name: Release

on:
  push:
    tags:
      - "v*"

permissions:
  contents: write

jobs:
  build:
    runs-on: macos-15
    steps:
      - uses: actions/checkout@v4

      - name: Unlock keychain for signing
        run: security unlock-keychain -p "" ~/Library/Keychains/login.keychain-db 2>/dev/null || true

      - name: Build and package
        run: |
          ./build-app.sh
          mkdir -p dist
          ditto -c -k --keepParent Kapture.app dist/Kapture.zip
          shasum -a 256 dist/Kapture.zip

      - name: Create GitHub release
        env:
          GH_TOKEN: ${{ github.token }}
        run: |
          gh release create "${{ github.ref_name }}" dist/Kapture.zip \
            --title "${{ github.ref_name }}" \
            --generate-notes