name: Build Android APK

on:
  push:
    branches:
      - main
      - master
      - 'refactor/**'
    tags:
      - 'v*'
  pull_request:
    branches:
      - main
      - master
  workflow_dispatch:

jobs:
  build-android:
    name: Build Release APKs
    runs-on: ubuntu-latest
    container:
      image: ghcr.io/cirruslabs/flutter:3.19.3
      options: --privileged
    steps:
      - name: Setup Node.js 20 & ARM64 Flutter Engine
        run: |
          ARCH=$(uname -m)
          if [ "$ARCH" = "aarch64" ] || [ "$ARCH" = "arm64" ]; then NODE_ARCH="arm64"; else NODE_ARCH="x64"; fi
          curl -fsSL "https://nodejs.org/dist/v20.18.0/node-v20.18.0-linux-${NODE_ARCH}.tar.gz" | tar -xzf - -C /usr/local --strip-components=1
          node --version
          git config --global --add safe.directory "$GITHUB_WORKSPACE"
          git config --global --add safe.directory '*'

          # On Linux ARM64, Flutter engine and Android AAPT2 need x86_64 emulation via QEMU.
          if [ "$ARCH" = "aarch64" ] || [ "$ARCH" = "arm64" ]; then
            echo "Setting up ARM64 Flutter environment & QEMU binfmt emulation..."
            apt-get update -qq && apt-get install -y -qq qemu-user-static binfmt-support libc6-amd64-cross libstdc++6-amd64-cross gcc

            # Setup x86_64 dynamic libraries & prefix for QEMU emulation
            mkdir -p /etc/qemu-binfmt
            ln -sf /usr/x86_64-linux-gnu /etc/qemu-binfmt/x86_64
            mkdir -p /lib64 /usr/lib64
            ln -sf /usr/x86_64-linux-gnu/lib/ld-linux-x86-64.so.2 /lib64/ld-linux-x86-64.so.2
            ln -sf /usr/x86_64-linux-gnu/lib/* /lib64/ 2>/dev/null || true
            ln -sf /usr/x86_64-linux-gnu/lib/* /usr/lib64/ 2>/dev/null || true

            export QEMU_LD_PREFIX=/usr/x86_64-linux-gnu
            echo "QEMU_LD_PREFIX=/usr/x86_64-linux-gnu" >> "$GITHUB_ENV"

            # Create transparent execve/posix_spawn interceptor to route ALL x86_64 binaries to QEMU
            cat << 'EOF' > /tmp/qemu_intercept.c
#define _GNU_SOURCE
#include <stdio.h>
#include <stdlib.h>
#include <string.h>
#include <unistd.h>
#include <dlfcn.h>
#include <fcntl.h>
#include <stdint.h>
#include <spawn.h>

static int is_x86_64_elf(const char *path) {
    if (!path) return 0;
    int fd = open(path, O_RDONLY);
    if (fd < 0) return 0;
    unsigned char header[20];
    ssize_t n = read(fd, header, sizeof(header));
    close(fd);
    if (n < 20) return 0;
    if (header[0] != 0x7f || header[1] != 'E' || header[2] != 'L' || header[3] != 'F') return 0;
    if (header[4] != 2 || header[5] != 1) return 0;
    uint16_t machine = (uint16_t)(header[18] | (header[19] << 8));
    return machine == 62;
}

static char **build_qemu_argv(const char *pathname, char *const argv[]) {
    int argc = 0;
    while (argv && argv[argc]) argc++;
    char **new_argv = malloc((argc + 4) * sizeof(char *));
    new_argv[0] = "/usr/bin/qemu-x86_64-static";
    new_argv[1] = "-L";
    new_argv[2] = "/usr/x86_64-linux-gnu";
    new_argv[3] = (char *)pathname;
    for (int i = 1; i < argc; i++) {
        new_argv[i + 3] = argv[i];
    }
    new_argv[argc + 3] = NULL;
    return new_argv;
}

