release.yml

name: Release

on:
  push:
    tags:
      - 'v*'

env:
  CARGO_TERM_COLOR: always

permissions:
  contents: write
  id-token: write

jobs:
  notify-start:
    name: Initialize Slack Notification
    runs-on: ubuntu-latest
    outputs:
      slack_ts: ${{ steps.slack.outputs.ts }}

    steps:
      - name: Post initial Slack message
        id: slack
        uses: slackapi/slack-github-action@v2.0.0
        with:
          method: chat.postMessage
          token: ${{ secrets.SLACK_BOT_TOKEN }}
          payload: |
            channel: ${{ secrets.SLACK_CHANNEL_ID }}
            text: "Release ${{ github.ref_name }} started"
            blocks:
              - type: "section"
                text:
                  type: "mrkdwn"
                  text: "*Release ${{ github.ref_name }}*\n\n:hourglass: Running tests...\n:white_square: Creating release...\n:white_square: Publishing SDKs..."
              - type: "context"
                elements:
                  - type: "mrkdwn"
                    text: "Triggered by ${{ github.actor }} | <${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}|View Workflow>"

      - name: Save Slack timestamp to artifact
        run: |
          mkdir -p slack-data
          echo "${{ steps.slack.outputs.ts }}" > slack-data/message_ts.txt
          echo "${{ github.ref_name }}" > slack-data/version.txt

      - name: Upload Slack data
        uses: actions/upload-artifact@v4
        with:
          name: slack-notification-data
          path: slack-data/
          retention-days: 1

  detect-prerelease:
    name: Detect Pre-release
    runs-on: ubuntu-latest
    outputs:
      is_prerelease: ${{ steps.check.outputs.is_prerelease }}
      npm_tag: ${{ steps.check.outputs.npm_tag }}

    steps:
      - name: Check tag format
        id: check
        run: |
          TAG="${{ github.ref_name }}"
          if [[ "$TAG" =~ -alpha$ ]]; then
            echo "is_prerelease=true" >> $GITHUB_OUTPUT
            echo "npm_tag=alpha" >> $GITHUB_OUTPUT
            echo "Detected pre-release: true (alpha)"
          elif [[ "$TAG" =~ -beta$ ]]; then
            echo "is_prerelease=true" >> $GITHUB_OUTPUT
            echo "npm_tag=beta" >> $GITHUB_OUTPUT
            echo "Detected pre-release: true (beta)"
          elif [[ "$TAG" =~ -rc$ ]]; then
            echo "is_prerelease=true" >> $GITHUB_OUTPUT
            echo "npm_tag=rc" >> $GITHUB_OUTPUT
            echo "Detected pre-release: true (rc)"
          else
            echo "is_prerelease=false" >> $GITHUB_OUTPUT
            echo "npm_tag=latest" >> $GITHUB_OUTPUT
            echo "Detected stable release (npm tag: latest)"
          fi

  test-node:
    name: Test Node.js SDK
    runs-on: ubuntu-latest
    defaults:
      run:
        working-directory: packages/node

    steps:
      - name: Checkout code
        uses: actions/checkout@v4

      - name: Setup Node.js
        uses: actions/setup-node@v4
        with:
          node-version: '20'

      - name: Install pnpm
        uses: pnpm/action-setup@v4
        with:
          version: 10
          run_install: false

      - name: Install dependencies
        run: pnpm install --frozen-lockfile

      - name: Type check
        run: pnpm --filter iii-sdk exec tsc --noEmit

      - name: Build
        run: pnpm build

  test-python:
    name: Test Python SDK
    runs-on: ubuntu-latest
    defaults:
      run:
        working-directory: packages/python/iii

    steps:
      - name: Checkout code
        uses: actions/checkout@v4

      - name: Setup Python
        uses: actions/setup-python@v5
        with:
          python-version: '3.12'
          cache: 'pip'

