ci: auto-publish to R2 after CLI release

Author: Factory Bot

.github/workflows/publish-r2.yml

@@ -8,8 +8,8 @@ on:
         required: true
         type: string
       release_run_id:
-        description: "Release workflow run ID to download artifacts from"
-        required: true
+        description: "Release workflow run ID to download artifacts from (leave empty if called from release workflow)"
+        required: false
         type: string
       channel:
         description: "Release channel"
@@ -24,6 +24,28 @@ on:
         description: "Brief release notes (optional)"
         required: false
         type: string
+  workflow_call:
+    inputs:
+      version:
+        description: "Version to publish"
+        required: true
+        type: string
+      channel:
+        description: "Release channel"
+        required: false
+        type: string
+        default: stable
+      release_notes:
+        description: "Brief release notes"
+        required: false
+        type: string
+    secrets:
+      R2_ACCESS_KEY_ID:
+        required: true
+      R2_SECRET_ACCESS_KEY:
+        required: true
+      CLOUDFLARE_ACCOUNT_ID:
+        required: true
 
 env:
   BINARY_NAME: Cortex
@@ -43,19 +65,23 @@ jobs:
     steps:
       - uses: actions/checkout@v4
 
-      - name: Download artifacts from Release run
+      - name: Download artifacts from Release run (workflow_dispatch with run_id)
+        if: github.event_name == 'workflow_dispatch' && inputs.release_run_id != ''
         env:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: |
           mkdir -p artifacts
           echo "Downloading artifacts from run ${{ inputs.release_run_id }}..."
-
-          # Download all artifacts from the release run
           gh run download ${{ inputs.release_run_id }} --dir artifacts
-
           echo "Downloaded artifacts:"
           ls -la artifacts/
 
+      - name: Download artifacts from current workflow
+        if: github.event_name == 'workflow_call' || (github.event_name == 'workflow_dispatch' && inputs.release_run_id == '')
+        uses: actions/download-artifact@v4
+        with:
+          path: artifacts
+
       - name: Verify artifacts exist
         run: |
           EXPECTED_ARTIFACTS=(

.github/workflows/release.yml

@@ -390,3 +390,19 @@ jobs:
             artifacts/*
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
+  # ==========================================================================
+  # Publish CLI to R2
+  # ==========================================================================
+  publish-r2:
+    name: Publish to R2
+    needs: [prepare, build-cli, release]
+    if: needs.prepare.outputs.build_cli == 'true' && needs.build-cli.result == 'success'
+    uses: ./.github/workflows/publish-r2.yml
+    with:
+      version: ${{ needs.prepare.outputs.version }}
+      channel: ${{ contains(needs.prepare.outputs.version, '-') && 'beta' || 'stable' }}
+    secrets:
+      R2_ACCESS_KEY_ID: ${{ secrets.R2_ACCESS_KEY_ID }}
+      R2_SECRET_ACCESS_KEY: ${{ secrets.R2_SECRET_ACCESS_KEY }}
+      CLOUDFLARE_ACCOUNT_ID: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}