name: Build macOS

on:
  push:
    branches: [main]
  pull_request:
    branches: [main]

jobs:
  build:
    runs-on: macos-latest

    steps:
      - name: Checkout repository
        uses: actions/checkout@v4

      - name: Set up Node.js
        uses: actions/setup-node@v4
        with:
          node-version: 22

      - name: Install dependencies
        run: npm install
        working-directory: simpliplay

      - name: Create a temporary keychain
        run: |
          security create-keychain -p "" build.keychain
          security list-keychains -s build.keychain login.keychain-db
          security unlock-keychain -p "" build.keychain

      - name: Import macOS certificate
        env:
          CERT_P12_BASE64: ${{ secrets.MAC_CERTIFICATE_P12 }}
          CERT_PASSWORD: "${{ secrets.MAC_CERTIFICATE_PASSWORD }}"
        run: |
          echo "$CERT_P12_BASE64" | base64 -D > cert.p12

          security import cert.p12 \
            -k build.keychain \
            -P "$CERT_PASSWORD" \
            -T /usr/bin/codesign

          security set-key-partition-list \
            -S apple-tool:,apple: \
            -s \
            -k "" \
            build.keychain


      - name: Build macOS
        env:
          CSC_IDENTITY_AUTO_DISCOVERY: false
          CSC_KEYCHAIN: build.keychain
          CSC_NAME: "Anirudh Sevugan"
          CSC_KEY_PASSWORD: "${{ secrets.MAC_CERTIFICATE_PASSWORD }}"
        run: npx electron-builder --mac --x64 --arm64 --universal
        working-directory: simpliplay

      - name: Upload artifacts
        uses: actions/upload-artifact@v4
        with:
          name: builds
          path: simpliplay/dist/*.dmg

      - name: Delete temporary keychain
        if: always()
        run: |
          security delete-keychain build.keychain