name: Linux desktop release

# Manual until a native Linux runner is registered. The current 0.5.0
# packages are built locally using the identical gates documented below.
on:
  workflow_dispatch:
    inputs:
      tag:
        description: Existing stable version tag to package (for example v0.5.0)
        required: true
        type: string

permissions:
  contents: read
  releases: write

concurrency:
  group: gitea-release-${{ inputs.tag }}
  cancel-in-progress: false

jobs:
  linux:
    runs-on: ubuntu-24.04
    timeout-minutes: 60
    env:
      NEXT_TELEMETRY_DISABLED: "1"
    steps:
      - uses: https://github.com/actions/checkout@v7
        with:
          ref: ${{ inputs.tag }}
          persist-credentials: false
      - uses: https://github.com/actions/setup-node@v7
        with:
          node-version: "26"
          cache: npm
      - name: Tag must match package.json
        env:
          RELEASE_TAG: ${{ inputs.tag }}
        run: node --input-type=module -e 'import fs from "node:fs"; if (process.env.RELEASE_TAG !== `v${JSON.parse(fs.readFileSync("package.json")).version}`) process.exit(1)'
      - run: npm ci
      - run: npm run typecheck
      - run: npm test
      - run: npm run lint
      - name: Native PDF and SVG renderers
        run: npx electron --import tsx --test tests/pdf-native-render.test.ts tests/pdf-ops.test.ts tests/svg-native-render.test.ts tests/browser-service.test.ts
        env:
          NODE_ENV: test
          ELECTRON_RUN_AS_NODE: "1"
      - name: Build, smoke, package, and verify Linux installers
        run: npm run desktop:release:linux
      - name: Verify the packaged provider and demo runtimes
        run: |
          node scripts/smoke-provider-runtime.mjs --standalone dist/linux-unpacked/resources/server/standalone
          node scripts/smoke-provider-runtime.mjs --standalone dist/linux-unpacked/resources/server/standalone --runtime dist/linux-unpacked/learnharness
          xvfb-run -a node scripts/smoke-demo-runtime.mjs --standalone dist/linux-unpacked/resources/server/standalone --runtime dist/linux-unpacked/learnharness --browser
      - name: Upload and verify the draft (never publish)
        run: node scripts/gitea-release.mjs upload dist
        env:
          GITEA_TOKEN: ${{ secrets.GITEA_TOKEN }}