KernelSU-Next/.github/workflows/build-manager-spoofed.yml

name: Build Manager Spoofed

on:
  push:
    branches: [ "next" ]
    paths:
      - '.github/workflows/build-manager-ci.yml'
      - 'manager/**'
      - 'kernel/**'
      - 'userspace/ksud_overlayfs**'
      - 'userspace/ksud_magic/**'
      - 'userspace/susfsd/**'
  pull_request:
    branches: [ "next" ]
    paths:
      - '.github/workflows/build-manager-ci.yml'
      - 'manager/**'
  workflow_call:
  workflow_dispatch:
  schedule:
    - cron: "0 12 * * *" # 6 PM UTC+6 | 12 PM UTC

jobs:
  check-cache:
    runs-on: ubuntu-latest
    outputs:
      cache-hit: ${{ steps.cache-artifacts.outputs.cache-hit }}
      cache-key: ${{ steps.generate-cache-key.outputs.cache-key }}
    steps:
      - name: Checkout Repository
        uses: actions/checkout@v4
        with:
          fetch-depth: 0

      - name: Generate cache key from source files
        id: generate-cache-key
        run: |
          # Calculate hash of all files except manager directory
          HASH=$(find . -type f \
            -not -path "./manager/*" \
            -not -path "./.git/*" \
            -not -path "./.github/workflows/build-manager-spoofed.yml" \
            -exec sha256sum {} \; | sort | sha256sum | cut -d' ' -f1)
          echo "cache-key=artifacts-spoofed-$HASH" >> $GITHUB_OUTPUT
          echo "Generated cache key: artifacts-spoofed-$HASH"

      - name: Check for cached artifacts
        id: cache-artifacts
        uses: actions/cache@v4
        with:
          path: |
            cached-artifacts/susfsd
            cached-artifacts/ksud_overlayfs
            cached-artifacts/ksud_magic
          key: ${{ steps.generate-cache-key.outputs.cache-key }}

  build-lkm:
    needs: check-cache
    if: needs.check-cache.outputs.cache-hit != 'true'
    uses: ./.github/workflows/build-lkm.yml
    secrets: inherit

  build-susfsd:
    needs: [check-cache, build-lkm]
    if: needs.check-cache.outputs.cache-hit != 'true'
    strategy:
      matrix:
        include:
          - os: ubuntu-latest
    uses: ./.github/workflows/susfsd.yml
    with:
      os: ${{ matrix.os }}

  build-ksud:
    needs: [check-cache, build-susfsd]
    if: needs.check-cache.outputs.cache-hit != 'true'
    strategy:
      matrix:
        include:
          - target: aarch64-linux-android
            os: ubuntu-latest
          - target: armv7-linux-androideabi
            os: ubuntu-latest
          - target: x86_64-linux-android
            os: ubuntu-latest
    uses: ./.github/workflows/ksud.yml
    with:
      target: ${{ matrix.target }}
      os: ${{ matrix.os }}

  cache-artifacts:
    needs: [check-cache, build-ksud]
    if: needs.check-cache.outputs.cache-hit != 'true'
    runs-on: ubuntu-latest
    steps:
      - name: Download susfsd artifacts
        uses: actions/download-artifact@v4
        with:
          name: susfsd-linux-android
          path: cached-artifacts/susfsd

      - name: Download ksud_overlayfs artifacts
        uses: actions/download-artifact@v4
        with:
          pattern: ksud_overlayfs-*
          path: cached-artifacts/ksud_overlayfs
          merge-multiple: true

      - name: Download ksud_magic artifacts
        uses: actions/download-artifact@v4
        with:
          pattern: ksud_magic-*
          path: cached-artifacts/ksud_magic
          merge-multiple: true

      - name: Cache artifacts
        uses: actions/cache/save@v4
        with:
          path: |
            cached-artifacts/susfsd
            cached-artifacts/ksud_overlayfs
            cached-artifacts/ksud_magic
          key: ${{ needs.check-cache.outputs.cache-key }}

  build-manager:
    needs: [check-cache, build-ksud]
    if: always() && needs.check-cache.result == 'success' && (needs.check-cache.outputs.cache-hit == 'true' || needs.build-ksud.result == 'success')
    runs-on: ubuntu-latest
    defaults:
      run:
        working-directory: ./manager

    steps:
      - name: Checkout Repository
        uses: actions/checkout@v4
        with:
          fetch-depth: 0

      - name: Spoof Package ID
        run: |
          chmod +x spoof
          ./spoof

      - name: Setup need_upload
        id: need_upload
        run: |
          if [ ! -z "${{ secrets.BOT_TOKEN }}" ]; then
            echo "UPLOAD=true" >> $GITHUB_OUTPUT
          else
            echo "UPLOAD=false" >> $GITHUB_OUTPUT
          fi

