publishing.yml

name: Publishing

on:
  push:
    branches:
      - develop
      - hotfix/*
      - release/*
    tags:
      - v*.*.*

jobs:
  build:
    name: Build
    runs-on: macos-latest
    environment: apple-app-store
    strategy:
      matrix:
        platform:
          - iOS
          - macOS
    steps:
      - name: Checkout code
        uses: actions/checkout@v4
        with:
          fetch-depth: 0
          submodules: true

      - name: Cache packages
        uses: actions/cache@v4
        with:
          path: |
            ~/Library/Developer/Xcode/DerivedData/**/SourcePackages/checkouts
          key: ${{ runner.os }}-spm-${{ hashFiles('**/Package.resolved') }}
          restore-keys: |
            ${{ runner.os }}-spm-

      - name: Set up signing certificate
        env:
          CERTIFICATE_PRIVATE_KEY_B64: ${{ secrets.CERTIFICATE_PRIVATE_KEY_B64 }}
          CERTIFICATE_MAC_INSTALLER_PRIVATE_KEY_B64: ${{ secrets.CERTIFICATE_MAC_INSTALLER_PRIVATE_KEY_B64 }}
        run: |
          security create-keychain -p password build.keychain
          security default-keychain -s build.keychain
          security unlock-keychain -p password build.keychain
          security set-keychain-settings build.keychain
          echo $CERTIFICATE_PRIVATE_KEY_B64 | base64 --decode > /tmp/cert-fyreplace.p12
          security import /tmp/cert-fyreplace.p12 -k build.keychain -P '' -T /usr/bin/codesign
          echo $CERTIFICATE_MAC_INSTALLER_PRIVATE_KEY_B64 | base64 --decode > /tmp/cert-fyreplace.p12
          security import /tmp/cert-fyreplace.p12 -k build.keychain -P '' -T /usr/bin/codesign
          security set-key-partition-list -S apple-tool:,apple: -s -k password build.keychain

      - name: Set up App Store Connect authentication
        env:
          APP_STORE_CONNECT_PRIVATE_KEY_B64: ${{ secrets.APP_STORE_CONNECT_PRIVATE_KEY_B64 }}
        run: echo $APP_STORE_CONNECT_PRIVATE_KEY_B64 | base64 --decode > /tmp/connect-key.p8

      - name: Prepare files
        run: make

      - name: Test app
        if: ${{ matrix.platform = "iOS" }}
        run: |
          xcodebuild test \
            -scheme Fyreplace \
            -destination 'platform=${{ matrix.platform }} Simulator,name=${{ vars.IOS_SIMULATOR }}'
          xcrun simctl shutdown all

      - name: Test app
        if: ${{ matrix.platform = "macOS" }}
        run: |
          xcodebuild test \
            DEVELOPMENT_TEAM=${{ vars.TEAM_ID }} \
            -allowProvisioningUpdates \
            -authenticationKeyPath /tmp/connect-key.p8 \
            -authenticationKeyID ${{ vars.APP_STORE_CONNECT_KEY_ID }} \
            -authenticationKeyIssuerID ${{ vars.APP_STORE_CONNECT_ISSUER_ID }} \
            -scheme Fyreplace \
            -destination platform=${{ matrix.platform }}

      - name: Build app
        run: |
          xcodebuild archive \
            DEVELOPMENT_TEAM=${{ vars.TEAM_ID }} \
            -allowProvisioningUpdates \
            -authenticationKeyPath /tmp/connect-key.p8 \
            -authenticationKeyID ${{ vars.APP_STORE_CONNECT_KEY_ID }} \
            -authenticationKeyIssuerID ${{ vars.APP_STORE_CONNECT_ISSUER_ID }} \
            -scheme Fyreplace \
            -destination generic/platform=${{ matrix.platform }} \
            -archivePath archive.xcarchive

      - name: Export to IPA
        if: ${{ matrix.platform = "iOS" }}
        run: |
          /usr/libexec/PlistBuddy -c "Add :method string" ExportOptions.plist
          /usr/libexec/PlistBuddy -c "Set :method app-store-connect" ExportOptions.plist
          /usr/libexec/PlistBuddy -c "Add :teamId string" ExportOptions.plist
          /usr/libexec/PlistBuddy -c "Set :teamId ${{ vars.TEAM_ID }}" ExportOptions.plist
          /usr/libexec/PlistBuddy -c "Add :provisioningProfiles dict" ExportOptions.plist
          /usr/libexec/PlistBuddy -c "Add :provisioningProfiles:${{ vars.APP_ID }} string ${{ vars.PROVISIONING_PROFILE_NAME }}" ExportOptions.plist
          xcodebuild export \
            -allowProvisioningUpdates \
            -authenticationKeyPath /tmp/connect-key.p8 \
            -authenticationKeyID ${{ vars.APP_STORE_CONNECT_KEY_ID }} \
            -authenticationKeyIssuerID ${{ vars.APP_STORE_CONNECT_ISSUER_ID }} \
            -archivePath archive.xcarchive \
            -exportArchive \
            -exportOptionsPlist ExportOptions.plist \
            -exportPath export

      - name: Export to PKG
        if: ${{ matrix.platform = "macOS" }}
        run: |
          xcrun productbuild \
            --component archive.xcarchive/Products/Applications/Fyreplace.app \
            /Applications \
            export/Fyreplace.unsigned
          xcrun productsign \
            --sign ${{ vars.TEAM_ID }} \
            export/Fyreplace.unsigned \
            export/Fyreplace.pkg

      - uses: actions/upload-artifact@v4
        if: ${{ matrix.platform = "iOS" }}
        with:
          name: Fyreplace.ipa
          path: export/*.ipa
          if-no-files-found: error

      - uses: actions/upload-artifact@v4
        if: ${{ matrix.platform = "macOS" }}
        with:
          name: Fyreplace.pkg
          path: export/*.pkg
          if-no-files-found: error

  publish:
    name: Publish
    needs: build
    runs-on: macos-latest
    environment: apple-app-store
    strategy:
      matrix:
        platform:
          - ios
          - osx
    steps:
      - uses: actions/download-artifact@v4
        if: ${{ matrix.platform = "ios" }}
        with:
          name: Fyreplace.ipa
          path: /tmp

      - uses: actions/download-artifact@v4
        if: ${{ matrix.platform = "osx" }}
        with:
          name: Fyreplace.pkg
          path: /tmp

      - name: Set up App Store Connect authentication
        env:
          APP_STORE_CONNECT_PRIVATE_KEY_B64: ${{ secrets.APP_STORE_CONNECT_PRIVATE_KEY_B64 }}
        run: |
          mkdir ~/private_keys
          echo $APP_STORE_CONNECT_PRIVATE_KEY_B64 | base64 --decode > ~/private_keys/AuthKey_${{ vars.APP_STORE_CONNECT_KEY_ID }}.p8

      - name: Upload to App Store Connect
        run: |
          xcrun altool \
            --upload-app \
            --type ${{ matrix.platform }} \
            --file /tmp/Fyreplace.* \
            --apiKey ${{ vars.APP_STORE_CONNECT_KEY_ID }} \
            --apiIssuer ${{ vars.APP_STORE_CONNECT_ISSUER_ID }}