ode/.github/workflows/formulus-android.yml at dev · OpenDataEnsemble/ode · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
name: Formulus Android & Formplayer Assets

on:
  push:
    branches:
      - main
      - dev
    paths:
      - 'formulus/**'
      - 'formulus-formplayer/**'
      - 'packages/tokens/**'
      - 'packages/components/**'
      - 'packages/observation-query/**'
      - '.github/workflows/formulus-android.yml'
  pull_request:
    paths:
      - 'formulus/**'
      - 'formulus-formplayer/**'
      - 'packages/tokens/**'
      - 'packages/components/**'
      - 'packages/observation-query/**'
      - '.github/workflows/formulus-android.yml'
  release:
    types: [published]

concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

env:
  NODE_VERSION: '24'

jobs:
  build-formplayer-assets:
    name: Build Formplayer Assets
    runs-on: ubuntu-latest
    permissions:
      contents: read

    steps:
      - name: Checkout repository
        uses: actions/checkout@v4

      - name: Setup pnpm
        uses: pnpm/action-setup@v4
        with:
          version: 10.33.2

      - name: Set up Node.js for assets
        uses: actions/setup-node@v4
        with:
          node-version: ${{ env.NODE_VERSION }}
          cache: pnpm
          cache-dependency-path: formulus-formplayer/pnpm-lock.yaml

      - name: Install and build @ode/tokens
        working-directory: packages/tokens
        run: |
          pnpm install --frozen-lockfile
          pnpm run build

      - name: Install formplayer dependencies
        working-directory: formulus-formplayer
        run: pnpm install --frozen-lockfile

      - name: Build and bundle formplayer
        working-directory: formulus-formplayer
        run: pnpm run build:copy

      - name: Upload formplayer assets artifact
        uses: actions/upload-artifact@v6
        with:
          name: formplayer-assets
          path: formulus/android/app/src/main/assets/formplayer_dist
          retention-days: 7

  build-android:
    name: Build Formulus Android
    runs-on: ubuntu-latest
    needs: build-formplayer-assets
    permissions:
      contents: write

    steps:
      - name: Checkout repository
        uses: actions/checkout@v4

      - name: Download formplayer assets artifact
        uses: actions/download-artifact@v7
        with:
          name: formplayer-assets
          path: formulus/android/app/src/main/assets/formplayer_dist

      - name: Setup pnpm
        uses: pnpm/action-setup@v4
        with:
          version: 10.33.2

      - name: Set up Node.js
        uses: actions/setup-node@v4
        with:
          node-version: ${{ env.NODE_VERSION }}
          cache: pnpm
          cache-dependency-path: formulus/pnpm-lock.yaml

      - name: Install and build @ode/tokens
        working-directory: packages/tokens
        run: |
          pnpm install --frozen-lockfile
          pnpm run build

      - name: Install @ode/components dependencies
        working-directory: packages/components
        run: pnpm install --frozen-lockfile

      - name: Install dependencies (formulus)
        working-directory: formulus
        run: pnpm install --frozen-lockfile

      - name: Vendor Notifee Android core (source build; dir is gitignored)
        working-directory: formulus
        run: pnpm run vendor:notifee

      - name: Apply FOSS Android patches (match F-Droid init)
        if: github.event_name != 'pull_request'
        working-directory: formulus
        run: pnpm run patch:android-foss

      - name: Generate injection script (match F-Droid init)
        if: github.event_name != 'pull_request'
        working-directory: formulus
        run: pnpm run generate

      - name: Set up Java
        uses: actions/setup-java@v4
        with:
          distribution: 'temurin'
          java-version: '17'
          cache: 'gradle'

      - name: Make Gradle wrapper executable
        working-directory: formulus/android
        run: chmod +x ./gradlew

      - name: Prepare Android signing (non-PR)
        if: github.event_name != 'pull_request'
        env:
          FORMULUS_RELEASE_KEYSTORE_B64: ${{ secrets.FORMULUS_RELEASE_KEYSTORE_B64 }}
          FORMULUS_RELEASE_STORE_PASSWORD: ${{ secrets.FORMULUS_RELEASE_STORE_PASSWORD }}
          FORMULUS_RELEASE_KEY_ALIAS: ${{ secrets.FORMULUS_RELEASE_KEY_ALIAS }}
          FORMULUS_RELEASE_KEY_PASSWORD: ${{ secrets.FORMULUS_RELEASE_KEY_PASSWORD }}
        run: |
          set -e
          mkdir -p formulus/android/keystores

          if [ -z "$FORMULUS_RELEASE_KEYSTORE_B64" ]; then
            echo "FORMULUS_RELEASE_KEYSTORE_B64 is not set. Failing to avoid unsigned release builds."
            exit 1
          fi

          echo "$FORMULUS_RELEASE_KEYSTORE_B64" | base64 -d > formulus/android/keystores/formulus-signing.jks

          # Generate local.properties for release signing
          echo "FORMULUS_RELEASE_STORE_FILE=keystores/formulus-signing.jks" > formulus/android/local.properties
          echo "FORMULUS_RELEASE_STORE_PASSWORD=${FORMULUS_RELEASE_STORE_PASSWORD}" >> formulus/android/local.properties
          echo "FORMULUS_RELEASE_KEY_ALIAS=${FORMULUS_RELEASE_KEY_ALIAS}" >> formulus/android/local.properties
          echo "FORMULUS_RELEASE_KEY_PASSWORD=${FORMULUS_RELEASE_KEY_PASSWORD}" >> formulus/android/local.properties

      - name: Build debug APK (PR)
        if: github.event_name == 'pull_request'
        working-directory: formulus/android
        run: ./gradlew assembleDebug --no-daemon

      - name: Build release APK (main/dev/release)
        if: github.event_name != 'pull_request'
        working-directory: formulus/android
        run: ./gradlew assembleRelease --no-daemon

      - name: Build release AAB for Play Store (main/dev/release)
        if: github.event_name != 'pull_request'
        working-directory: formulus/android
        run: ./gradlew bundleRelease --no-daemon

      - name: Upload APK artifact
        uses: actions/upload-artifact@v6
        with:
          name: formulus-android-apk-${{ github.event_name }}-${{ github.run_id }}
          path: |
            formulus/android/app/build/outputs/apk/**/**/*.apk

      - name: Upload AAB artifact
        if: github.event_name != 'pull_request'
        uses: actions/upload-artifact@v6
        with:
          name: formulus-android-aab-${{ github.event_name }}-${{ github.run_id }}
          path: |
            formulus/android/app/build/outputs/bundle/release/*.aab

      - name: Upload APK to GitHub Release
        if: github.event_name == 'release'
        uses: softprops/action-gh-release@v2
        with:
          files: |
            formulus/android/app/build/outputs/apk/**/**/*.apk
            formulus/android/app/build/outputs/bundle/release/*.aab
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}