release.yml

name: Release

on:
  push:
    tags:
      - "v*"
  workflow_dispatch:

permissions:
  contents: write

jobs:
  build-and-release:
    name: Build and Release (${{ matrix.os }})
    runs-on: ${{ matrix.os }}
    strategy:
      fail-fast: false
      matrix:
        os: [ubuntu-latest, macos-latest]

    steps:
      - name: Checkout
        uses: actions/checkout@v5

      - name: Install dependencies (Ubuntu)
        if: runner.os == 'Linux'
        run: |
          sudo apt-get update
          sudo apt-get install -y --no-install-recommends \
            build-essential libcurl4-openssl-dev

      - name: Build
        run: |
          make clean || true
          make

      - name: Verify static cjson linkage
        shell: bash
        run: |
          if ldd ./ask 2>/dev/null | grep -q cjson; then
            echo "ERROR: ask still dynamically links cjson"
            exit 1
          fi

      - name: Package artifacts
        shell: bash
        run: |
          set -euxo pipefail
          mkdir -p dist
          OS_NAME=$(echo "${{ runner.os }}" | tr '[:upper:]' '[:lower:]')
          ARCH=$(uname -m)
          OUT_NAME="ask-${OS_NAME}-${ARCH}"
          cp ask "dist/${OUT_NAME}"
          tar -C dist -czf "dist/${OUT_NAME}.tar.gz" "${OUT_NAME}"
          if command -v sha256sum >/dev/null 2>&1; then
            (cd dist && sha256sum "${OUT_NAME}.tar.gz" > "${OUT_NAME}.tar.gz.sha256")
          else
            (cd dist && shasum -a 256 "${OUT_NAME}.tar.gz" > "${OUT_NAME}.tar.gz.sha256")
          fi

      - name: Upload Release
        uses: softprops/action-gh-release@v3
        with:
          files: |
            dist/*.tar.gz
            dist/*.sha256
          generate_release_notes: true
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}