fleet-memory/.github/workflows/release.yml

name: Build Release Artifacts

on:
  push:
    tags:
      - 'v*'

jobs:
  build-python-package:
    runs-on: ubuntu-latest

    steps:
    - uses: actions/checkout@v4

    - name: Install uv
      uses: astral-sh/setup-uv@v5
      with:
        enable-cache: true

    - name: Set up Python
      uses: actions/setup-python@v5
      with:
        python-version-file: ".python-version"

    - name: Build hindsight package
      working-directory: ./hindsight
      run: uv build

    - name: Upload artifacts
      uses: actions/upload-artifact@v4
      with:
        name: python-hindsight-dist
        path: hindsight/dist/*
        retention-days: 30

  build-rust-cli:
    runs-on: ${{ matrix.os }}
    strategy:
      matrix:
        include:
          - os: ubuntu-latest
            target: x86_64-unknown-linux-gnu
            artifact_name: hindsight
            asset_name: hindsight-linux-amd64
          - os: macos-latest
            target: x86_64-apple-darwin
            artifact_name: hindsight
            asset_name: hindsight-darwin-amd64
          - os: macos-latest
            target: aarch64-apple-darwin
            artifact_name: hindsight
            asset_name: hindsight-darwin-arm64

    steps:
    - uses: actions/checkout@v4

    - name: Install Rust
      uses: dtolnay/rust-toolchain@stable
      with:
        targets: ${{ matrix.target }}

    - name: Cache cargo registry
      uses: actions/cache@v4
      with:
        path: ~/.cargo/registry
        key: ${{ runner.os }}-cargo-registry-${{ hashFiles('**/Cargo.lock') }}

    - name: Cache cargo index
      uses: actions/cache@v4
      with:
        path: ~/.cargo/git
        key: ${{ runner.os }}-cargo-index-${{ hashFiles('**/Cargo.lock') }}

    - name: Cache cargo build
      uses: actions/cache@v4
      with:
        path: hindsight-cli/target
        key: ${{ runner.os }}-cargo-build-target-${{ hashFiles('**/Cargo.lock') }}

    - name: Build
      working-directory: hindsight-cli
      run: cargo build --release --target ${{ matrix.target }}

    - name: Prepare artifact
      run: |
        mkdir -p artifacts
        cp hindsight-cli/target/${{ matrix.target }}/release/${{ matrix.artifact_name }} artifacts/${{ matrix.asset_name }}
        chmod +x artifacts/${{ matrix.asset_name }}        

    - name: Upload artifacts
      uses: actions/upload-artifact@v4
      with:
        name: rust-cli-${{ matrix.asset_name }}
        path: artifacts/${{ matrix.asset_name }}
        retention-days: 30

  build-docker-images:
    runs-on: ubuntu-latest
    permissions:
      contents: read
      packages: write
    strategy:
      matrix:
        component: [api, control-plane]

    steps:
    - uses: actions/checkout@v4

    - name: Free Disk Space
      uses: jlumbroso/free-disk-space@main
      with:
        tool-cache: false
        android: true
        dotnet: true
        haskell: true
        large-packages: true
        docker-images: true
        swap-storage: true

    - name: Set up Docker Buildx
      uses: docker/setup-buildx-action@v3

    - name: Log in to GitHub Container Registry
      uses: docker/login-action@v3
      with:
        registry: ghcr.io
        username: ${{ github.actor }}
        password: ${{ secrets.GITHUB_TOKEN }}

    - name: Extract version from tag
      id: get_version
      run: echo "VERSION=${GITHUB_REF#refs/tags/v}" >> $GITHUB_OUTPUT

    - name: Extract metadata
      id: meta
      uses: docker/metadata-action@v5
      with:
        images: ghcr.io/${{ github.repository_owner }}/hindsight-${{ matrix.component }}
        tags: |
          type=semver,pattern={{version}},value=${{ steps.get_version.outputs.VERSION }}
          type=semver,pattern={{major}}.{{minor}},value=${{ steps.get_version.outputs.VERSION }}
          type=semver,pattern={{major}},value=${{ steps.get_version.outputs.VERSION }}
          type=raw,value=latest          

