name: Release (App Store Connect)

on:
  push:
    branches:
      - main

jobs:
  wake-macos-vm:
    runs-on: docker
    container:
      image: alpine:3.20
    steps:
      - name: Install ssh client
        run: apk add --no-cache openssh-client
      - name: Start macOS VM container
        run: |
          mkdir -p ~/.ssh
          echo "${{ secrets.VPS_SSH_KEY }}" > ~/.ssh/id_ed25519
          chmod 600 ~/.ssh/id_ed25519
          ssh -o StrictHostKeyChecking=no -i ~/.ssh/id_ed25519 \
            ${{ secrets.VPS_SSH_USER }}@${{ secrets.VPS_SSH_HOST }} start

  build-archive-deliver:
    needs: wake-macos-vm
    runs-on: macos-release

    env:
      APPLE_ID: ${{ secrets.APPLE_ID }}
      ITC_TEAM_ID: ${{ secrets.ITC_TEAM_ID }}
      DEVELOPMENT_TEAM: ${{ secrets.DEVELOPMENT_TEAM }}

    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Verify ASC secrets
        run: |
          if [ -z "${{ secrets.ASC_KEY_ID }}" ]; then
            echo "ERROR: ASC_KEY_ID is empty"
            exit 1
          fi

      - name: Set build number
        run: |
          cd Darwin
          agvtool new-version -all ${{ gitea.run_number }}

      - name: Write App Store Connect API key
        run: |
          cat > Darwin/fastlane/apikey.json <<EOF
          {
            "key_id": "${{ secrets.ASC_KEY_ID }}",
            "issuer_id": "${{ secrets.ASC_ISSUER_ID }}",
            "key": "${{ secrets.ASC_KEY_CONTENT }}",
            "is_key_content_base64": true,
            "duration": 1200,
            "in_house": false
          }
          EOF

      - name: fastlane release
        run: |
          cd Darwin
          fastlane release

      - name: Clean up API key
        if: always()
        run: rm -f Darwin/fastlane/apikey.json

  sleep-macos-vm:
    needs: build-archive-deliver
    if: always()
    runs-on: docker
    container:
      image: alpine:3.20
    steps:
      - name: Install ssh client
        run: apk add --no-cache openssh-client
      - name: Stop macOS VM container
        run: |
          mkdir -p ~/.ssh
          echo "${{ secrets.VPS_SSH_KEY }}" > ~/.ssh/id_ed25519
          chmod 600 ~/.ssh/id_ed25519
          ssh -o StrictHostKeyChecking=no -i ~/.ssh/id_ed25519 \
            ${{ secrets.VPS_SSH_USER }}@${{ secrets.VPS_SSH_HOST }} stop