eagle0/.github/workflows/unity_build.yml

name: Unity Build

on:
  push:
    branches: [ "main" ]
    paths:
      - ".github/workflows/unity_build.yml"
      - "src/main/csharp/net/eagle0/clients/unity/**"
      - "src/main/protobuf/net/eagle0/common/**"
      - "src/main/protobuf/net/eagle0/shardok/**"
      - "src/main/protobuf/net/eagle0/eagle/api/**"
      - "src/main/protobuf/net/eagle0/eagle/common/**"
      - "src/main/protobuf/net/eagle0/eagle/views/**"
      - "scripts/build_protos.sh"
      - "scripts/build_plugins.sh"
      - "scripts/build_windows_plugin.sh"
      - "ci/github_actions/build_unity.sh"
      - "ci/github_actions/restore_library.sh"
      - "ci/github_actions/persist_library.sh"
      - "ci/github_actions/upload_addressables.sh"
      - "ci/github_actions/ensure_unity_installed.sh"
      - "src/main/csharp/net/eagle0/clients/unity/eagle0/ProjectSettings/ProjectVersion.txt"
      - "MODULE.bazel"
      - "WORKSPACE"
  workflow_dispatch:
  pull_request:
    paths:
      - ".github/workflows/unity_build.yml"
      - "src/main/csharp/net/eagle0/clients/unity/**"
      - "src/main/protobuf/net/eagle0/common/**"
      - "src/main/protobuf/net/eagle0/shardok/**"
      - "src/main/protobuf/net/eagle0/eagle/api/**"
      - "src/main/protobuf/net/eagle0/eagle/common/**"
      - "src/main/protobuf/net/eagle0/eagle/views/**"
      - "scripts/build_protos.sh"
      - "scripts/build_plugins.sh"
      - "scripts/build_windows_plugin.sh"
      - "ci/github_actions/build_unity.sh"
      - "ci/github_actions/restore_library.sh"
      - "ci/github_actions/persist_library.sh"
      - "ci/github_actions/upload_addressables.sh"
      - "ci/github_actions/ensure_unity_installed.sh"
      - "src/main/csharp/net/eagle0/clients/unity/eagle0/ProjectSettings/ProjectVersion.txt"
      - "MODULE.bazel"
      - "WORKSPACE"

permissions:
  contents: read

env:
  # Runner-specific build directory to allow parallel builds on multiple runners
  EAGLE0_BUILD_DIR: /tmp/eagle0-${{ github.run_id }}

jobs:
  windows-unity:
    runs-on: [self-hosted, macOS, unity-windows]

    steps:
      - name: Prune stale PR refs
        run: |
          # Self-hosted runners persist .git between runs. When a PR is updated,
          # old local refs (refs/remotes/pull/*/merge) may point to commits whose
          # objects were never fetched or have been pruned. Remove these stale refs
          # before checkout to prevent "missing object" errors.
          if [ -d ".git" ]; then
            echo "Pruning stale PR refs..."
            git for-each-ref --format='%(refname)' refs/remotes/pull/ 2>/dev/null | \
              xargs -r git update-ref -d 2>/dev/null || true
          fi
      - uses: actions/checkout@v4
        with:
          lfs: false  # Fetch LFS after checkout to avoid stale ref issues
          clean: true  # Remove untracked files from previous builds

      - name: Fetch LFS files
        run: |
          git lfs install
          git lfs pull
      - name: Ensure Unity version installed
        run: ./ci/github_actions/ensure_unity_installed.sh windows
      - name: Restore Library/
        env:
          UNITY_CACHE_PLATFORM: windows
        run: ./ci/github_actions/restore_library.sh
      - name: Build Windows unity
        run: ./ci/github_actions/build_unity.sh "${{ env.EAGLE0_BUILD_DIR }}/eagle0WIN"
      - name: Persist Library/
        if: success()
        env:
          UNITY_CACHE_PLATFORM: windows
        run: ./ci/github_actions/persist_library.sh
      - name: Upload Addressables to CDN
        if: success() && github.ref == 'refs/heads/main' && github.event_name != 'pull_request'
        env:
          ACCESS_KEY_ID: ${{ secrets.ACCESS_KEY_ID }}
          SECRET_KEY: ${{ secrets.SECRET_KEY }}
        run: ./ci/github_actions/upload_addressables.sh StandaloneWindows64
      - name: Deploy Windows unity
        if: success() && github.ref == 'refs/heads/main' && github.event_name == 'push'
        env:
          ACCESS_KEY_ID: ${{ secrets.ACCESS_KEY_ID }}
          SECRET_KEY: ${{ secrets.SECRET_KEY }}
        run: bazel run //src/main/go/net/eagle0/build/unity3d_windows_build_handler:unity3d_windows_build_handler -- "${{ env.EAGLE0_BUILD_DIR }}/eagle0WIN" "/tmp/unity_manifest.txt"

      - name: Update unified manifest
        if: success() && github.ref == 'refs/heads/main' && github.event_name == 'push'
        env:
          ACCESS_KEY_ID: ${{ secrets.ACCESS_KEY_ID }}
          SECRET_KEY: ${{ secrets.SECRET_KEY }}
          MANIFEST_SIGNING_KEY: ${{ secrets.MANIFEST_SIGNING_KEY }}
        run: |
          # Write signing key to temp file (if available)
          SIGNING_ARGS=""
          if [ -n "$MANIFEST_SIGNING_KEY" ]; then
            echo "$MANIFEST_SIGNING_KEY" > /tmp/manifest_signing_key
            chmod 600 /tmp/manifest_signing_key
            SIGNING_ARGS="/tmp/manifest_signing_key"
            echo "Manifest signing key available"
          else
            echo "Warning: MANIFEST_SIGNING_KEY not set, manifest will be unsigned"
          fi

          # Update the v2 manifest at installer/v2/eagle0_manifest.txt
          bazel run //src/main/go/net/eagle0/build/manifest_manager:manifest_manager -- unity3d-v2 /tmp/unity_manifest.txt $SIGNING_ARGS

          # Cleanup
          rm -f /tmp/manifest_signing_key

      - name: Notify clients of update
        if: success() && github.ref == 'refs/heads/main' && github.event_name == 'push'
        env:
          NOTIFY_SECRET: ${{ secrets.EAGLE_NOTIFY_SECRET }}
        run: |
          # Wait for CDN cache to clear
          sleep 60

          # Get version from manifest
          VERSION=$(grep "^version=" /tmp/unity_manifest.txt | cut -d= -f2 || date +%Y.%m.%d)

          # Notify via admin server (required=false for normal deploys)
          curl -X POST "https://admin.eagle0.net/notify-update?platform=windows&version=$VERSION&required=false" \
            -H "X-Notify-Secret: $NOTIFY_SECRET" \
            --fail --silent --show-error || echo "Warning: Failed to notify clients (non-fatal)"

      - name: Archive build log
        if: success() || failure()
        uses: actions/upload-artifact@v4
        with:
          name: editor_win.log
          path: ${{ env.EAGLE0_BUILD_DIR }}/editor_win.log
          retention-days: 5
      - name: Cleanup build directory
        if: always()
        run: rm -rf "${{ env.EAGLE0_BUILD_DIR }}"