command-line interface for Basecamp"
    license: MIT
    skip_upload: auto

# AUR publishing handled by scripts/publish-aur.sh (GoReleaser enforces -bin suffix)