release.yml

# This is a GitHub workflow, defining a set of jobs each with a set of steps.
#
# The workflow will run when a git tag like v1.2.3 is pushed, and publish a
# release to the chosen sysand index using trusted publishing.
#
# trusted publishing reference:  https://docs.sysand.com/tutorial/setting-up-trusted-publishing
# workflow config reference:     https://docs.github.com/en/actions/reference/workflows-and-actions/workflow-syntax
# installation script reference: https://client.sysand.com/getting-started/installation.html#macos-and-linux
#
name: Release

on:
  push:
    tags: ["v*"]

env:
  SYSAND_INDEX_URL: https://sysand.com
  PACKAGE_DIR: simulation_analysis

jobs:
  test:
    runs-on: ubuntu-latest
    permissions:
      contents: read
    steps:
      - uses: actions/checkout@v6

      - name: Install sysand
        run: |
          curl -fsSL https://sysand.com/install.sh | SYSAND_VERSION=latest sh

      - name: Check version in git tag matches the project's declared version
        run: |
          cd ${PACKAGE_DIR}
          PROJECT_VERSION="$(sysand info version)"
          TAG_VERSION="${GITHUB_REF_NAME#v}"
          if [ "$PROJECT_VERSION" != "$TAG_VERSION" ]; then
            echo "Project version ${PROJECT_VERSION} does not match tag ${GITHUB_REF_NAME}"
            exit 1
          fi

  publish:
    runs-on: ubuntu-latest
    needs: [test]
    environment: sysand
    permissions:
      contents: read
      id-token: write
    steps:
      - uses: actions/checkout@v6

      - name: Install sysand
        run: |
          curl -fsSL https://sysand.com/install.sh | SYSAND_VERSION=latest sh

      - name: Build and publish the project to the index
        run: |
          cd ${PACKAGE_DIR}
          sysand build
          sysand publish --index "${SYSAND_INDEX_URL}" -v
      
      - name: Store kpars
        uses: actions/upload-artifact@v7
        with:
          path: ./**/output/*.kpar
          archive: false