      - name: Setup uv
        uses: astral-sh/setup-uv@v5

      - name: Install dependencies
        run: uv sync --extra dev

      - name: Lint
        run: uv run ruff check src

      - name: Type check
        run: uv run mypy src

      - name: Start III Engine
        working-directory: .
        run: |
          curl -fsSl https://raw.githubusercontent.com/iii-hq/iii/main/install.sh | sh
          which iii
          iii -v

          iii --config "${{ github.workspace }}/.github/engine-config/test-config.yml" > /tmp/iii-engine.log 2>&1 &
          echo $! > /tmp/iii-engine.pid

          echo "Waiting for III Engine on port 49134..."
          for i in $(seq 1 30); do
            if nc -z 127.0.0.1 49134 2>/dev/null; then
              echo "III Engine is ready!"
              exit 0
            fi
            echo "  attempt $i/30..."
            sleep 2
          done
          echo "Engine did not become ready. Logs:"
          tail -n 50 /tmp/iii-engine.log || true
          exit 1

      - name: Run tests
        run: uv run pytest -q

      - name: Stop III Engine
        if: always()
        run: |
          if [ -f /tmp/iii-engine.pid ]; then
            kill "$(cat /tmp/iii-engine.pid)" || true
          fi

  test-rust:
    name: Test Rust SDK
    runs-on: ubuntu-latest
    defaults:
      run:
        working-directory: packages/rust/iii

    steps:
      - name: Checkout code
        uses: actions/checkout@v4

      - name: Install Rust toolchain
        uses: dtolnay/rust-toolchain@stable
        with:
          components: rustfmt, clippy

      - name: Cache cargo registry & build
        uses: Swatinem/rust-cache@v2

      - name: Check formatting
        run: cargo fmt --all -- --check

      - name: Run clippy
        run: cargo clippy --all-targets --all-features -- -D warnings

      - name: Start III Engine
        working-directory: .
        run: |
          curl -fsSl https://raw.githubusercontent.com/iii-hq/iii/main/install.sh | sh
          which iii
          iii --version
          iii -v

          iii --config "${{ github.workspace }}/.github/engine-config/test-config.yml" > /tmp/iii-engine.log 2>&1 &
          echo $! > /tmp/iii-engine.pid

          echo "Waiting for III Engine on port 49134..."
          for i in $(seq 1 30); do
            if nc -z 127.0.0.1 49134 2>/dev/null; then
              echo "III Engine is ready!"
              exit 0
            fi
            echo "  attempt $i/30..."
            sleep 2
          done
          echo "Engine did not become ready. Logs:"
          tail -n 50 /tmp/iii-engine.log || true
          exit 1

      - name: Run tests
        run: cargo test --all-features --quiet

      - name: Stop III Engine
        if: always()
        run: |
          if [ -f /tmp/iii-engine.pid ]; then
            kill "$(cat /tmp/iii-engine.pid)" || true
          fi

  create-release:
    name: Create Release
    needs: [notify-start, detect-prerelease, test-node, test-python, test-rust]
    runs-on: ubuntu-latest
    permissions:
      contents: write

    steps:
      - name: Generate token
        id: generate_token
        uses: actions/create-github-app-token@v2
        with:
          app-id: ${{ secrets.III_CI_APP_ID }}
          private-key: ${{ secrets.III_CI_APP_PRIVATE_KEY }}
          permission-contents: write

      - name: Checkout code
        uses: actions/checkout@v4

      - name: Create Release
        uses: softprops/action-gh-release@v2
        with:
          token: ${{ steps.generate_token.outputs.token }}
          draft: false
          prerelease: ${{ needs.detect-prerelease.outputs.is_prerelease == 'true' }}
          generate_release_notes: true

      - name: Update Slack - Tests passed, release created
        uses: slackapi/slack-github-action@v2.0.0
        with:
          method: chat.update
          token: ${{ secrets.SLACK_BOT_TOKEN }}
          payload: |
            channel: ${{ secrets.SLACK_CHANNEL_ID }}
            ts: ${{ needs.notify-start.outputs.slack_ts }}
            text: "Release ${{ github.ref_name }} in progress"
            blocks:
              - type: "section"
                text:
                  type: "mrkdwn"
                  text: "*Release ${{ github.ref_name }}*\n\n:white_check_mark: Tests passed (Node, Python, Rust)\n:white_check_mark: Release created\n:hourglass: Publishing SDKs..."
              - type: "context"
                elements:
                  - type: "mrkdwn"
                    text: "Triggered by ${{ github.actor }} | <${{ github.server_url }}/${{ github.repository }}/releases/tag/${{ github.ref_name }}|View Release>"

  publish-node:
    name: Publish Node SDK
    needs: [detect-prerelease, create-release]
    runs-on: ubuntu-latest

    steps:
      - name: Checkout code
        uses: actions/checkout@v4

      - name: Setup Node.js
        uses: actions/setup-node@v4
        with:
          node-version: '20'
          registry-url: 'https://registry.npmjs.org'

