release.yml

name: Release

on:
  push:
    tags:
      - 'v*'

permissions:
  contents: write

jobs:
  build:
    # Same self-hosted mini as ci.yml: the persistent Bazel disk cache is what
    # keeps the -c opt LLVM build from approaching GitHub's job cap (a cold
    # hosted runner rebuilds the patched llvm-project from source every tag).
    # The runner executes one job at a time, so a release queues behind any
    # in-flight CI run instead of contending with it.
    runs-on: [self-hosted, macOS, ARM64]
    timeout-minutes: 180
    env:
      # Must match the .bazelrc --xcode_version pin.
      DEVELOPER_DIR: /Applications/Xcode-26.2.0.app/Contents/Developer
    steps:
      - uses: actions/checkout@v7

      - name: Get version from tag
        id: version
        run: |
          VERSION=${GITHUB_REF#refs/tags/v}
          echo "VERSION=$VERSION" >> "$GITHUB_OUTPUT"

      # release_tarball packages the binary WITH its runfiles tree
      # (PreviewAgent, orc runtime, iOS JIT resources) — a bare binary's
      # render path throws at runtime (#366).
      - name: Build release tarball
        run: bazel build -c opt //previewsmcp/cli:release_tarball

      - name: Stage versioned artifact
        env:
          VERSION: ${{ steps.version.outputs.VERSION }}
        run: |
          STAGING="previewsmcp-${VERSION}-darwin-arm64"
          cp -f bazel-bin/previewsmcp/cli/previewsmcp-darwin-arm64.tar.gz "${STAGING}.tar.gz"
          shasum -a 256 "${STAGING}.tar.gz" > "${STAGING}.tar.gz.sha256"

      - name: Create GitHub Release
        env:
          GH_TOKEN: ${{ github.token }}
          VERSION: ${{ steps.version.outputs.VERSION }}
        run: |
          STAGING="previewsmcp-${VERSION}-darwin-arm64"
          gh release create "v${VERSION}" \
            "${STAGING}.tar.gz" \
            "${STAGING}.tar.gz.sha256" \
            --title "v${VERSION}" \
            --generate-notes

      - name: Update Homebrew tap
        env:
          VERSION: ${{ steps.version.outputs.VERSION }}
          HOMEBREW_TAP_TOKEN: ${{ secrets.HOMEBREW_TAP_TOKEN }}
        run: |
          if [ -z "$HOMEBREW_TAP_TOKEN" ]; then
            echo "HOMEBREW_TAP_TOKEN not set, skipping Homebrew tap update"
            exit 0
          fi

          STAGING="previewsmcp-${VERSION}-darwin-arm64"
          SHA256="$(awk '{print $1}' "${STAGING}.tar.gz.sha256")"
          URL="https://github.com/obj-p/PreviewsMCP/releases/download/v${VERSION}/${STAGING}.tar.gz"

          bash scripts/generate-formula.sh "$VERSION" "$URL" "$SHA256" > previewsmcp.rb

          git clone "https://x-access-token:${HOMEBREW_TAP_TOKEN}@github.com/obj-p/homebrew-tap.git" tap-repo
          mkdir -p tap-repo/Formula
          cp previewsmcp.rb tap-repo/Formula/previewsmcp.rb
          cd tap-repo
          git config user.name "github-actions[bot]"
          git config user.email "github-actions[bot]@users.noreply.github.com"
          git add Formula/previewsmcp.rb
          if git diff --cached --quiet; then
            echo "Formula already up to date"
            exit 0
          fi
          git commit -m "previewsmcp ${VERSION}"
          git push origin main