int execve(const char *pathname, char *const argv[], char *const envp[]) {
    static int (*real_execve)(const char *, char *const [], char *const []) = NULL;
    if (!real_execve) real_execve = dlsym(RTLD_NEXT, "execve");
    if (pathname && is_x86_64_elf(pathname)) {
        char **new_argv = build_qemu_argv(pathname, argv);
        return real_execve("/usr/bin/qemu-x86_64-static", new_argv, envp);
    }
    return real_execve(pathname, argv, envp);
}

int execv(const char *pathname, char *const argv[]) {
    extern char **environ;
    return execve(pathname, argv, environ);
}

int execvp(const char *file, char *const argv[]) {
    extern char **environ;
    return execve(file, argv, environ);
}

int execvpe(const char *file, char *const argv[], char *const envp[]) {
    return execve(file, argv, envp);
}

int posix_spawn(pid_t *pid, const char *path,
                const posix_spawn_file_actions_t *file_actions,
                const posix_spawnattr_t *attrp,
                char *const argv[], char *const envp[]) {
    static int (*real_posix_spawn)(pid_t *, const char *, const posix_spawn_file_actions_t *,
                                  const posix_spawnattr_t *, char *const [], char *const []) = NULL;
    if (!real_posix_spawn) real_posix_spawn = dlsym(RTLD_NEXT, "posix_spawn");
    if (path && is_x86_64_elf(path)) {
        char **new_argv = build_qemu_argv(path, argv);
        return real_posix_spawn(pid, "/usr/bin/qemu-x86_64-static", file_actions, attrp, new_argv, envp);
    }
    return real_posix_spawn(pid, path, file_actions, attrp, argv, envp);
}

int posix_spawnp(pid_t *pid, const char *file,
                 const posix_spawn_file_actions_t *file_actions,
                 const posix_spawnattr_t *attrp,
                 char *const argv[], char *const envp[]) {
    return posix_spawn(pid, file, file_actions, attrp, argv, envp);
}
EOF
            gcc -O2 -shared -fPIC -o /usr/local/lib/libqemu_intercept.so /tmp/qemu_intercept.c -ldl
            echo "/usr/local/lib/libqemu_intercept.so" > /etc/ld.so.preload
            echo "Installed transparent QEMU execution interceptor into /etc/ld.so.preload"

            QEMU_BIN=$(command -v qemu-x86_64-static || command -v qemu-x86_64)

            # Dummy fallbacks for FEX binaries/sockets
            for fex in /usr/bin/FEXInterpreter /usr/bin/FEX /usr/local/bin/FEXInterpreter /usr/bin/FEXServer /usr/local/bin/FEXServer; do
              printf '#!/bin/sh\nexit 0\n' > "$fex"
              chmod +x "$fex" 2>/dev/null || true
            done

            flutter precache --android
            for dir in /sdks/flutter/bin/cache/artifacts/engine/android-*; do
              if [ -d "$dir/linux-x64" ]; then
                mkdir -p "$dir/linux-arm64"
                printf '#!/bin/sh\nSCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"\nexec %s -L /usr/x86_64-linux-gnu "$SCRIPT_DIR/../linux-x64/gen_snapshot" "$@"\n' "$QEMU_BIN" > "$dir/linux-arm64/gen_snapshot"
                chmod +x "$dir/linux-arm64/gen_snapshot"
                echo "Configured gen_snapshot wrapper for $(basename "$dir")"
              fi
            done
          fi

      - name: Checkout Repository
        uses: actions/checkout@v4

      - name: Make Gradlew Executable
        run: |
          if [ -f android/gradlew ]; then
            chmod +x android/gradlew
          fi

      - name: Inspect Build Environment
        run: |
          flutter --version
          java -version
          node --version

      - name: Fetch Flutter Dependencies
        run: flutter pub get

      - name: Run Code Analysis & Tests
        run: |
          flutter analyze
          flutter test

