ci.yml

name: CI
on:
  workflow_dispatch:
  pull_request:
  push:
    branches:
      - main
    tags:
      - '*'
permissions:
  contents: read
env:
  FORCE_COLOR: 1
jobs:
  verify-version:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v6
      - name: Verify tag version matches package.json
        run: |
          # Check if we're running on a tag
          if [[ "$GITHUB_REF" == refs/tags/* ]]; then
            # Extract tag name from GITHUB_REF (e.g., refs/tags/v6.0.2 -> v6.0.2)
            TAG_NAME="${GITHUB_REF#refs/tags/}"
            # Remove 'v' prefix if present to get the version number
            TAG_VERSION="${TAG_NAME#v}"

            # Get version from package.json
            PACKAGE_VERSION=$(node -p "require('./package.json').version")

            echo "Tag version: $TAG_VERSION"
            echo "Package version: $PACKAGE_VERSION"

            if [ "$TAG_VERSION" != "$PACKAGE_VERSION" ]; then
              echo "ERROR: Tag version ($TAG_VERSION) does not match package.json version ($PACKAGE_VERSION)"
              echo "Please update package.json or create a new tag with the correct version"
              echo "GitHub release will NOT be created."
              exit 1
            fi

            echo "Version match verified!"
          else
            echo "Skipping version verification - not a tag event"
          fi

  lint:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v6
      - uses: actions/setup-node@v6
        with:
          node-version: 24
      - name: Install dependencies
        run: yarn install --frozen-lockfile --ignore-scripts
      - name: Run lint
        run: yarn lint

  build:
    permissions:
      contents: write
    needs: [verify-version, lint]
    runs-on: ${{ matrix.os }}
    strategy:
      fail-fast: false
      matrix:
        include:
          - os: macos-latest
            host: x64
            target: x64
            platform: macos-x64
            node: 20
          - os: macos-latest
            host: x64
            target: x64
            platform: macos-x64
            node: 22
          - os: macos-latest
            host: x64
            target: x64
            platform: macos-x64
            node: 24
          - os: ubuntu-24.04
            host: x64
            target: x64
            platform: linux-x64
            node: 20
          - os: ubuntu-24.04
            host: x64
            target: x64
            platform: linux-x64
            node: 22
          - os: ubuntu-24.04
            host: x64
            target: x64
            platform: linux-x64
            node: 24
          - os: windows-latest
            host: x64
            target: x64
            platform: win32-x64
            node: 20
          - os: windows-latest
            host: x64
            target: x64
            platform: win32-x64
            node: 22
          - os: windows-latest
            host: x64
            target: x64
            platform: win32-x64
            node: 24
          - os: macos-latest
            host: arm64
            target: arm64
            platform: macos-arm64
            node: 20
          - os: macos-latest
            host: arm64
            target: arm64
            platform: macos-arm64
            node: 22
          - os: macos-latest
            host: arm64
            target: arm64
            platform: macos-arm64
            node: 24
          - os: ubuntu-24.04-arm
            host: arm64
            target: arm64
            platform: linux-arm64
            node: 20
          - os: ubuntu-24.04-arm
            host: arm64
            target: arm64
            platform: linux-arm64
            node: 22
          - os: ubuntu-24.04-arm
            host: arm64
            target: arm64
            platform: linux-arm64
            node: 24
    name: ${{ matrix.os }} (node=${{ matrix.node }}, host=${{ matrix.host }}, target=${{ matrix.target }})
    steps:
      - uses: actions/checkout@v6
      - uses: actions/setup-node@v6
        with:
          node-version: ${{ matrix.node }}
          architecture: ${{ matrix.host }}

      - name: Add msbuild to PATH
        uses: microsoft/setup-msbuild@v2
        if: contains(matrix.os, 'windows')
        with:
          msbuild-architecture: ${{ matrix.target }}

      - name: Install dependencies
        run: yarn install --frozen-lockfile --ignore-scripts

      - name: Check Node compatibility
        run: node tools/semver-check.js

      - name: Add env vars
        shell: bash
        run: |
          echo "V=1" >> $GITHUB_ENV

          if [ "${{ matrix.target }}" = "x86" ]; then
            echo "TARGET=ia32" >> $GITHUB_ENV
          else
            echo "TARGET=${{ matrix.target }}" >> $GITHUB_ENV
          fi

      - name: Add Linux env vars
        if: contains(matrix.os, 'ubuntu')
        run: |
          echo "CFLAGS=${CFLAGS:-} -include ../src/gcc-preinclude.h" >> $GITHUB_ENV
          echo "CXXFLAGS=${CXXFLAGS:-} -include ../src/gcc-preinclude.h" >> $GITHUB_ENV

      - name: Build binaries
        run: yarn prebuild

      - name: Print binary info
        if: contains(matrix.os, 'ubuntu')
        run: |
          BIN=$(find prebuilds -name "*.node" | head -1)
          ldd "$BIN"
          echo "---"
          nm "$BIN" | grep "GLIBC_" | c++filt || true
          echo "---"
          file "$BIN"

