ConfigKeyKit.yml

name: ConfigKeyKit
on:
  push:
    branches:
      - main
    paths-ignore:
      - '**.md'
      - 'docs/**'
      - 'LICENSE'
      - '.github/ISSUE_TEMPLATE/**'
  pull_request:
    paths-ignore:
      - '**.md'
      - 'docs/**'
      - 'LICENSE'
      - '.github/ISSUE_TEMPLATE/**'

concurrency:
  group: ${{ github.workflow }}-${{ github.head_ref || github.ref }}
  cancel-in-progress: true

env:
  PACKAGE_NAME: ConfigKeyKit

jobs:
  configure:
    name: Configure Matrix
    runs-on: ubuntu-latest
    outputs:
      full-matrix: ${{ steps.check.outputs.full }}
      ubuntu-os: ${{ steps.matrix.outputs.ubuntu-os }}
      ubuntu-swift: ${{ steps.matrix.outputs.ubuntu-swift }}
      ubuntu-type: ${{ steps.matrix.outputs.ubuntu-type }}
    steps:
      - id: check
        name: Determine matrix scope
        run: |
          FULL=false
          REF="${{ github.ref }}"
          EVENT="${{ github.event_name }}"
          BASE_REF="${{ github.base_ref }}"

          if [[ "$REF" == "refs/heads/main" ]]; then
            FULL=true
          elif [[ "$REF" =~ ^refs/heads/v?[0-9]+\.[0-9]+\.[0-9]+ ]]; then
            FULL=true
          elif [[ "$EVENT" == "pull_request" ]]; then
            if [[ "$BASE_REF" == "main" || "$BASE_REF" =~ ^v?[0-9]+\.[0-9]+\.[0-9]+ ]]; then
              FULL=true
            fi
          fi

          echo "full=$FULL" >> "$GITHUB_OUTPUT"
          echo "Full matrix: $FULL (ref=$REF, event=$EVENT, base_ref=$BASE_REF)"

      - id: matrix
        name: Build matrix values
        run: |
          if [[ "${{ steps.check.outputs.full }}" == "true" ]]; then
            echo 'ubuntu-os=["noble","jammy"]' >> "$GITHUB_OUTPUT"
            echo 'ubuntu-swift=[{"version":"6.2"},{"version":"6.3"}]' >> "$GITHUB_OUTPUT"
            echo 'ubuntu-type=["","wasm","wasm-embedded"]' >> "$GITHUB_OUTPUT"
          else
            echo 'ubuntu-os=["noble"]' >> "$GITHUB_OUTPUT"
            echo 'ubuntu-swift=[{"version":"6.3"}]' >> "$GITHUB_OUTPUT"
            echo 'ubuntu-type=[""]' >> "$GITHUB_OUTPUT"
          fi

  build-ubuntu:
    name: Build on Ubuntu
    needs: configure
    runs-on: ubuntu-latest
    container: swift:${{ matrix.swift.version }}-${{ matrix.os }}
    if: ${{ !contains(github.event.head_commit.message, 'ci skip') }}
    strategy:
      fail-fast: false
      matrix:
        os: ${{ fromJSON(needs.configure.outputs.ubuntu-os) }}
        swift: ${{ fromJSON(needs.configure.outputs.ubuntu-swift) }}
        type: ${{ fromJSON(needs.configure.outputs.ubuntu-type) }}
    steps:
      - uses: actions/checkout@v6
      - uses: brightdigit/swift-build@v1
        id: build
        with:
          type: ${{ matrix.type }}
          wasmtime-version: "40.0.2"
          wasm-swift-flags: >-
            -Xcc -D_WASI_EMULATED_SIGNAL
            -Xcc -D_WASI_EMULATED_MMAN
            -Xlinker -lwasi-emulated-signal
            -Xlinker -lwasi-emulated-mman
      - name: Install curl (required by Codecov uploader)
        if: steps.build.outputs.contains-code-coverage == 'true'
        run: |
          if command -v apt-get >/dev/null 2>&1; then
            apt-get update && apt-get install -y --no-install-recommends curl ca-certificates
          fi
      - name: Install coverage.py (silences codecov-cli probe warning)
        if: steps.build.outputs.contains-code-coverage == 'true'
        run: pip3 install --quiet --user coverage 2>/dev/null || true
      - uses: sersoft-gmbh/swift-coverage-action@v5
        if: steps.build.outputs.contains-code-coverage == 'true'
        id: coverage-files
        with:
          fail-on-empty-output: true
      - name: Upload coverage to Codecov
        if: steps.build.outputs.contains-code-coverage == 'true'
        uses: codecov/codecov-action@v6
        with:
          fail_ci_if_error: true
          flags: swift-${{ matrix.swift.version }}-${{ matrix.os }}
          verbose: true
          token: ${{ secrets.CODECOV_TOKEN }}
          files: ${{ join(fromJSON(steps.coverage-files.outputs.files), ',') }}

  build-windows:
    name: Build on Windows
    needs: configure
    runs-on: ${{ matrix.runs-on }}
    if: ${{ needs.configure.outputs.full-matrix == 'true' && !contains(github.event.head_commit.message, 'ci skip') }}
    strategy:
      fail-fast: false
      matrix:
        runs-on: [windows-2022, windows-2025]
        swift:
          - version: swift-6.2-release
            build: 6.2-RELEASE
          - version: swift-6.3-release
            build: 6.3-RELEASE
    steps:
      - uses: actions/checkout@v6
      - uses: brightdigit/swift-build@v1
        id: build
        with:
          windows-swift-version: ${{ matrix.swift.version }}
          windows-swift-build: ${{ matrix.swift.build }}
      - name: Upload coverage to Codecov
        if: steps.build.outputs.contains-code-coverage == 'true'
        uses: codecov/codecov-action@v6
        with:
          fail_ci_if_error: true
          flags: swift-${{ matrix.swift.version }},windows
          verbose: true
          token: ${{ secrets.CODECOV_TOKEN }}
          os: windows
          swift_project: ConfigKeyKit