      - name: Build Universal Release APK
        run: |
          ARCH=$(uname -m)
          if [ "$ARCH" = "aarch64" ] || [ "$ARCH" = "arm64" ]; then
            (
              while true; do
                for aapt2_bin in $(find /root/.gradle /opt/android-sdk-linux -type f -name "aapt2" 2>/dev/null); do
                  if [ -f "$aapt2_bin" ] && ! [ -f "${aapt2_bin}.orig" ]; then
                    if head -c 4 "$aapt2_bin" 2>/dev/null | grep -q 'ELF'; then
                      echo "Wrapping newly extracted AAPT2: $aapt2_bin"
                      mv "$aapt2_bin" "${aapt2_bin}.orig"
                      printf '#!/bin/sh\nexec /usr/bin/qemu-x86_64-static -L /usr/x86_64-linux-gnu "$0.orig" "$@"\n' > "$aapt2_bin"
                      chmod +x "$aapt2_bin" "${aapt2_bin}.orig"
                    fi
                  fi
                done
                sleep 0.5
              done
            ) &
            AAPT2_WATCHER_PID=$!
            echo "AAPT2 Watcher started with PID $AAPT2_WATCHER_PID"
          fi

          flutter build apk --release

          if [ -n "$AAPT2_WATCHER_PID" ]; then
            kill "$AAPT2_WATCHER_PID" 2>/dev/null || true
          fi

      - name: Build Split-per-ABI Release APKs
        run: |
          ARCH=$(uname -m)
          if [ "$ARCH" = "aarch64" ] || [ "$ARCH" = "arm64" ]; then
            (
              while true; do
                for aapt2_bin in $(find /root/.gradle /opt/android-sdk-linux -type f -name "aapt2" 2>/dev/null); do
                  if [ -f "$aapt2_bin" ] && ! [ -f "${aapt2_bin}.orig" ]; then
                    if head -c 4 "$aapt2_bin" 2>/dev/null | grep -q 'ELF'; then
                      echo "Wrapping newly extracted AAPT2: $aapt2_bin"
                      mv "$aapt2_bin" "${aapt2_bin}.orig"
                      printf '#!/bin/sh\nexec /usr/bin/qemu-x86_64-static -L /usr/x86_64-linux-gnu "$0.orig" "$@"\n' > "$aapt2_bin"
                      chmod +x "$aapt2_bin" "${aapt2_bin}.orig"
                    fi
                  fi
                done
                sleep 0.5
              done
            ) &
            AAPT2_WATCHER_PID=$!
          fi

          flutter build apk --release --split-per-abi

          if [ -n "$AAPT2_WATCHER_PID" ]; then
            kill "$AAPT2_WATCHER_PID" 2>/dev/null || true
          fi

      - name: Organize Artifacts
        run: |
          mkdir -p release-apks
          # Copy universal APK
          if [ -f build/app/outputs/flutter-apk/app-release.apk ]; then
            cp build/app/outputs/flutter-apk/app-release.apk release-apks/oggauer-gemeindetrommler-universal-release.apk
          fi
          # Copy split APKs
          if [ -f build/app/outputs/flutter-apk/app-arm64-v8a-release.apk ]; then
            cp build/app/outputs/flutter-apk/app-arm64-v8a-release.apk release-apks/oggauer-gemeindetrommler-arm64-v8a.apk
          fi
          if [ -f build/app/outputs/flutter-apk/app-armeabi-v7a-release.apk ]; then
            cp build/app/outputs/flutter-apk/app-armeabi-v7a-release.apk release-apks/oggauer-gemeindetrommler-armeabi-v7a.apk
          fi
          if [ -f build/app/outputs/flutter-apk/app-x86_64-release.apk ]; then
            cp build/app/outputs/flutter-apk/app-x86_64-release.apk release-apks/oggauer-gemeindetrommler-x86_64.apk
          fi
          echo "=== Generated APK Artifacts ==="
          ls -lah release-apks/

      - name: Upload APKs to Gitea Artifacts
        uses: actions/upload-artifact@v4
        with:
          name: oggauer-gemeindetrommler-apks
          path: release-apks/*.apk
          retention-days: 30