      - name: Run tests
        run: yarn test

      - name: Upload binaries to commit artifacts
        uses: actions/upload-artifact@v7
        if: matrix.node == 24
        with:
          name: prebuilt-binaries-${{ matrix.platform }}
          path: prebuilds/*
          retention-days: 7

      - name: Upload binaries to GitHub Release
        run: gh release upload ${GITHUB_REF#refs/tags/} prebuilds/* --clobber
        if: matrix.node == 24 && startsWith(github.ref, 'refs/tags/')
        env:
          GH_TOKEN: ${{ github.token }}

  build-musl:
    permissions:
      contents: write
    needs: [verify-version]
    if: github.event_name == 'workflow_dispatch' || startsWith(github.ref, 'refs/tags/')
    strategy:
      fail-fast: false
      matrix:
        include:
          - runner: ubuntu-24.04-arm
            platform: linux/arm64
            arch: arm64
          - runner: ubuntu-24.04
            platform: linux/amd64
            arch: amd64
    runs-on: ${{ matrix.runner }}
    name: musl ${{ matrix.arch }}
    steps:
      - uses: actions/checkout@v6

      - name: Build binaries and test
        run: |
          docker build \
            --file ./tools/BinaryBuilder.Dockerfile \
            --tag sqlite-builder \
            --no-cache \
            --build-arg VARIANT=alpine3.20 \
            --build-arg NODE_VERSION=24 \
            .
          CONTAINER_ID=$(docker create -it sqlite-builder)
          docker cp $CONTAINER_ID:/usr/src/build/prebuilds/ ./prebuilds

      - name: Upload binaries to commit artifacts
        uses: actions/upload-artifact@v7
        with:
          name: prebuilt-binaries-musl-${{ matrix.arch }}
          path: prebuilds/*
          retention-days: 7

      - name: Upload binaries to GitHub Release
        run: |
          gh release upload ${GITHUB_REF#refs/tags/} prebuilds/* --clobber
        if: startsWith(github.ref, 'refs/tags/')
        env:
          GH_TOKEN: ${{ github.token }}

  package:
    needs: [build]
    if: github.event_name == 'workflow_dispatch' || (github.event_name == 'pull_request') || (github.event_name == 'push' && !startsWith(github.ref, 'refs/tags/'))
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v6
      - uses: actions/setup-node@v6
        with:
          node-version: 24

      - name: Install dependencies
        run: yarn install --frozen-lockfile --ignore-scripts

      - name: Download all prebuilt binary artifacts
        uses: actions/download-artifact@v5
        with:
          path: prebuilds-artifacts
          merge-multiple: true

      - name: Merge prebuilds into package
        run: |
          mkdir -p prebuilds
          # Each artifact may contain platform-specific subdirs
          # Copy all prebuilds from artifacts into prebuilds/
          cp -r prebuilds-artifacts/*/ prebuilds/ 2>/dev/null || true
          # Also handle flat structure (files directly in artifact root)
          cp -r prebuilds-artifacts/ prebuilds/ 2>/dev/null || true
          # Verify the prebuilds are present
          find prebuilds -name '*.node' -type f

      - name: Create npm tarball
        run: |
          npm pack
          echo "npm tarball created:"
          ls -la *.tgz

      - name: Upload npm tarball as commit artifact
        uses: actions/upload-artifact@v7
        with:
          name: npm-package-tarball
          path: '*.tgz'
          retention-days: 7

  test-package:
    needs: [package]
    if: github.event_name == 'workflow_dispatch' || (github.event_name == 'pull_request') || (github.event_name == 'push' && !startsWith(github.ref, 'refs/tags/'))
    uses: ./.github/workflows/test-npm-package.yml
    with:
      target_run_id: ${{ github.run_id }}
      node_version: '22'

  publish-npm:
    needs: [build, build-musl]
    if: startsWith(github.ref, 'refs/tags/')
    runs-on: ubuntu-latest
    permissions:
      contents: read
      id-token: write
    steps:
      - uses: actions/checkout@v6
      - uses: actions/setup-node@v6
        with:
          node-version: 24
          registry-url: https://registry.npmjs.org

      - name: Install dependencies
        run: yarn install --frozen-lockfile --ignore-scripts

      - name: Download all prebuilt binary artifacts
        uses: actions/download-artifact@v5
        with:
          path: prebuilds-artifacts
          merge-multiple: true

      - name: Merge prebuilds into package
        run: |
          mkdir -p prebuilds
          cp -r prebuilds-artifacts/*/ prebuilds/ 2>/dev/null || true
          cp -r prebuilds-artifacts/ prebuilds/ 2>/dev/null || true
          find prebuilds -name '*.node' -type f

      - name: Publish to npm
        run: npm publish