cd.yml

name: CD – TestFlight

on:
  push:
    branches: [dev]

# ─────────────────────────────────────────
# 프로젝트에 맞게 수정하세요
env:
  SCHEME: ARENA                     # Xcode Scheme 이름
  BUNDLE_ID: com.cklob.arena        # 앱 Bundle Identifier
  XCODE_VERSION: "16.3"             # 사용할 Xcode 버전
  EXPORT_METHOD: app-store          # app-store | ad-hoc | development
# ─────────────────────────────────────────

concurrency:
  group: cd-${{ github.ref }}
  cancel-in-progress: true

jobs:
  deploy:
    name: Archive & Upload to TestFlight
    runs-on: macos-15

    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Select Xcode
        uses: maxim-lobanov/setup-xcode@v1
        with:
          xcode-version: ${{ env.XCODE_VERSION }}

      - name: Cache SPM packages
        uses: actions/cache@v4
        with:
          path: .build
          key: spm-${{ runner.os }}-${{ hashFiles('**/Package.resolved') }}
          restore-keys: spm-${{ runner.os }}-

      # ── 코드 서명 인증서 설치 ──────────────────────
      - name: Install Apple certificate and provisioning profile
        env:
          P12_BASE64: ${{ secrets.APPLE_P12_BASE64 }}
          P12_PASSWORD: ${{ secrets.APPLE_P12_PASSWORD }}
          PROVISIONING_PROFILE_BASE64: ${{ secrets.PROVISIONING_PROFILE_BASE64 }}
          KEYCHAIN_PASSWORD: ${{ secrets.KEYCHAIN_PASSWORD }}
        run: |
          # 임시 키체인 생성
          KEYCHAIN_PATH=$RUNNER_TEMP/app-signing.keychain-db
          security create-keychain -p "$KEYCHAIN_PASSWORD" "$KEYCHAIN_PATH"
          security set-keychain-settings -lut 21600 "$KEYCHAIN_PATH"
          security unlock-keychain -p "$KEYCHAIN_PASSWORD" "$KEYCHAIN_PATH"

          # P12 인증서 설치
          P12_PATH=$RUNNER_TEMP/certificate.p12
          echo "$P12_BASE64" | base64 --decode -o "$P12_PATH"
          security import "$P12_PATH" -P "$KEYCHAIN_PASSWORD" -A \
            -t cert -f pkcs12 -k "$KEYCHAIN_PATH"
          security set-key-partition-list \
            -S apple-tool:,apple: -k "$KEYCHAIN_PASSWORD" "$KEYCHAIN_PATH"
          security list-keychain -d user -s "$KEYCHAIN_PATH"

          # Provisioning Profile 설치
          PP_PATH=$RUNNER_TEMP/profile.mobileprovision
          echo "$PROVISIONING_PROFILE_BASE64" | base64 --decode -o "$PP_PATH"
          mkdir -p ~/Library/MobileDevice/Provisioning\ Profiles
          cp "$PP_PATH" \
            ~/Library/MobileDevice/Provisioning\ Profiles/

      # ── 빌드 번호 자동 증가 ───────────────────────
      - name: Bump build number
        run: |
          BUILD_NUMBER=${{ github.run_number }}
          echo "Setting build number to $BUILD_NUMBER"
          agvtool new-version -all "$BUILD_NUMBER"

      # ── Archive ────────────────────────────────
      - name: Archive
        run: |
          xcodebuild archive \
            -scheme "$SCHEME" \
            -configuration Release \
            -destination "generic/platform=iOS" \
            -archivePath "$RUNNER_TEMP/ARENA.xcarchive" \
            CODE_SIGN_STYLE=Manual \
            | xcpretty --color && exit ${PIPESTATUS[0]}

      # ── ExportOptions 생성 ─────────────────────
      - name: Create ExportOptions.plist
        run: |
          cat > $RUNNER_TEMP/ExportOptions.plist << EOF
          <?xml version="1.0" encoding="UTF-8"?>
          <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN"
            "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
          <plist version="1.0">
          <dict>
            <key>method</key>
            <string>${{ env.EXPORT_METHOD }}</string>
            <key>destination</key>
            <string>upload</string>
            <key>teamID</key>
            <string>${{ secrets.APPLE_TEAM_ID }}</string>
            <key>signingStyle</key>
            <string>manual</string>
            <key>provisioningProfiles</key>
            <dict>
              <key>${{ env.BUNDLE_ID }}</key>
              <string>${{ secrets.PROVISIONING_PROFILE_NAME }}</string>
            </dict>
          </dict>
          </plist>
          EOF

      # ── Export IPA ─────────────────────────────
      - name: Export IPA
        run: |
          xcodebuild -exportArchive \
            -archivePath "$RUNNER_TEMP/ARENA.xcarchive" \
            -exportOptionsPlist "$RUNNER_TEMP/ExportOptions.plist" \
            -exportPath "$RUNNER_TEMP/export" \
            | xcpretty --color && exit ${PIPESTATUS[0]}

      # ── App Store Connect API 키 설정 ──────────
      - name: Setup App Store Connect API key
        run: |
          mkdir -p ~/.appstoreconnect/private_keys
          echo "${{ secrets.ASC_API_KEY_BASE64 }}" | base64 --decode \
            > ~/.appstoreconnect/private_keys/AuthKey_${{ secrets.ASC_API_KEY_ID }}.p8

      # ── TestFlight 업로드 ──────────────────────
      - name: Upload to TestFlight
        run: |
          xcrun altool --upload-app \
            --type ios \
            --file "$RUNNER_TEMP/export/ARENA.ipa" \
            --apiKey "${{ secrets.ASC_API_KEY_ID }}" \
            --apiIssuer "${{ secrets.ASC_ISSUER_ID }}" \
            --verbose

      # ── 키체인 정리 ────────────────────────────
      - name: Clean up keychain
        if: always()
        run: |
          security delete-keychain $RUNNER_TEMP/app-signing.keychain-db || true