plugin_release.yml

name: Plugin Release

on:
  workflow_dispatch:
    inputs:
      stable_release:
        description: "Publish stable release version"
        default: false
        type: boolean
  push:
    tags:
      - "release/v*"

concurrency:
  group: plugin-release-${{ github.ref_name }}
  cancel-in-progress: false

permissions:
  contents: write

defaults:
  run:
    shell: bash

jobs:
  engine:
    uses: ./.github/workflows/agent_engine_build.yml

  gui:
    uses: ./.github/workflows/agent_gui_build.yml

  engine-release:
    name: Engine release
    if: startsWith(github.ref, 'refs/tags/release/v')
    needs: [engine]
    runs-on: ubuntu-latest
    permissions:
      actions: read
      contents: write
    steps:
      - name: Checkout repository
        uses: actions/checkout@v4
        with:
          fetch-depth: 0

      - name: Download engine artifacts
        uses: actions/download-artifact@v4
        with:
          pattern: dist-*
          path: engine-dist

      - name: Package engine release assets
        id: engine-assets
        run: |
          version="${GITHUB_REF_NAME#release/v}"
          bash tools/dev/package_engine_release_assets.sh \
            --version "$version" \
            --input-dir engine-dist \
            --output-dir engine-release-assets
          echo "version=$version" >> "$GITHUB_OUTPUT"

      - name: Resolve release notes
        id: release_notes
        run: |
          notes_path="docs/release-notes/v${{ steps.engine-assets.outputs.version }}.md"
          if [[ -f "$notes_path" ]]; then
            echo "found=true" >> "$GITHUB_OUTPUT"
            echo "body_path=$notes_path" >> "$GITHUB_OUTPUT"
          else
            echo "found=false" >> "$GITHUB_OUTPUT"
            echo "Release notes file $notes_path not found; using generated notes."
          fi

      - name: Publish engine release
        if: ${{ steps.release_notes.outputs.found == 'true' }}
        uses: softprops/action-gh-release@v2
        with:
          tag_name: engine/v${{ steps.engine-assets.outputs.version }}
          name: Engine v${{ steps.engine-assets.outputs.version }}
          body_path: ${{ steps.release_notes.outputs.body_path }}
          prerelease: false
          make_latest: true
          overwrite_files: true
          fail_on_unmatched_files: true
          files: |
            engine-release-assets/*
        env:
          GITHUB_TOKEN: ${{ github.token }}

      - name: Publish engine release with generated notes
        if: ${{ steps.release_notes.outputs.found != 'true' }}
        uses: softprops/action-gh-release@v2
        with:
          tag_name: engine/v${{ steps.engine-assets.outputs.version }}
          name: Engine v${{ steps.engine-assets.outputs.version }}
          generate_release_notes: true
          prerelease: false
          make_latest: true
          overwrite_files: true
          fail_on_unmatched_files: true
          files: |
            engine-release-assets/*
        env:
          GITHUB_TOKEN: ${{ github.token }}

  intellij:
    name: JetBrains plugin
    # Wait for the engine release to publish FIRST so a freshly-installed plugin can always
    # download its pinned engine/v{version} (otherwise early installers hit
    # "engine release unavailable"). engine-release is skipped on non-release dispatch (EAP),
    # in which case we still run.
    needs: [gui, engine-release]
    if: ${{ always() && needs.gui.result == 'success' && (needs.engine-release.result == 'success' || needs.engine-release.result == 'skipped') }}
    runs-on: ubuntu-latest
    outputs:
      version: ${{ steps.setupvars.outputs.plugin_version }}
    steps:
      - name: Maximize build space
        run: |
          sudo rm -rf /usr/share/dotnet
          sudo rm -rf /usr/local/lib/android
          sudo rm -rf /opt/ghc

      - name: Checkout repository
        uses: actions/checkout@v4
        with:
          fetch-depth: 0

      - name: Setup Java
        uses: actions/setup-java@v4
        with:
          distribution: zulu
          java-version: 17

