name: Nightly SideStore Build

on:
  push:
    branches: [develop]
  schedule:
    - cron: '0 0 * * *'
  workflow_dispatch:

concurrency:
  group: ${{ github.ref }}
  cancel-in-progress: true

jobs:
  build:
    runs-on: macos-26

    steps:
      - uses: actions/checkout@v4
        with:
          submodules: recursive
          fetch-depth: 0

      - run: brew install ldid xcbeautify

      # --------------------------------------------------
      # runtime env setup
      # --------------------------------------------------
      - uses: actions/checkout@v4
        with:
          repository: 'SideStore/beta-build-num'
          ref: ${{ env.ref }}
          token: ${{ secrets.CROSS_REPO_PUSH_KEY }}
          path: 'Dependencies/beta-build-num'
          fetch-depth: 1

      - name: Setup
        run: |
          BUILD_NUM=$(python3 scripts/ci/workflow.py reserve_build_number 'Dependencies/beta-build-num')
          MARKETING_VERSION=$(python3 scripts/ci/workflow.py get-marketing-version)
          SHORT_COMMIT=$(python3 scripts/ci/workflow.py commid-id)

          QUALIFIED_VERSION=$(python3 scripts/ci/workflow.py compute-qualified \
              "$MARKETING_VERSION" \
              "$BUILD_NUM" \
              "${{ env.ref }}" \
              "$SHORT_COMMIT")

          echo "BUILD_NUM=$BUILD_NUM" >> $GITHUB_ENV
          echo "MARKETING_VERSION=$MARKETING_VERSION" >> $GITHUB_ENV
          echo "SHORT_COMMIT=$SHORT_COMMIT" >> $GITHUB_ENV
          echo "VERSION=$QUALIFIED_VERSION" >> $GITHUB_ENV

      - name: Setup Xcode
        uses: maxim-lobanov/setup-xcode@v1.6.0
        with:
          xcode-version: '26.2'

      - name: Restore Cache
        id: xcode-cache
        uses: actions/cache/restore@v3
        with:
          path: |
            ~/Library/Developer/Xcode/DerivedData
            ~/Library/Caches/org.swift.swiftpm
          key: xcode-build-cache-${{ github.ref_name }}-${{ github.sha }}
          restore-keys: |
            xcode-build-cache-${{ github.ref_name }}-

     # --------------------------------------------------
      # build and test
      # --------------------------------------------------
      - name: Clean
        if: contains(github.event.head_commit.message, '[--clean-build]')
        run: |
          python3 scripts/ci/workflow.py clean
          python3 scripts/ci/workflow.py clean-derived-data
          python3 scripts/ci/workflow.py clean-spm-cache

      - name: Boot simulator (async)
        run: |
          mkdir -p build/logs
          python3 scripts/ci/workflow.py boot-sim-async "iPhone 17 Pro"

      - name: Build
        id: build
        env:
          BUILD_LOG_ZIP_PASSWORD: ${{ secrets.BUILD_LOG_ZIP_PASSWORD }}
        run: |
          python3 scripts/ci/workflow.py build; STATUS=$?
          python3 scripts/ci/workflow.py encrypt-build
          echo "encrypted=true" >> $GITHUB_OUTPUT
          exit $STATUS

      - name: Tests Build
        id: test-build
        if: ${{ vars.ENABLE_TESTS == '1' && vars.ENABLE_TESTS_BUILD == '1' }}
        env:
          BUILD_LOG_ZIP_PASSWORD: ${{ secrets.BUILD_LOG_ZIP_PASSWORD }}
        run: |
          python3 scripts/ci/workflow.py tests-build; STATUS=$?
          python3 scripts/ci/workflow.py encrypt-tests-build
          exit $STATUS

      - name: Save Cache
        if: ${{ steps.xcode-cache.outputs.cache-hit != 'true' }}
        uses: actions/cache/save@v3
        with:
          path: |
            ~/Library/Developer/Xcode/DerivedData
            ~/Library/Caches/org.swift.swiftpm
          key: xcode-build-cache-${{ github.ref_name }}-${{ github.sha }}

      - name: Tests Run
        id: test-run
        if: ${{ vars.ENABLE_TESTS == '1' && vars.ENABLE_TESTS_RUN == '1' }}
        env:
          BUILD_LOG_ZIP_PASSWORD: ${{ secrets.BUILD_LOG_ZIP_PASSWORD }}
        run: |
          python3 scripts/ci/workflow.py tests-run "iPhone 17 Pro"; STATUS=$?
          python3 scripts/ci/workflow.py encrypt-tests-run
          exit $STATUS

      # --------------------------------------------------
      # artifacts 
      # --------------------------------------------------
      - uses: actions/upload-artifact@v4
        with:
          name: encrypted-build-logs-${{ env.VERSION }}.zip
          path: encrypted-build-logs.zip

      - uses: actions/upload-artifact@v4
        if: ${{ vars.ENABLE_TESTS == '1' && vars.ENABLE_TESTS_BUILD == '1' }}
        with:
          name: encrypted-tests-build-logs-${{ env.SHORT_COMMIT }}.zip
          path: encrypted-tests-build-logs.zip

      - uses: actions/upload-artifact@v4
        if: ${{ vars.ENABLE_TESTS == '1' && vars.ENABLE_TESTS_RUN == '1' }}
        with:
          name: encrypted-tests-run-logs-${{ env.SHORT_COMMIT }}.zip
          path: encrypted-tests-run-logs.zip

      - uses: actions/upload-artifact@v4
        with:
          name: SideStore-${{ env.VERSION }}.ipa
          path: SideStore.ipa
      - uses: actions/upload-artifact@v4
        with:
          name: SideStore-${{ env.VERSION }}-dSYMs.zip
          path: SideStore.dSYMs.zip

      # --------------------------------------------------
      # deploy 
      # --------------------------------------------------
      - name: Deploy
        run: |
          python3 scripts/ci/workflow.py deploy \
            Dependencies/apps-v2.json \
            "_includes/source.json" \
            "${{ env.ref_name }}" \
            "$SHORT_COMMIT" \
            "$MARKETING_VERSION" \
            "$VERSION" \
            "${{ env.ref_name }}" \
            "com.SideStore.SideStore" \
            "SideStore.ipa"