name: cli-build
on:
  workflow_dispatch:
    inputs:
      rids:
        description: "Comma-separated RIDs (e.g., linux-x64,win-x64,osx-arm64)"
        required: false
        default: "linux-x64,win-x64,osx-arm64"
      config:
        description: "Build configuration"
        required: false
        default: "Release"
      sign:
        description: "Enable cosign signing (requires COSIGN_KEY)"
        required: false
        default: "false"

jobs:
  build:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Task Pack offline bundle fixtures
        run: python3 scripts/packs/run-fixtures-check.sh

      - name: Setup .NET
        uses: actions/setup-dotnet@v4
        with:
          dotnet-version: "10.0.100"

      - name: Install syft (SBOM)
        uses: anchore/sbom-action/download-syft@v0

      - name: Build CLI artifacts
        run: |
          chmod +x scripts/cli/build-cli.sh
          RIDS="${{ github.event.inputs.rids }}" CONFIG="${{ github.event.inputs.config }}" SBOM_TOOL=syft SIGN="${{ github.event.inputs.sign }}" COSIGN_KEY="${{ secrets.COSIGN_KEY }}" scripts/cli/build-cli.sh

      - name: List artifacts
        run: find out/cli -maxdepth 3 -type f -print

      - name: Upload CLI artifacts
        uses: actions/upload-artifact@v4
        with:
          name: stella-cli
          path: out/cli/**