beak-host.yml

name: beak-host

on:
  push:
    tags:
      - beak-app@*
    branches:
     - master
     - develop
  pull_request:
    branches:
      - '*'
    paths:
      - '.github/workflows/beak-host.yml'
      - 'package.json'
      - 'yarn.lock'
      - 'apps-host/**'
      - 'packages/**'

jobs:
  build-deploy:
    name: build, package, and upload or release
    runs-on: macos-latest
    steps:
      - name: Checkout code
        uses: actions/checkout@v4.2.2
      - uses: benjlevesque/short-sha@v3.0
        id: short-sha
        with:
          length: 6

      - name: Setup Node.js
        uses: actions/setup-node@v4.1.0
        with:
          node-version: '22'
          cache: 'yarn'
          cache-dependency-path: yarn.lock

      - name: Install modules
        run: yarn install --frozen-lockfile

      - name: Lint, typecheck, and test
        run: |
          yarn lint
          yarn typecheck:apps-host

      - name: Build and package (release)
        if: startsWith(github.ref, 'refs/tags/beak-app@')
        env:
          BUILD_ENVIRONMENT: ci
          COMMIT_IDENTIFIER: ${{ github.sha }}
          BUILD_NUMBER: ${{ steps.short-sha.outputs.sha }}
          VERSION_RELEASE: 'qui'
          SENTRY_AUTH_TOKEN: ${{ secrets.SENTRY_AUTH_TOKEN }}
          APPLE_ID: ${{ secrets.APPLE_ID }}
          APPLE_APP_SPECIFIC_PASSWORD: ${{ secrets.APPLE_APP_SPECIFIC_PASSWORD }}
          APPLE_TEAM_ID: ${{ secrets.APPLE_TEAM_ID }}
          AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
          AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
          CSC_LINK: ${{ secrets.CSC_LINK }}
          CSC_KEY_PASSWORD: ${{ secrets.CSC_KEY_PASSWORD }}
          CSC_FOR_PULL_REQUEST: true
          USE_HARD_LINKS: false
          NODE_OPTIONS: --max-old-space-size=8192
        run: yarn package:release

      - name: Build (non-release)
        if: startsWith(github.ref, 'refs/tags/beak-app@') == false
        env:
          BUILD_ENVIRONMENT: ci
          COMMIT_IDENTIFIER: ${{ github.sha }}
          BUILD_NUMBER: ${{ steps.short-sha.outputs.sha }}
          SENTRY_AUTH_TOKEN: ${{ secrets.SENTRY_AUTH_TOKEN }}
          APPLE_ID: ${{ secrets.APPLE_ID }}
          APPLE_APP_SPECIFIC_PASSWORD: ${{ secrets.APPLE_APP_SPECIFIC_PASSWORD }}
          APPLE_TEAM_ID: ${{ secrets.APPLE_TEAM_ID }}
          CSC_LINK: ${{ secrets.CSC_LINK }}
          CSC_KEY_PASSWORD: ${{ secrets.CSC_KEY_PASSWORD }}
          CSC_FOR_PULL_REQUEST: true
          USE_HARD_LINKS: false
          NODE_OPTIONS: --max-old-space-size=8192
        run: yarn package

      - name: Delete un-necessary artifacts
        if: startsWith(github.ref, 'refs/tags/v') == false
        run: |
          rm -rf ./apps-host/electron/dist-electron/.icon-ico
          rm -rf ./apps-host/electron/dist-electron/.icon-icns
          rm -rf ./apps-host/electron/dist-electron/mac
          rm -rf ./apps-host/electron/dist-electron/mac-arm64
          rm -rf ./apps-host/electron/dist-electron/win-unpacked
          rm -rf ./apps-host/electron/dist-electron/win-ia32-unpacked
          rm -rf ./apps-host/electron/dist-electron/linux-unpacked
      - name: Upload non-release artifacts to S3
        if: startsWith(github.ref, 'refs/tags/v') == false
        uses: shallwefootball/upload-s3-action@v1.3.3
        with:
          aws_key_id: ${{ secrets.AWS_ACCESS_KEY_ID }}
          aws_secret_access_key: ${{ secrets.AWS_SECRET_ACCESS_KEY}}
          aws_bucket: ${{ secrets.AWS_S3_BUILDS_BUCKET }}
          source_dir: 'apps-host/electron/dist-electron/'
          destination_dir: 'commits/${{ github.sha }}/'