name: Nightly SideStore Build

on:
  push:
    branches: [develop]
  schedule:
    - cron: '0 0 * * *'
  workflow_dispatch:

concurrency:
  group: ${{ github.ref }}
  cancel-in-progress: true

jobs:
  build:
    runs-on: macos-26

    steps:
      - uses: actions/checkout@v4
        with:
          submodules: recursive
          fetch-depth: 0

      - run: brew install ldid xcbeautify

      - name: Restore Xcode/SwiftPM Cache (Exact match)
        id: xcode-cache-restore
        uses: actions/cache/restore@v3
        with:
          path: |
            ~/Library/Developer/Xcode/DerivedData
            ~/Library/Caches/org.swift.swiftpm
          key: xcode-cache-build-${{ github.ref_name }}-${{ github.sha }}

      - name: Restore Xcode/SwiftPM Cache (Last Available)
        id: xcode-cache-restore-recent
        uses: actions/cache/restore@v3
        with:
          path: |
            ~/Library/Developer/Xcode/DerivedData
            ~/Library/Caches/org.swift.swiftpm
          key: xcode-cache-build-${{ github.ref_name }}-

      - name: Short Commit SHA
        id: shared
        run: python3 scripts/ci.py commid-id

      - name: Nightly Version bump
        env:
          RELEASE_CHANNEL: nightly
        run: python3 scripts/ci.py bump-beta

      - name: Version
        id: version
        run: python3 scripts/ci.py version

      - name: Clean previous build artifacts
        run: python3 scripts/ci.py clean

      - name: Build
        run: python3 scripts/ci.py build

      - name: Tests Build
        if: ${{ vars.ENABLE_TESTS == '1' && vars.ENABLE_TESTS_BUILD == '1' }}
        run: python3 scripts/ci.py tests-build

      - name: Save Xcode & SwiftPM Cache
        id: cache-save
        if: ${{ steps.xcode-cache-restore.outputs.cache-hit != 'true' }}
        uses: actions/cache/save@v3
        with:
          path: |
            ~/Library/Developer/Xcode/DerivedData
            ~/Library/Caches/org.swift.swiftpm
          key: xcode-cache-build-${{ github.ref_name }}-${{ github.sha }}

      - name: Tests Run
        if: ${{ vars.ENABLE_TESTS == '1' && vars.ENABLE_TESTS_RUN == '1' }}
        run: python3 scripts/ci.py tests-run

      - name: Encrypt build logs
        env:
          BUILD_LOG_ZIP_PASSWORD: ${{ secrets.BUILD_LOG_ZIP_PASSWORD }}
        run: python3 scripts/ci.py encrypt-build

      - name: Encrypt tests-build logs
        if: ${{ vars.ENABLE_TESTS == '1' && vars.ENABLE_TESTS_BUILD == '1' }}
        env:
          BUILD_LOG_ZIP_PASSWORD: ${{ secrets.BUILD_LOG_ZIP_PASSWORD }}
        run: python3 scripts/ci.py encrypt-tests-build

      - name: Encrypt tests-run logs
        if: ${{ vars.ENABLE_TESTS == '1' && vars.ENABLE_TESTS_RUN == '1' }}
        env:
          BUILD_LOG_ZIP_PASSWORD: ${{ secrets.BUILD_LOG_ZIP_PASSWORD }}
        run: python3 scripts/ci.py encrypt-tests-run

      - uses: actions/upload-artifact@v4
        with:
          name: encrypted-build-logs-${{ steps.version.outputs.version }}.zip
          path: encrypted-build-logs.zip

      - uses: actions/upload-artifact@v4
        if: ${{ vars.ENABLE_TESTS == '1' && vars.ENABLE_TESTS_BUILD == '1' }}
        with:
          name: encrypted-tests-build-logs-${{ steps.shared.outputs.short_commit }}.zip
          path: encrypted-tests-build-logs.zip

      - uses: actions/upload-artifact@v4
        if: ${{ vars.ENABLE_TESTS == '1' && vars.ENABLE_TESTS_RUN == '1' }}
        with:
          name: encrypted-tests-run-logs-${{ steps.shared.outputs.short_commit }}.zip
          path: encrypted-tests-run-logs.zip

      - uses: actions/upload-artifact@v4
        with:
          name: SideStore-${{ steps.version.outputs.version }}.ipa
          path: SideStore.ipa

      - uses: actions/upload-artifact@v4
        with:
          name: SideStore-${{ steps.version.outputs.version }}-dSYMs.zip
          path: SideStore.dSYMs.zip

      - name: Deploy
        run: python3 scripts/ci.py deploy \
          --release-tag nightly \
          --release-name Nightly