    - name: Build and push Docker image (api)
      if: matrix.component == 'api'
      uses: docker/build-push-action@v6
      with:
        context: .
        file: docker/api.Dockerfile
        push: true
        tags: ${{ steps.meta.outputs.tags }}
        labels: ${{ steps.meta.outputs.labels }}
        cache-from: type=gha
        cache-to: type=gha,mode=max

    - name: Build and push Docker image (control-plane)
      if: matrix.component == 'control-plane'
      uses: docker/build-push-action@v6
      with:
        context: .
        file: docker/control-plane.Dockerfile
        push: true
        tags: ${{ steps.meta.outputs.tags }}
        labels: ${{ steps.meta.outputs.labels }}
        cache-from: type=gha
        cache-to: type=gha,mode=max

  package-helm-chart:
    runs-on: ubuntu-latest

    steps:
    - uses: actions/checkout@v4

    - name: Install Helm
      uses: azure/setup-helm@v4
      with:
        version: 'latest'

    - name: Lint Helm chart
      run: |
        helm lint helm/hindsight        

    - name: Package Helm chart
      run: |
        helm package helm/hindsight --destination ./helm-packages        

    - name: Upload Helm chart artifact
      uses: actions/upload-artifact@v4
      with:
        name: helm-chart
        path: helm-packages/*.tgz
        retention-days: 30

  create-github-release:
    runs-on: ubuntu-latest
    needs: [build-python-package, build-rust-cli, build-docker-images, package-helm-chart]
    permissions:
      contents: write

    steps:
    - uses: actions/checkout@v4

    - name: Extract version from tag
      id: get_version
      run: echo "VERSION=${GITHUB_REF#refs/tags/v}" >> $GITHUB_OUTPUT

    - name: Download Python package
      uses: actions/download-artifact@v4
      with:
        name: python-hindsight-dist
        path: ./artifacts/python-hindsight-dist

    - name: Download Rust CLI (Linux)
      uses: actions/download-artifact@v4
      with:
        name: rust-cli-hindsight-linux-amd64
        path: ./artifacts/rust-cli-hindsight-linux-amd64

    - name: Download Rust CLI (macOS Intel)
      uses: actions/download-artifact@v4
      with:
        name: rust-cli-hindsight-darwin-amd64
        path: ./artifacts/rust-cli-hindsight-darwin-amd64

    - name: Download Rust CLI (macOS ARM)
      uses: actions/download-artifact@v4
      with:
        name: rust-cli-hindsight-darwin-arm64
        path: ./artifacts/rust-cli-hindsight-darwin-arm64

    - name: Download Helm chart
      uses: actions/download-artifact@v4
      with:
        name: helm-chart
        path: ./artifacts/helm-chart

    - name: Prepare release assets
      run: |
        mkdir -p release-assets
        # Python package
        cp artifacts/python-hindsight-dist/* release-assets/
        # Rust CLI binaries
        cp artifacts/rust-cli-hindsight-linux-amd64/hindsight-linux-amd64 release-assets/
        cp artifacts/rust-cli-hindsight-darwin-amd64/hindsight-darwin-amd64 release-assets/
        cp artifacts/rust-cli-hindsight-darwin-arm64/hindsight-darwin-arm64 release-assets/
        # Helm chart
        cp artifacts/helm-chart/*.tgz release-assets/        

    - name: Generate release notes
      id: release_notes
      run: |
        cat << EOF > release-notes.md
        # Hindsight v${{ steps.get_version.outputs.VERSION }}

        ## 📦 Release Artifacts

        ### Python Package
        - \`hindsight-${{ steps.get_version.outputs.VERSION }}-py3-none-any.whl\`
        - \`hindsight-${{ steps.get_version.outputs.VERSION }}.tar.gz\`