      - name: Set release channel and check tag version
        id: setupvars
        working-directory: plugins/intellij
        run: |
          if [[ "${{ github.event_name }}" == "push" || "${{ inputs.stable_release }}" == "true" ]]; then
            echo "PUBLISH_CHANNEL=default" >> "$GITHUB_ENV"
            echo "PUBLISH_EAP=0" >> "$GITHUB_ENV"
          else
            echo "PUBLISH_CHANNEL=eap" >> "$GITHUB_ENV"
            echo "PUBLISH_EAP=1" >> "$GITHUB_ENV"
          fi
          PLUGIN_VERSION="$(./gradlew properties -q | awk '/^version:/ {print $2}')"
          if [[ "${{ github.ref }}" == refs/tags/release/v* ]]; then
            TAG_VERSION="${GITHUB_REF_NAME#release/v}"
            if [[ "$TAG_VERSION" != "$PLUGIN_VERSION" ]]; then
              echo "release tag version $TAG_VERSION does not match JetBrains plugin version $PLUGIN_VERSION"
              exit 1
            fi
          fi
          echo "plugin_version=${PLUGIN_VERSION}" >> "$GITHUB_OUTPUT"

      - name: Download GUI package
        uses: actions/download-artifact@v4
        with:
          pattern: lts-refact-chat-js-*.tgz
          path: plugins/intellij/chat_package
          merge-multiple: true

      - name: Prepare GUI package
        working-directory: plugins/intellij
        run: |
          mkdir -p ./chat_package_fixed
          find ./chat_package -name "*.tgz" -type f -exec tar -xzf {} -C ./chat_package_fixed/ \;
          rm -rf ./src/main/resources/webview/dist
          mv ./chat_package_fixed/package/dist ./src/main/resources/webview/dist
          rm -rf ./chat_package ./chat_package_fixed

      - name: Export properties
        id: properties
        working-directory: plugins/intellij
        run: |
          echo "pluginVerifierHomeDir=~/.pluginVerifier" >> $GITHUB_OUTPUT
          ./gradlew properties --console=plain -q
          ./gradlew printProductsReleases

      - name: Run tests
        working-directory: plugins/intellij
        run: ./gradlew check

      - name: Collect test results
        if: ${{ failure() }}
        uses: actions/upload-artifact@v4
        with:
          name: intellij-tests-result
          path: plugins/intellij/build/reports/tests

      - name: Setup Plugin Verifier IDEs cache
        uses: actions/cache@v4
        with:
          path: ${{ steps.properties.outputs.pluginVerifierHomeDir }}/ides
          key: plugin-verifier-${{ hashFiles('plugins/intellij/build/listProductsReleases.txt') }}

      - name: Run plugin verification tasks
        working-directory: plugins/intellij
        run: |
          for attempt in 1 2; do
            if ./gradlew verifyPlugin -Dplugin.verifier.home.dir=${{ steps.properties.outputs.pluginVerifierHomeDir }}; then
              exit 0
            fi
            if [[ "$attempt" == "2" ]]; then
              exit 1
            fi
            echo "Plugin verifier failed, retrying once after cleaning verifier reports"
            rm -rf build/reports/pluginVerifier
            sleep 10
          done

      - name: Collect plugin verifier result
        if: ${{ always() }}
        uses: actions/upload-artifact@v4
        with:
          name: intellij-pluginVerifier-result
          path: plugins/intellij/build/reports/pluginVerifier

      - name: Prepare plugin artifact
        id: artifact
        working-directory: plugins/intellij
        run: |
          cd build/distributions
          FILENAME=$(ls *.zip)
          unzip "$FILENAME" -d content
          echo "filename=${FILENAME:0:-4}" >> $GITHUB_OUTPUT

      - name: Upload JetBrains plugin artifact
        uses: actions/upload-artifact@v4
        with:
          name: ${{ steps.artifact.outputs.filename }}
          path: plugins/intellij/build/distributions/content/*/*