      - name: Install pnpm
        uses: pnpm/action-setup@v4
        with:
          version: 10

      - name: Install dependencies
        working-directory: packages/node
        run: pnpm install --frozen-lockfile

      - name: Build SDK
        working-directory: packages/node/iii
        run: pnpm build

      - name: Publish to npm
        working-directory: packages/node/iii
        run: pnpm publish --access public --no-git-checks --tag ${{ needs.detect-prerelease.outputs.npm_tag }}
        env:
          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}

  publish-python:
    name: Publish Python SDK
    needs: [create-release]
    runs-on: ubuntu-latest
    permissions:
      contents: read
      id-token: write

    steps:
      - name: Checkout code
        uses: actions/checkout@v4

      - name: Setup Python
        uses: actions/setup-python@v5
        with:
          python-version: '3.12'

      - name: Install build tools
        run: pip install build

      - name: Build package
        working-directory: packages/python/iii
        run: python -m build

      - name: Publish to PyPI
        uses: pypa/gh-action-pypi-publish@release/v1
        with:
          packages-dir: packages/python/iii/dist/
          password: ${{ secrets.PYPI_API_TOKEN }}

  publish-rust:
    name: Publish Rust SDK
    needs: [create-release]
    runs-on: ubuntu-latest

    steps:
      - name: Checkout code
        uses: actions/checkout@v4

      - name: Install Rust toolchain
        uses: dtolnay/rust-toolchain@stable

      - name: Cache cargo registry & build
        uses: Swatinem/rust-cache@v2
        with:
          workspaces: packages/rust/iii

      - name: Publish to crates.io
        working-directory: packages/rust/iii
        run: cargo publish
        env:
          CARGO_REGISTRY_TOKEN: ${{ secrets.CARGO_REGISTRY_TOKEN }}

  notify-complete:
    name: Update Release Status
    needs: [notify-start, publish-node, publish-python, publish-rust]
    runs-on: ubuntu-latest
    if: always()

    steps:
      - name: Check results
        id: results
        run: |
          NODE_RESULT='${{ needs.publish-node.result }}'
          PYTHON_RESULT='${{ needs.publish-python.result }}'
          RUST_PUBLISH_RESULT='${{ needs.publish-rust.result }}'

          NODE_ICON="white_check_mark"
          PYTHON_ICON="white_check_mark"
          RUST_PUBLISH_ICON="white_check_mark"

          if [ "$NODE_RESULT" != "success" ]; then NODE_ICON="x"; fi
          if [ "$PYTHON_RESULT" != "success" ]; then PYTHON_ICON="x"; fi
          if [ "$RUST_PUBLISH_RESULT" != "success" ]; then RUST_PUBLISH_ICON="x"; fi

          echo "node_icon=$NODE_ICON" >> $GITHUB_OUTPUT
          echo "python_icon=$PYTHON_ICON" >> $GITHUB_OUTPUT
          echo "rust_publish_icon=$RUST_PUBLISH_ICON" >> $GITHUB_OUTPUT

      - name: Update Slack - Release Complete
        uses: slackapi/slack-github-action@v2.0.0
        with:
          method: chat.update
          token: ${{ secrets.SLACK_BOT_TOKEN }}
          payload: |
            channel: ${{ secrets.SLACK_CHANNEL_ID }}
            ts: ${{ needs.notify-start.outputs.slack_ts }}
            text: "Release ${{ github.ref_name }} complete"
            blocks:
              - type: "section"
                text:
                  type: "mrkdwn"
                  text: "*Release ${{ github.ref_name }}*\n\n:white_check_mark: Tests passed (Node, Python, Rust)\n:white_check_mark: Release created\n:${{ steps.results.outputs.node_icon }}: Node SDK published to npm\n:${{ steps.results.outputs.python_icon }}: Python SDK published to PyPI\n:${{ steps.results.outputs.rust_publish_icon }}: Rust SDK published to crates.io"
              - type: "context"
                elements:
                  - type: "mrkdwn"
                    text: "Triggered by ${{ github.actor }} | <${{ github.server_url }}/${{ github.repository }}/releases/tag/${{ github.ref_name }}|View Release>"