publish.yml

name: publish

on:
  workflow_dispatch:
    inputs:
      manual_version:
        description: 'Force a specific version for NuGet.org publish (e.g., 1.0.0 or 1.0.0-rc.1). If empty, defaults to auto-generated preview for GitHub Packages.'
        required: false
        type: string
  push:
    tags:
      - "v*"

permissions:
  contents: read
  packages: write

jobs:
  pack_and_publish:
    runs-on: macos-latest
    permissions:
      contents: read
      packages: write
      id-token: write
    steps:
      - uses: actions/checkout@v4
        with:
          fetch-depth: 0

      - name: Determine package version
        id: version
        shell: bash
        run: |
          REF="${{ github.ref }}"
          EVENT="${{ github.event_name }}"
          MANUAL_VERSION="${{ github.event.inputs.manual_version }}"
          CSPROJ="src/Kapusch.StoreKit2ApisForiOSComponents/Kapusch.StoreKit2ApisForiOSComponents.csproj"
          BASE_VERSION=$(grep -oE '<Version>[^<]+' "$CSPROJ" | head -n 1 | sed 's/<Version>//' || echo "1.0.0")

          if [[ -n "$MANUAL_VERSION" ]]; then
            VERSION="$MANUAL_VERSION"
            PUBLISH_TARGET="nuget"
            echo "Manual version provided ($VERSION). Triggering NuGet.org publish."
          elif [[ "$REF" =~ ^refs/tags/v ]]; then
            VERSION="${REF#refs/tags/v}"
            PUBLISH_TARGET="nuget"
          else
            COMMIT_SHORT=$(git rev-parse --short HEAD)
            RUN_NUMBER="${{ github.run_number }}"
            VERSION="${BASE_VERSION}-preview.${RUN_NUMBER}.${COMMIT_SHORT}"
            PUBLISH_TARGET="github"
          fi

          if [[ "$PUBLISH_TARGET" == "nuget" ]]; then
            git fetch origin +refs/heads/*:refs/remotes/origin/*
            TAGGED_SHA="${{ github.sha }}"
            CONTAINING_BRANCHES=$(git for-each-ref --format='%(refname:short)' refs/remotes/origin --contains "$TAGGED_SHA")

            ON_MASTER="false"
            ON_RELEASE="false"
            while IFS= read -r branch; do
              [[ "$branch" == "origin/master" ]] && ON_MASTER="true"
              [[ "$branch" == origin/release/* ]] && ON_RELEASE="true"
            done <<< "$CONTAINING_BRANCHES"

            if [[ "$VERSION" == *-* ]]; then
              if [[ "$ON_RELEASE" != "true" ]]; then
                echo "ERROR: Pre-release version $VERSION must be on origin/release/*"
                exit 1
              fi
            else
              if [[ "$ON_MASTER" != "true" ]]; then
                echo "ERROR: Stable version $VERSION must be on origin/master"
                exit 1
              fi
            fi
          fi

          echo "version=${VERSION}" >> "$GITHUB_OUTPUT"
          echo "publish_target=${PUBLISH_TARGET}" >> "$GITHUB_OUTPUT"
          echo "Package version: ${VERSION}"
          echo "Publish target: ${PUBLISH_TARGET}"

      - uses: actions/setup-dotnet@v4
        with:
          dotnet-version: "10.0.x"

      - name: Install iOS workload
        run: |
          dotnet workload install ios

      - name: Cache NuGet
        uses: actions/cache@v4
        with:
          path: ~/.nuget/packages
          key: ${{ runner.os }}-nuget-${{ hashFiles('global.json', '**/*.csproj') }}

      - name: Build iOS wrapper
        run: |
          bash src/Kapusch.StoreKit2ApisForiOSComponents/Native/iOS/build.sh

      - name: Pack
        run: |
          dotnet pack src/Kapusch.StoreKit2ApisForiOSComponents/Kapusch.StoreKit2ApisForiOSComponents.csproj \
            -c Release \
            -o artifacts/nuget \
            /p:PackageVersion="${{ steps.version.outputs.version }}"

      - name: Validate nupkg layout
        run: |
          python3 - <<'PY'
          import glob, sys, zipfile

          nupkgs = glob.glob("artifacts/nuget/*.nupkg")
          if not nupkgs:
            print("ERROR: no .nupkg found under artifacts/nuget/")
            sys.exit(1)

          nupkg = sorted(nupkgs)[-1]
          print(f"Validating {nupkg}")

          z = zipfile.ZipFile(nupkg)
          names = set(z.namelist())

          required = [
            "buildTransitive/Kapusch.StoreKit2.iOS.targets",
            "kstorekit2.xcframework/Info.plist",
          ]

          missing = [p for p in required if p not in names]
          if missing:
            print("ERROR: missing required paths in nupkg:")
            for p in missing:
              print(f"  - {p}")
            sys.exit(1)

          if "Info.plist" in names:
            print("ERROR: wrapper appears flattened (found 'Info.plist' at package root).")
            sys.exit(1)

          print("OK: nupkg layout looks correct.")
          PY

      - name: Push to NuGet.org
        if: steps.version.outputs.publish_target == 'nuget'
        uses: NuGet/login@v1
        id: nuget_login
        with:
          user: ${{ secrets.NUGET_USER }}

      - name: Publish to NuGet.org
        if: steps.version.outputs.publish_target == 'nuget'
        run: |
          dotnet nuget push artifacts/nuget/*.nupkg \
            --api-key "${{ steps.nuget_login.outputs.NUGET_API_KEY }}" \
            --source "https://api.nuget.org/v3/index.json" \
            --skip-duplicate

      - name: Publish to GitHub Packages
        if: steps.version.outputs.publish_target == 'github'
        env:
          NUGET_AUTH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        run: |
          dotnet nuget push artifacts/nuget/*.nupkg \
            --api-key "$NUGET_AUTH_TOKEN" \
            --source "https://nuget.pkg.github.com/${{ github.repository_owner }}/index.json" \
            --skip-duplicate