release.yaml

name: Build and Release (.sbaa) — Manual

on:
  workflow_dispatch:
    inputs:
      version:
        description: "Version number (e.g. 0.2.3). A git tag v<version> will be created."
        required: true
        type: string
      prerelease:
        description: "Mark as pre-release (won't become 'latest')"
        required: false
        default: false
        type: boolean
      verify_manifest_version:
        description: "Fail if manifest.json version != input version"
        required: false
        default: true
        type: boolean

permissions:
  contents: write

jobs:
  release:
    runs-on: ubuntu-latest

    steps:
      - name: Validate version input
        shell: bash
        run: |
          set -euo pipefail
          VERSION="${{ inputs.version }}"
          if [[ ! "$VERSION" =~ ^[0-9]+\.[0-9]+\.[0-9]+$ ]]; then
            echo "Invalid version '$VERSION'. Expected format: X.Y.Z (e.g. 0.2.3)"
            exit 1
          fi
          echo "TAG=v$VERSION" >> "$GITHUB_ENV"
          echo "VERSION=$VERSION" >> "$GITHUB_ENV"

      - name: Checkout
        uses: actions/checkout@v4
        with:
          fetch-depth: 0  # needed to create tags safely

      - name: Verify manifest.json version matches input (optional)
        if: ${{ inputs.verify_manifest_version }}
        shell: bash
        run: |
          set -euo pipefail
          MANIFEST_FILE="ch.axlabs.banana.ictax-fx.manifest.json"
          test -f "$MANIFEST_FILE"

          # Extract the first JSON string value for the "version" key.
          MANIFEST_VERSION="$(sed -n 's/.*"version"[[:space:]]*:[[:space:]]*"\([^"]*\)".*/\1/p' "$MANIFEST_FILE" | head -n 1)"

          if [ -z "$MANIFEST_VERSION" ]; then
            echo "Could not extract version from $MANIFEST_FILE"
            exit 1
          fi

          if [ "$MANIFEST_VERSION" != "$VERSION" ]; then
            echo "$MANIFEST_FILE version '$MANIFEST_VERSION' does not match input version '$VERSION'"
            exit 1
          fi

          echo "OK: $MANIFEST_FILE version matches."

      - name: Ensure tag does not already exist
        shell: bash
        run: |
          set -euo pipefail
          if git rev-parse "$TAG" >/dev/null 2>&1; then
            echo "Tag $TAG already exists. Aborting."
            exit 1
          fi

      - name: Build package (.sbaa)
        shell: bash
        run: |
          set -euo pipefail
          make docker-package
          ls -la dist
          test -f dist/ch.axlabs.banana.ictax-fx.sbaa

      - name: Create and push git tag
        shell: bash
        run: |
          set -euo pipefail
          git config user.name "github-actions[bot]"
          git config user.email "github-actions[bot]@users.noreply.github.com"

          git tag -a "$TAG" -m "Release $TAG"
          git push origin "$TAG"

      - name: Create GitHub Release and upload asset
        uses: softprops/action-gh-release@v2
        with:
          tag_name: ${{ env.TAG }}
          name: ${{ env.TAG }}
          prerelease: ${{ inputs.prerelease }}
          generate_release_notes: true
          files: |
            dist/ch.axlabs.banana.ictax-fx.sbaa