  build-android:
    name: Build on Android
    needs: configure
    runs-on: ubuntu-latest
    if: ${{ needs.configure.outputs.full-matrix == 'true' && !contains(github.event.head_commit.message, 'ci skip') }}
    strategy:
      fail-fast: false
      matrix:
        swift:
          - version: "6.2"
          - version: "6.3"
        android-api-level: [33, 34]
    steps:
      - uses: actions/checkout@v6
      - name: Free disk space
        uses: jlumbroso/free-disk-space@v1.3.1
        with:
          tool-cache: false
          android: false
          dotnet: true
          haskell: true
          large-packages: true
          docker-images: true
          swap-storage: true
      - uses: brightdigit/swift-build@v1
        with:
          type: android
          android-swift-version: ${{ matrix.swift.version }}
          android-api-level: ${{ matrix.android-api-level }}
          android-run-tests: true

  build-macos:
    name: Build on macOS
    runs-on: macos-26
    if: ${{ !contains(github.event.head_commit.message, 'ci skip') }}
    strategy:
      fail-fast: false
      matrix:
        include:
          - xcode: "/Applications/Xcode_26.4.app"
          - type: ios
            xcode: "/Applications/Xcode_26.4.app"
            deviceName: "iPhone 17 Pro"
            osVersion: "26.4.1"
            download-platform: true
    steps:
      - uses: actions/checkout@v6
      - name: Build and Test
        id: build
        uses: brightdigit/swift-build@v1
        with:
          scheme: ${{ env.PACKAGE_NAME }}
          type: ${{ matrix.type }}
          xcode: ${{ matrix.xcode }}
          deviceName: ${{ matrix.deviceName }}
          osVersion: ${{ matrix.osVersion }}
          download-platform: ${{ matrix.download-platform }}
      - name: Install coverage.py (silences codecov-cli probe warning)
        if: steps.build.outputs.contains-code-coverage == 'true'
        run: pip3 install --quiet --user coverage 2>/dev/null || true
      - name: Process Coverage
        if: steps.build.outputs.contains-code-coverage == 'true'
        uses: sersoft-gmbh/swift-coverage-action@v5
      - name: Upload Coverage
        if: steps.build.outputs.contains-code-coverage == 'true'
        uses: codecov/codecov-action@v6
        with:
          token: ${{ secrets.CODECOV_TOKEN }}
          flags: ${{ matrix.type && format('{0}{1}', matrix.type, matrix.osVersion) || 'spm' }}

  build-macos-platforms:
    name: Build on macOS (Platforms)
    needs: configure
    runs-on: ${{ matrix.runs-on }}
    if: ${{ needs.configure.outputs.full-matrix == 'true' && !contains(github.event.head_commit.message, 'ci skip') }}
    strategy:
      fail-fast: false
      matrix:
        include:
          - type: macos
            runs-on: macos-26
            xcode: "/Applications/Xcode_26.4.app"
          - type: watchos
            runs-on: macos-26
            xcode: "/Applications/Xcode_26.4.app"
            deviceName: "Apple Watch Ultra 3 (49mm)"
            osVersion: "26.4"
            download-platform: true
          - type: tvos
            runs-on: macos-26
            xcode: "/Applications/Xcode_26.4.app"
            deviceName: "Apple TV"
            osVersion: "26.4"
            download-platform: true
          - type: visionos
            runs-on: macos-26
            xcode: "/Applications/Xcode_26.4.app"
            deviceName: "Apple Vision Pro"
            osVersion: "26.4.1"
            download-platform: true
    steps:
      - uses: actions/checkout@v6
      - name: Build and Test
        id: build
        uses: brightdigit/swift-build@v1
        with:
          scheme: ${{ env.PACKAGE_NAME }}
          type: ${{ matrix.type }}
          xcode: ${{ matrix.xcode }}
          deviceName: ${{ matrix.deviceName }}
          osVersion: ${{ matrix.osVersion }}
          download-platform: ${{ matrix.download-platform }}
      - name: Install coverage.py (silences codecov-cli probe warning)
        if: steps.build.outputs.contains-code-coverage == 'true'
        run: pip3 install --quiet --user coverage 2>/dev/null || true
      - name: Process Coverage
        if: steps.build.outputs.contains-code-coverage == 'true'
        uses: sersoft-gmbh/swift-coverage-action@v5
      - name: Upload Coverage
        if: steps.build.outputs.contains-code-coverage == 'true'
        uses: codecov/codecov-action@v6
        with:
          token: ${{ secrets.CODECOV_TOKEN }}
          flags: ${{ matrix.type && format('{0}{1}', matrix.type, matrix.osVersion) || 'spm' }}

  lint:
    name: Linting
    runs-on: ubuntu-latest
    if: ${{ !cancelled() && !failure() && !contains(github.event.head_commit.message, 'ci skip') }}
    needs: [build-ubuntu, build-macos, build-macos-platforms, build-windows, build-android]
    concurrency:
      group: lint-tools-${{ github.head_ref || github.ref }}
      cancel-in-progress: false
    steps:
      - uses: actions/checkout@v6
      - uses: ./.github/actions/setup-tools
      - name: Lint
        run: |
          set -e
          ./Scripts/lint.sh