      - name: Write Key
        run: |
          if [ ! -z "${{ secrets.KEYSTORE }}" ]; then
            {
              echo KEYSTORE_PASSWORD='${{ secrets.KEYSTORE_PASSWORD }}'
              echo KEY_ALIAS='${{ secrets.KEY_ALIAS }}'
              echo KEY_PASSWORD='${{ secrets.KEY_PASSWORD }}'
              echo KEYSTORE_FILE='key.jks'
            } >> gradle.properties
            echo ${{ secrets.KEYSTORE }} | base64 -d > key.jks
          fi

      - name: Setup Java
        uses: actions/setup-java@v4
        with:
          distribution: temurin
          java-version: 21

      - name: Setup Gradle
        uses: gradle/actions/setup-gradle@v4

      # Restore cached artifacts if cache hit
      - name: Restore cached artifacts
        if: needs.check-cache.outputs.cache-hit == 'true'
        uses: actions/cache/restore@v4
        with:
          path: |
            cached-artifacts/susfsd
            cached-artifacts/ksud_overlayfs
            cached-artifacts/ksud_magic
          key: ${{ needs.check-cache.outputs.cache-key }}

      # Download fresh artifacts if cache miss
      - name: Download susfsd
        if: needs.check-cache.outputs.cache-hit != 'true'
        uses: actions/download-artifact@v4
        with:
          name: susfsd-linux-android
          path: .

      # Download fresh ksud artifacts if cache miss
      - name: Download arm64 ksud_overlayfs
        if: needs.check-cache.outputs.cache-hit != 'true'
        uses: actions/download-artifact@v4
        with:
          name: ksud_overlayfs-aarch64-linux-android
          path: ksud_overlayfs
          
      - name: Download arm ksud_overlayfs
        if: needs.check-cache.outputs.cache-hit != 'true'
        uses: actions/download-artifact@v4
        with:
          name: ksud_overlayfs-armv7-linux-androideabi
          path: ksud_overlayfs

      - name: Download x86_64 ksud_overlayfs
        if: needs.check-cache.outputs.cache-hit != 'true'
        uses: actions/download-artifact@v4
        with:
          name: ksud_overlayfs-x86_64-linux-android
          path: ksud_overlayfs

      - name: Download arm64 ksud_magic
        if: needs.check-cache.outputs.cache-hit != 'true'
        uses: actions/download-artifact@v4
        with:
          name: ksud_magic-aarch64-linux-android
          path: ksud_magic
          
      - name: Download arm ksud_magic
        if: needs.check-cache.outputs.cache-hit != 'true'
        uses: actions/download-artifact@v4
        with:
          name: ksud_magic-armv7-linux-androideabi
          path: ksud_magic
        
      - name: Download x86_64 ksud_magic
        if: needs.check-cache.outputs.cache-hit != 'true'
        uses: actions/download-artifact@v4
        with:
          name: ksud_magic-x86_64-linux-android
          path: ksud_magic

      # Copy artifacts to jniLibs (works for both cached and fresh)
      - name: Copy susfsd to app jniLibs
        run: |
          mkdir -p app/src/main/jniLibs/arm64-v8a
          mkdir -p app/src/main/jniLibs/armeabi-v7a
          mkdir -p app/src/main/jniLibs/x86_64
          
          if [ "${{ needs.check-cache.outputs.cache-hit }}" == "true" ]; then
            # Copy from cached artifacts
            cp -f ../cached-artifacts/susfsd/arm64-v8a/susfsd ../manager/app/src/main/jniLibs/arm64-v8a/libsusfsd.so
            cp -f ../cached-artifacts/susfsd/armeabi-v7a/susfsd ../manager/app/src/main/jniLibs/armeabi-v7a/libsusfsd.so
            cp -f ../cached-artifacts/susfsd/x86_64/susfsd ../manager/app/src/main/jniLibs/x86_64/libsusfsd.so
          else
            # Copy from fresh artifacts
            cp -f ../arm64-v8a/susfsd ../manager/app/src/main/jniLibs/arm64-v8a/libsusfsd.so
            cp -f ../armeabi-v7a/susfsd ../manager/app/src/main/jniLibs/armeabi-v7a/libsusfsd.so
            cp -f ../x86_64/susfsd ../manager/app/src/main/jniLibs/x86_64/libsusfsd.so
          fi