        ### CLI Binaries
        - \`hindsight-linux-amd64\` - Linux x86_64
        - \`hindsight-darwin-amd64\` - macOS Intel
        - \`hindsight-darwin-arm64\` - macOS Apple Silicon

        ### Helm Chart
        - \`hindsight-${{ steps.get_version.outputs.VERSION }}.tgz\`

        ### Docker Images
        Docker images are published to GitHub Container Registry:
        - \`ghcr.io/${{ github.repository_owner }}/hindsight-api:${{ steps.get_version.outputs.VERSION }}\`
        - \`ghcr.io/${{ github.repository_owner }}/hindsight-control-plane:${{ steps.get_version.outputs.VERSION }}\`

        ## 🚀 Installation

        ### Python Package
        \`\`\`bash
        pip install hindsight==${{ steps.get_version.outputs.VERSION }}
        \`\`\`

        ### CLI
        \`\`\`bash
        # macOS (Apple Silicon)
        curl -L https://github.com/${{ github.repository }}/releases/download/v${{ steps.get_version.outputs.VERSION }}/hindsight-darwin-arm64 -o hindsight
        chmod +x hindsight
        sudo mv hindsight /usr/local/bin/

        # macOS (Intel)
        curl -L https://github.com/${{ github.repository }}/releases/download/v${{ steps.get_version.outputs.VERSION }}/hindsight-darwin-amd64 -o hindsight
        chmod +x hindsight
        sudo mv hindsight /usr/local/bin/

        # Linux
        curl -L https://github.com/${{ github.repository }}/releases/download/v${{ steps.get_version.outputs.VERSION }}/hindsight-linux-amd64 -o hindsight
        chmod +x hindsight
        sudo mv hindsight /usr/local/bin/
        \`\`\`

        ### Helm Chart
        \`\`\`bash
        helm install hindsight hindsight-${{ steps.get_version.outputs.VERSION }}.tgz
        \`\`\`

        ### Docker
        \`\`\`bash
        # Pull API image
        docker pull ghcr.io/${{ github.repository_owner }}/hindsight-api:${{ steps.get_version.outputs.VERSION }}

        # Pull Control Plane image
        docker pull ghcr.io/${{ github.repository_owner }}/hindsight-control-plane:${{ steps.get_version.outputs.VERSION }}

        # Or use latest
        docker pull ghcr.io/${{ github.repository_owner }}/hindsight-api:latest
        docker pull ghcr.io/${{ github.repository_owner }}/hindsight-control-plane:latest
        \`\`\`
        EOF
        cat release-notes.md        

    - name: Create GitHub Release
      uses: softprops/action-gh-release@v2
      with:
        files: release-assets/*
        body_path: release-notes.md
        draft: false
        prerelease: false
        generate_release_notes: false
      env:
        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

    - name: Create release summary
      run: |
        echo "# Release v${{ steps.get_version.outputs.VERSION }} Published Successfully" >> $GITHUB_STEP_SUMMARY
        echo "" >> $GITHUB_STEP_SUMMARY
        echo "## 📦 Components" >> $GITHUB_STEP_SUMMARY
        echo "- ✅ Python package (hindsight)" >> $GITHUB_STEP_SUMMARY
        echo "- ✅ Rust CLI (Linux amd64, macOS amd64, macOS arm64)" >> $GITHUB_STEP_SUMMARY
        echo "- ✅ Docker images (API, Control Plane)" >> $GITHUB_STEP_SUMMARY
        echo "- ✅ Helm chart" >> $GITHUB_STEP_SUMMARY
        echo "" >> $GITHUB_STEP_SUMMARY
        echo "🎉 Release is now available at: https://github.com/${{ github.repository }}/releases/tag/v${{ steps.get_version.outputs.VERSION }}" >> $GITHUB_STEP_SUMMARY