      - name: Publish JetBrains plugin
        working-directory: plugins/intellij
        env:
          PUBLISH_TOKEN: ${{ secrets.PUBLISH_TOKEN }}
          PUBLISH_CHANNEL: ${{ env.PUBLISH_CHANNEL }}
          PUBLISH_EAP: ${{ env.PUBLISH_EAP }}
          CERTIFICATE_CHAIN: ${{ secrets.CERTIFICATE_CHAIN }}
          PRIVATE_KEY: ${{ secrets.PRIVATE_KEY }}
          PRIVATE_KEY_PASSWORD: ${{ secrets.PRIVATE_KEY_PASSWORD }}
        run: |
          set +e
          ./gradlew publishPlugin 2>&1 | tee publishPlugin.log
          status=${PIPESTATUS[0]}
          set -e
          if [[ "$status" -eq 0 ]]; then
            exit 0
          fi
          if grep -q "plugin already contains version" publishPlugin.log; then
            echo "JetBrains Marketplace already contains version ${{ steps.setupvars.outputs.plugin_version }}; treating publish as successful for an idempotent release rerun."
            exit 0
          fi
          exit "$status"

      - name: Resolve release notes
        if: startsWith(github.ref, 'refs/tags/release/v')
        id: release_notes
        run: |
          version="${{ steps.setupvars.outputs.plugin_version }}"
          notes_path="docs/release-notes/v${version}.md"
          echo "version=$version" >> "$GITHUB_OUTPUT"
          if [[ -f "$notes_path" ]]; then
            echo "found=true" >> "$GITHUB_OUTPUT"
            echo "body_path=$notes_path" >> "$GITHUB_OUTPUT"
          else
            echo "found=false" >> "$GITHUB_OUTPUT"
            echo "Release notes file $notes_path not found; using generated notes."
          fi

      - name: Upload JetBrains plugin to release
        if: startsWith(github.ref, 'refs/tags/release/v') && steps.release_notes.outputs.found == 'true'
        uses: softprops/action-gh-release@v2
        with:
          tag_name: ${{ github.ref_name }}
          name: v${{ steps.release_notes.outputs.version }}
          body_path: ${{ steps.release_notes.outputs.body_path }}
          overwrite_files: true
          fail_on_unmatched_files: true
          files: plugins/intellij/build/distributions/*.zip
        env:
          GITHUB_TOKEN: ${{ github.token }}

      - name: Upload JetBrains plugin to release with generated notes
        if: startsWith(github.ref, 'refs/tags/release/v') && steps.release_notes.outputs.found != 'true'
        uses: softprops/action-gh-release@v2
        with:
          tag_name: ${{ github.ref_name }}
          name: v${{ steps.release_notes.outputs.version }}
          generate_release_notes: true
          overwrite_files: true
          fail_on_unmatched_files: true
          files: plugins/intellij/build/distributions/*.zip
        env:
          GITHUB_TOKEN: ${{ github.token }}

  vscode:
    name: VS Code plugin
    # Wait for the engine release to publish FIRST so a freshly-installed plugin can always
    # download its pinned engine/v{version} (otherwise early installers hit
    # "engine release unavailable"). engine-release is skipped on non-release dispatch (EAP),
    # in which case we still run.
    needs: [gui, engine-release]
    if: ${{ always() && needs.gui.result == 'success' && (needs.engine-release.result == 'success' || needs.engine-release.result == 'skipped') }}
    runs-on: ubuntu-latest
    defaults:
      run:
        working-directory: plugins/vscode
    steps:
      - name: Checkout repository
        uses: actions/checkout@v4
        with:
          fetch-depth: 0

      - name: Setup Node.js
        uses: actions/setup-node@v4
        with:
          node-version: 20

      - name: Download GUI package
        uses: actions/download-artifact@v4
        with:
          pattern: lts-refact-chat-js-*.tgz
          path: plugins/vscode/chat_package
          merge-multiple: true

