name: Release macOS Menubar

# Triggers on a `mac-v*` tag push (e.g. `git tag mac-v0.8.0 && git push origin mac-v0.8.0`),
# or manually via the Actions tab. Builds a universal arm64+x86_64 bundle, ad-hoc signs it,
# zips via `ditto`, and uploads the zip to the GitHub Release. `npx codeburn menubar` clears
# the download quarantine flag on install so Gatekeeper stays quiet.
on:
  push:
    tags:
      - 'mac-v*'
  workflow_dispatch:
    inputs:
      version:
        description: 'Version label for the bundle (e.g. v0.8.0 or dev-preview)'
        required: true
        default: 'dev-preview'

permissions:
  contents: write  # Needed to create the release + upload assets.

jobs:
  build:
    runs-on: macos-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Resolve version label
        id: version
        run: |
          if [[ "${GITHUB_REF}" == refs/tags/mac-v* ]]; then
            echo "value=${GITHUB_REF#refs/tags/mac-}" >> "$GITHUB_OUTPUT"
          else
            echo "value=${{ github.event.inputs.version }}" >> "$GITHUB_OUTPUT"
          fi

      - name: Show Swift toolchain
        run: swift --version

      - name: Build + bundle + zip
        run: mac/Scripts/package-app.sh "${{ steps.version.outputs.value }}"

      - name: Upload artifact (for manual runs)
        if: github.event_name == 'workflow_dispatch'
        uses: actions/upload-artifact@v4
        with:
          name: CodeBurnMenubar-${{ steps.version.outputs.value }}
          path: |
            mac/.build/dist/CodeBurnMenubar-${{ steps.version.outputs.value }}.zip
            mac/.build/dist/CodeBurnMenubar-${{ steps.version.outputs.value }}.zip.sha256
          if-no-files-found: error

      - name: Create / update GitHub Release
        if: startsWith(github.ref, 'refs/tags/mac-v')
        uses: softprops/action-gh-release@v2
        with:
          tag_name: ${{ github.ref_name }}
          name: Menubar ${{ steps.version.outputs.value }}
          body: |
            Install with:

            ```
            npx codeburn menubar
            ```

            That command drops the app into `~/Applications`, clears the download
            quarantine, and launches it. If you download the zip from this page directly
            and macOS shows "cannot verify developer", right-click the app in Finder and
            pick Open to whitelist it once.
          files: |
            mac/.build/dist/CodeBurnMenubar-${{ steps.version.outputs.value }}.zip
            mac/.build/dist/CodeBurnMenubar-${{ steps.version.outputs.value }}.zip.sha256
          fail_on_unmatched_files: true