build.yml

name: Build and Release

on:
  push:
    branches:
      - main

  workflow_dispatch:

permissions:
  contents: write

jobs:
  build:
    strategy:
      fail-fast: false
      matrix:
        include:
          - os: ubuntu-latest
            name: linux
            archive: pytextsearch-linux.tar.gz

          - os: windows-latest
            name: windows
            archive: pytextsearch-windows.zip

          - os: macos-latest
            name: macos
            archive: pytextsearch-macos.tar.gz

    runs-on: ${{ matrix.os }}

    steps:
      - name: Checkout repository
        uses: actions/checkout@v4

      - name: Set up Python
        uses: actions/setup-python@v5
        with:
          python-version: "3.12.10"

      - name: Install dependencies
        run: |
          python -m pip install --upgrade pip
          python -m pip install rich cryptography nuitka

      - name: Build with Nuitka
        run: |
          python -m nuitka --standalone --follow-imports --assume-yes-for-downloads --output-dir=build textscan.py

      # Create the package OUTSIDE the repository so copying the repository
      # cannot recursively copy the package directory into itself.
      - name: Create package directory
        shell: bash
        run: |
          PACKAGE_DIR="$RUNNER_TEMP/pytextsearch-package"

          rm -rf "$PACKAGE_DIR"
          mkdir -p "$PACKAGE_DIR"

          # Copy the entire repository.
          # Only Git metadata and GitHub workflow files are excluded.
          
          # Add the complete Nuitka standalone build.
          cp -a build/textscan.dist/. "$PACKAGE_DIR/"

          echo "PACKAGE_DIR=$PACKAGE_DIR" >> "$GITHUB_ENV"

      - name: Package Linux
        if: matrix.name == 'linux'
        shell: bash
        run: |
          tar -czf "${{ matrix.archive }}" \
            -C "$PACKAGE_DIR" .

      - name: Package macOS
        if: matrix.name == 'macos'
        shell: bash
        run: |
          tar -czf "${{ matrix.archive }}" \
            -C "$PACKAGE_DIR" .

      - name: Package Windows
        if: matrix.name == 'windows'
        shell: pwsh
        run: |
          Compress-Archive `
            -Path "$env:PACKAGE_DIR\*" `
            -DestinationPath "${{ matrix.archive }}"

      - name: Upload build
        uses: actions/upload-artifact@v4
        with:
          name: pytextsearch-${{ matrix.name }}
          path: ${{ matrix.archive }}

  release:
    needs: build
    runs-on: ubuntu-latest

    steps:
      - name: Download builds
        uses: actions/download-artifact@v4
        with:
          path: release
          merge-multiple: true

      - name: Create GitHub Release
        uses: softprops/action-gh-release@v2
        with:
          tag_name: build-${{ github.sha }}
          name: pytextsearch standalone
          make_latest: true
          generate_release_notes: false
          files: release/*

  cleanup-stale-tags:
    needs: release
    runs-on: ubuntu-latest

    steps:
      - name: Checkout repository
        uses: actions/checkout@v4
        with:
          fetch-depth: 0
          fetch-tags: true

      - name: Remove stale build tags
        env:
          GH_TOKEN: ${{ github.token }}
        run: |
          set -e

          echo "Getting tags associated with GitHub Releases..."

          gh release list \
            --limit 1000 \
            --json tagName \
            --jq '.[].tagName' > releases.txt

          echo
          echo "Released tags:"
          cat releases.txt || true

          echo
          echo "Checking build-* tags..."

          for tag in $(git tag -l 'build-*'); do
            if grep -Fxq "$tag" releases.txt; then
              echo "KEEP: $tag"
            else
              echo "DELETE: $tag"

              git push origin --delete "$tag"
              git tag -d "$tag"
            fi
          done

          echo
          echo "Stale tag cleanup complete."