name: Stable SideStore build

on:
  push:
    tags:
      - '[0-9]+.[0-9]+.[0-9]+'
  workflow_dispatch:

concurrency:
  group: ${{ github.ref }}
  cancel-in-progress: true

jobs:
  build:
    name: Build SideStore - stable
    runs-on: macos-26

    env:
      RELEASE_NAME: Stable
      CHANNEL: stable
      UPSTREAM_CHANNEL: ""

    steps:
      - uses: actions/checkout@v4
        with:
          submodules: recursive
          fetch-depth: 0

      - run: brew install ldid xcbeautify

      - name: Setup Env
        run: |
          MARKETING_VERSION=$(python3 scripts/ci/workflow.py get-marketing-version)
          SHORT_COMMIT=$(python3 scripts/ci/workflow.py commit-id)

          if [ "$MARKETING_VERSION" != "${{ github.ref_name }}" ]; then
            echo "Version mismatch"
            echo "Build.xcconfig: $MARKETING_VERSION"
            echo "Tag: ${{ github.ref_name }}"
            exit 1
          fi

          echo "MARKETING_VERSION=$MARKETING_VERSION" | tee -a $GITHUB_ENV
          echo "SHORT_COMMIT=$SHORT_COMMIT" | tee -a $GITHUB_ENV

      - name: Setup Xcode
        uses: maxim-lobanov/setup-xcode@v1.6.0
        with:
          xcode-version: "26.0"

      - name: Restore Cache (exact)
        id: xcode-cache-exact
        uses: actions/cache/restore@v3
        with:
          path: |
            ~/Library/Developer/Xcode/DerivedData
            ~/Library/Caches/org.swift.swiftpm
          key: xcode-build-cache-stable-${{ github.sha }}

      - name: Restore Cache (last)
        if: steps.xcode-cache-exact.outputs.cache-hit != 'true'
        id: xcode-cache-fallback
        uses: actions/cache/restore@v3
        with:
          path: |
            ~/Library/Developer/Xcode/DerivedData
            ~/Library/Caches/org.swift.swiftpm
          key: xcode-build-cache-stable-

      - name: Clean
        run: python3 scripts/ci/workflow.py clean

      - name: Build
        id: build
        env:
          BUILD_LOG_ZIP_PASSWORD: ${{ secrets.BUILD_LOG_ZIP_PASSWORD }}
        run: |
          python3 scripts/ci/workflow.py build; STATUS=$?
          python3 scripts/ci/workflow.py encrypt-build
          exit $STATUS

      - name: Save Cache
        if: ${{ steps.xcode-cache-fallback.outputs.cache-hit != 'true' }}
        uses: actions/cache/save@v3
        with:
          path: |
            ~/Library/Developer/Xcode/DerivedData
            ~/Library/Caches/org.swift.swiftpm
          key: xcode-build-cache-stable-${{ github.sha }}

      - uses: actions/upload-artifact@v4
        with:
          name: build-logs-${{ env.MARKETING_VERSION }}.zip
          path: build-logs.zip

      - uses: actions/upload-artifact@v4
        with:
          name: SideStore-${{ env.MARKETING_VERSION }}.ipa
          path: SideStore.ipa

      - uses: actions/upload-artifact@v4
        with:
          name: SideStore-${{ env.MARKETING_VERSION }}-dSYMs.zip
          path: SideStore.dSYMs.zip

      - name: Upload to releases
        env:
          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        run: |
          python3 scripts/ci/workflow.py upload-release \
            "$RELEASE_NAME" \
            "${{ github.ref_name }}" \
            "$GITHUB_SHA" \
            "$GITHUB_REPOSITORY" \
            "$UPSTREAM_CHANNEL" \
            "true"