release-pypi.yml

name: PyPI Release

on:
  push:
    tags:
      - "v*.*.*"
  workflow_dispatch:

permissions:
  id-token: write
  contents: read

env:
  CARGO_TERM_COLOR: always
  SMB_CLIENT_ID: ${{ secrets.SMB_CLIENT_ID }}
  SMB_CLIENT_SECRET: ${{ secrets.SMB_CLIENT_SECRET }}
  SMB_API_HOST: ${{ secrets.SMB_API_HOST }}
  SMB_API_PROTOCOL: ${{ secrets.SMB_API_PROTOCOL }}
  GH_OAUTH_CLIENT_ID: ${{ secrets.GH_OAUTH_CLIENT_ID }}
  GH_OAUTH_CLIENT_SECRET: ${{ secrets.GH_OAUTH_CLIENT_SECRET }}
  GH_OAUTH_REDIRECT_HOST: ${{ secrets.GH_OAUTH_REDIRECT_HOST }}
  GH_OAUTH_REDIRECT_PORT: ${{ secrets.GH_OAUTH_REDIRECT_PORT }}

jobs:
  build-wheels:
    name: Build PyPI wheels
    runs-on: ${{ matrix.build.OS }}
    strategy:
      fail-fast: false
      matrix:
        build:
          - {
              NAME: linux-x64-glibc,
              OS: ubuntu-latest,
              TARGET: x86_64-unknown-linux-gnu,
              MANYLINUX: "2014",
            }
          # Cannot cross-compile for now
          #- {
          #    NAME: linux-arm64-glibc,
          #    OS: ubuntu-latest,
          #    TOOLCHAIN: stable,
          #    TARGET: aarch64-unknown-linux-gnu,
          #  }
          - {
              NAME: win32-x64-msvc,
              OS: windows-2022,
              TARGET: x86_64-pc-windows-msvc,
            }
          - {
              NAME: win32-arm64-msvc,
              OS: windows-2022,
              TARGET: aarch64-pc-windows-msvc,
            }
          - {
              NAME: darwin-x64,
              OS: macos-latest,
              TARGET: x86_64-apple-darwin,
            }
          - {
              NAME: darwin-arm64,
              OS: macos-latest,
              TARGET: aarch64-apple-darwin,
            }
    steps:
      - name: Checkout
        uses: actions/checkout@v6

      - name: Set the release version
        shell: bash
        run: |
          if [[ "${GITHUB_REF_TYPE}" == "tag" ]]; then
            release_version="${GITHUB_REF_NAME#v}"
          else
            release_version="$(sed -n 's/^version = "\(.*\)"/\1/p' crates/cli/Cargo.toml | head -n 1)"
          fi

          echo "RELEASE_VERSION=${release_version}" >> "$GITHUB_ENV"

      - name: Read Rust toolchain
        shell: bash
        run: |
          rust_toolchain="$(sed -n 's/^channel = "\(.*\)"/\1/p' rust-toolchain.toml | head -n 1)"
          if [ -z "$rust_toolchain" ]; then
            echo "Failed to read Rust toolchain from rust-toolchain.toml" >&2
            exit 1
          fi

          echo "RUST_TOOLCHAIN=${rust_toolchain}" >> "$GITHUB_ENV"

      - name: Install toolkit
        uses: dtolnay/rust-toolchain@3c5f7ea28cd621ae0bf5283f0e981fb97b8a7af9
        with:
          toolchain: ${{ env.RUST_TOOLCHAIN }}

      - name: Install Rust target
        shell: bash
        run: |
          rustup target add ${{ matrix.build.TARGET }} --toolchain ${{ env.RUST_TOOLCHAIN }}
          rustup target list --installed

      - name: Create .env file
        run: |
          touch .env
          echo CLI_CLIENT_SECRET=${{ secrets.CLI_CLIENT_SECRET }} >> .env
          cat .env

      - name: Build wheel
        uses: PyO3/maturin-action@v1
        with:
          target: ${{ matrix.build.TARGET }}
          manylinux: ${{ matrix.build.MANYLINUX || 'off' }}
          working-directory: pypi
          args: --release --locked --compatibility pypi --out dist

      - name: Upload wheel artifact
        uses: actions/upload-artifact@v4
        with:
          name: wheels-${{ matrix.build.NAME }}
          path: pypi/dist/*

  build-sdist:
    name: Build source distribution
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v6

      - name: Set the release version
        shell: bash
        run: |
          if [[ "${GITHUB_REF_TYPE}" == "tag" ]]; then
            release_version="${GITHUB_REF_NAME#v}"
          else
            release_version="$(sed -n 's/^version = "\(.*\)"/\1/p' crates/cli/Cargo.toml | head -n 1)"
          fi

          echo "RELEASE_VERSION=${release_version}" >> "$GITHUB_ENV"

      - name: Read Rust toolchain
        shell: bash
        run: |
          rust_toolchain="$(sed -n 's/^channel = "\(.*\)"/\1/p' rust-toolchain.toml | head -n 1)"
          if [ -z "$rust_toolchain" ]; then
            echo "Failed to read Rust toolchain from rust-toolchain.toml" >&2
            exit 1
          fi

          echo "RUST_TOOLCHAIN=${rust_toolchain}" >> "$GITHUB_ENV"

      - name: Install toolkit
        uses: dtolnay/rust-toolchain@3c5f7ea28cd621ae0bf5283f0e981fb97b8a7af9
        with:
          toolchain: ${{ env.RUST_TOOLCHAIN }}

      - name: Create .env file
        run: |
          touch .env
          echo CLI_CLIENT_SECRET=${{ secrets.CLI_CLIENT_SECRET }} >> .env
          cat .env

      - name: Build sdist
        uses: PyO3/maturin-action@v1
        with:
          command: sdist
          working-directory: pypi
          args: --out dist

      - name: Upload sdist artifact
        uses: actions/upload-artifact@v4
        with:
          name: sdist
          path: pypi/dist/*

  publish-pypi:
    name: Publish to PyPI
    runs-on: ubuntu-latest
    needs:
      - build-wheels
      - build-sdist

    steps:
      - name: Checkout
        uses: actions/checkout@v6

      - name: Set the release version
        shell: bash
        run: |
          if [[ "${GITHUB_REF_TYPE}" == "tag" ]]; then
            release_version="${GITHUB_REF_NAME#v}"
          else
            release_version="$(sed -n 's/^version = "\(.*\)"/\1/p' crates/cli/Cargo.toml | head -n 1)"
          fi

          echo "RELEASE_VERSION=${release_version}" >> "$GITHUB_ENV"

      - name: Download distribution artifacts
        uses: actions/download-artifact@v4
        with:
          pattern: "*"
          path: dist
          merge-multiple: true

      - name: Check whether release already exists on PyPI
        shell: bash
        run: |
          if curl -fsS "https://pypi.org/pypi/smbcloud-cli/${RELEASE_VERSION}/json" >/dev/null 2>&1; then
            echo "smbcloud-cli ${RELEASE_VERSION} already exists on PyPI, skipping publish"
            exit 0
          fi

      - name: Publish distribution
        uses: pypa/gh-action-pypi-publish@release/v1