      - name: Prepare GUI package
        run: |
          mkdir -p ./chat_package_fixed
          find ./chat_package -name "*.tgz" -type f -exec cp {} ./chat_package_fixed/ \;
          ls -la ./chat_package_fixed

      - name: Install dependencies and VSCE
        run: |
          npm ci --ignore-scripts
          npm install ./chat_package_fixed/*.tgz --no-save --ignore-scripts
          REFACT_CHAT_JS_VERSION=$(node -p "require('./node_modules/refact-chat-js/package.json').version")
          npm pkg set "dependencies.refact-chat-js=${REFACT_CHAT_JS_VERSION}"
          npm install -g @vscode/vsce
          rm -rf ./chat_package ./chat_package_fixed

      - name: Check release tag version
        if: startsWith(github.ref, 'refs/tags/release/v')
        run: |
          TAG_VERSION="${GITHUB_REF_NAME#release/v}"
          PACKAGE_VERSION="$(node -p "require('./package.json').version")"
          if [[ "$TAG_VERSION" != "$PACKAGE_VERSION" ]]; then
            echo "release tag version $TAG_VERSION does not match VS Code package version $PACKAGE_VERSION"
            exit 1
          fi

      - name: Package VS Code extension
        run: |
          if [[ "${{ github.event_name }}" != "push" && "${{ inputs.stable_release }}" != "true" ]]; then
            export PRERELEASE=--pre-release
          fi
          echo "PRERELEASE=${PRERELEASE}"
          vsce package ${PRERELEASE}

      - name: Publish VS Code extension
        run: |
          if [[ "${{ github.event_name }}" != "push" && "${{ inputs.stable_release }}" != "true" ]]; then
            export PRERELEASE=--pre-release
          fi
          echo "PRERELEASE=${PRERELEASE}"
          vsce publish --skip-duplicate --pat ${{ secrets.VSCE_PAT }} ${PRERELEASE} --packagePath *.vsix

      - name: Upload VS Code package
        uses: actions/upload-artifact@v4
        with:
          name: vscode-plugin
          path: plugins/vscode/*.vsix

      - name: Resolve release notes
        if: startsWith(github.ref, 'refs/tags/release/v')
        id: release_notes
        run: |
          version="${GITHUB_REF_NAME#release/v}"
          notes_path="docs/release-notes/v${version}.md"
          echo "version=$version" >> "$GITHUB_OUTPUT"
          if [[ -f "$GITHUB_WORKSPACE/$notes_path" ]]; then
            echo "found=true" >> "$GITHUB_OUTPUT"
            echo "body_path=$notes_path" >> "$GITHUB_OUTPUT"
          else
            echo "found=false" >> "$GITHUB_OUTPUT"
            echo "Release notes file $notes_path not found; using generated notes."
          fi

      - name: Upload VS Code package to release
        if: startsWith(github.ref, 'refs/tags/release/v') && steps.release_notes.outputs.found == 'true'
        uses: softprops/action-gh-release@v2
        with:
          tag_name: ${{ github.ref_name }}
          name: v${{ steps.release_notes.outputs.version }}
          body_path: ${{ steps.release_notes.outputs.body_path }}
          overwrite_files: true
          fail_on_unmatched_files: true
          files: plugins/vscode/*.vsix
        env:
          GITHUB_TOKEN: ${{ github.token }}

      - name: Upload VS Code package to release with generated notes
        if: startsWith(github.ref, 'refs/tags/release/v') && steps.release_notes.outputs.found != 'true'
        uses: softprops/action-gh-release@v2
        with:
          tag_name: ${{ github.ref_name }}
          name: v${{ steps.release_notes.outputs.version }}
          generate_release_notes: true
          overwrite_files: true
          fail_on_unmatched_files: true
          files: plugins/vscode/*.vsix
        env:
          GITHUB_TOKEN: ${{ github.token }}