      - name: Copy ksud_overlayfs to app jniLibs
        run: |
          mkdir -p app/src/main/jniLibs/arm64-v8a
          mkdir -p app/src/main/jniLibs/armeabi-v7a
          mkdir -p app/src/main/jniLibs/x86_64

          if [ "${{ needs.check-cache.outputs.cache-hit }}" == "true" ]; then
            # Copy from cached artifacts
            cp -f ../cached-artifacts/ksud_overlayfs/aarch64-linux-android/release/ksud ../manager/app/src/main/jniLibs/arm64-v8a/libksud_overlayfs.so
            cp -f ../cached-artifacts/ksud_overlayfs/armv7-linux-androideabi/release/ksud ../manager/app/src/main/jniLibs/armeabi-v7a/libksud_overlayfs.so
            cp -f ../cached-artifacts/ksud_overlayfs/x86_64-linux-android/release/ksud ../manager/app/src/main/jniLibs/x86_64/libksud_overlayfs.so
          else
            # Copy from fresh artifacts
            cp -f ../ksud_overlayfs/aarch64-linux-android/release/ksud ../manager/app/src/main/jniLibs/arm64-v8a/libksud_overlayfs.so
            cp -f ../ksud_overlayfs/armv7-linux-androideabi/release/ksud ../manager/app/src/main/jniLibs/armeabi-v7a/libksud_overlayfs.so
            cp -f ../ksud_overlayfs/x86_64-linux-android/release/ksud ../manager/app/src/main/jniLibs/x86_64/libksud_overlayfs.so
          fi

      - name: Copy ksud_magic to app jniLibs
        run: |
          mkdir -p app/src/main/jniLibs/arm64-v8a
          mkdir -p app/src/main/jniLibs/armeabi-v7a
          mkdir -p app/src/main/jniLibs/x86_64

          if [ "${{ needs.check-cache.outputs.cache-hit }}" == "true" ]; then
            # Copy from cached artifacts
            cp -f ../cached-artifacts/ksud_magic/aarch64-linux-android/release/ksud ../manager/app/src/main/jniLibs/arm64-v8a/libksud_magic.so
            cp -f ../cached-artifacts/ksud_magic/armv7-linux-androideabi/release/ksud ../manager/app/src/main/jniLibs/armeabi-v7a/libksud_magic.so
            cp -f ../cached-artifacts/ksud_magic/x86_64-linux-android/release/ksud ../manager/app/src/main/jniLibs/x86_64/libksud_magic.so
          else
            # Copy from fresh artifacts
            cp -f ../ksud_magic/aarch64-linux-android/release/ksud ../manager/app/src/main/jniLibs/arm64-v8a/libksud_magic.so
            cp -f ../ksud_magic/armv7-linux-androideabi/release/ksud ../manager/app/src/main/jniLibs/armeabi-v7a/libksud_magic.so
            cp -f ../ksud_magic/x86_64-linux-android/release/ksud ../manager/app/src/main/jniLibs/x86_64/libksud_magic.so
          fi

      - name: Build with Gradle
        run: |
          {
            echo 'org.gradle.parallel=true'
            echo 'org.gradle.vfs.watch=true'
            echo 'org.gradle.jvmargs=-Xmx2048m'
            echo 'android.native.buildOutput=verbose'
          } >> gradle.properties
          sed -i 's/org.gradle.configuration-cache=true//g' gradle.properties
          chmod +x gradlew
          ./gradlew clean assembleRelease

      - name: Upload Build Artifact
        uses: actions/upload-artifact@v4
        with:
          name: Manager
          path: manager/app/build/outputs/apk/release/*.apk

      - name: Upload Mappings
        uses: actions/upload-artifact@v4
        with:
          name: Mappings
          path: manager/app/build/outputs/mapping/release/

      - name: Bot Session Cache
        if: steps.need_upload.outputs.UPLOAD == 'true'
        id: bot_session_cache
        uses: actions/cache@v4
        with:
          path: scripts/ksunextbot.session
          key: ${{ runner.os }}-bot-session

      - name: Upload to Telegram
        if: steps.need_upload.outputs.UPLOAD == 'true'
        env:
          API_ID: ${{ secrets.API_ID }}
          API_HASH: ${{ secrets.API_HASH }}
          CHAT_ID: ${{ secrets.CHAT_ID }}
          BOT_TOKEN: ${{ secrets.BOT_TOKEN }}
          MESSAGE_THREAD_ID: ${{ secrets.MESSAGE_THREAD_ID }}
          COMMIT_MESSAGE: ${{ github.event.head_commit.message }}
          COMMIT_URL: ${{ github.event.head_commit.url }}
          RUN_URL: ${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}
          TITLE: CI Manager (SPOOFED BUILD)
        run: |
          if [ ! -z "${{ secrets.BOT_TOKEN }}" ]; then
            export VERSION=$(git rev-list --count HEAD)
            APK=$(find ./app/build/outputs/apk/release -name "*.apk")
            pip3 install telethon
            python3 $GITHUB_WORKSPACE/scripts/ksunextbot.py $APK
          fi