python-release.yml

name: Python SDK Release

on:
  push:
    branches: [main]
  workflow_dispatch:

permissions: {}

concurrency:
  group: python-release-${{ github.ref }}
  cancel-in-progress: false

jobs:
  test:
    if: "${{ !startsWith(github.event.head_commit.message, 'chore: release') }}"
    runs-on: ubuntu-latest
    permissions:
      contents: read
    env:
      MUXI_SDK_E2E_SERVER_URL: ${{ secrets.MUXI_SDK_E2E_SERVER_URL }}
    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
        with:
          fetch-depth: 0

      - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v5
        with:
          python-version: '3.10'

      - name: Install
        run: |
          python -m pip install --upgrade pip
          python -m pip install .

      - name: Unit tests
        run: python -m unittest discover tests -v

      - name: Require test server
        run: |
          if [ -z "$MUXI_SDK_E2E_SERVER_URL" ]; then
            echo "::error::MUXI_SDK_E2E_SERVER_URL secret is not set"
            exit 1
          fi
          if ! curl -sf --max-time 10 "${MUXI_SDK_E2E_SERVER_URL}/ping" >/dev/null 2>&1 && \
             ! curl -sf --max-time 10 "${MUXI_SDK_E2E_SERVER_URL}" >/dev/null 2>&1; then
            echo "::error::Test server is not reachable at ${MUXI_SDK_E2E_SERVER_URL}"
            exit 1
          fi

      - name: Integration tests
        env:
          MUXI_SDK_E2E_KEY_ID: ${{ secrets.MUXI_SDK_E2E_KEY_ID }}
          MUXI_SDK_E2E_SECRET_KEY: ${{ secrets.MUXI_SDK_E2E_SECRET_KEY }}
          MUXI_SDK_E2E_FORMATION_ID: ${{ secrets.MUXI_SDK_E2E_FORMATION_ID }}
          MUXI_SDK_E2E_CLIENT_KEY: ${{ secrets.MUXI_SDK_E2E_CLIENT_KEY }}
          MUXI_SDK_E2E_ADMIN_KEY: ${{ secrets.MUXI_SDK_E2E_ADMIN_KEY }}
        run: python -m unittest discover tests -v

  release:
    if: "${{ !startsWith(github.event.head_commit.message, 'chore: release') }}"
    needs: test
    runs-on: ubuntu-latest
    permissions:
      contents: write
      id-token: write
    outputs:
      version: ${{ steps.version.outputs.version }}
    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
        with:
          fetch-depth: 0
          token: ${{ secrets.MUXI_RELEASE_TOKEN }}

      - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v5
        with:
          python-version: '3.10'

      - name: Compute next version
        id: version
        run: |
          current=$(python -c "from pathlib import Path, re; import sys; text=Path('muxi/version.py').read_text(); m=re.search(r'__version__\\s*=\\s*[\"\']([^\"\']+)[\"\']', text); sys.exit('version not found') if not m else print(m.group(1))")
          major=$(echo "$current" | cut -d. -f1)
          cdate=$(echo "$current" | cut -d. -f2)
          cpatch=$(echo "$current" | cut -d. -f3)
          today=$(date -u +%Y%m%d)
          if [ "$cdate" = "$today" ]; then
            nextpatch=$((cpatch + 1))
          else
            nextpatch=0
          fi
          next="${major}.${today}.${nextpatch}"
          echo "version=$next" >> $GITHUB_OUTPUT

      - name: Set version in source
        run: |
          NEXT_VERSION="${{ steps.version.outputs.version }}"
          python -c "
          from pathlib import Path; import re, os
          v = os.environ['NEXT_VERSION']
          p = Path('muxi/version.py')
          p.write_text(re.sub(r'__version__\s*=\s*[\"\\x27][^\"\\x27]+[\"\\x27]', f'__version__ = \"{v}\"', p.read_text()))
          "
        env:
          NEXT_VERSION: ${{ steps.version.outputs.version }}

      - name: Build distributions
        run: |
          python -m pip install --upgrade pip build
          python -m build

      - name: Check if version exists on PyPI
        id: check_pypi
        run: |
          VERSION="${{ steps.version.outputs.version }}"
          if curl -sf "https://pypi.org/pypi/muxi/${VERSION}/json" > /dev/null 2>&1; then
            echo "Version ${VERSION} already exists on PyPI, skipping publish"
            echo "exists=true" >> $GITHUB_OUTPUT
          else
            echo "Version ${VERSION} not found on PyPI, will publish"
            echo "exists=false" >> $GITHUB_OUTPUT
          fi

      - name: Publish to PyPI
        if: steps.check_pypi.outputs.exists == 'false'
        uses: pypa/gh-action-pypi-publish@ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e # release/v1

      - name: Commit version bump
        run: |
          git config user.name "github-actions[bot]"
          git config user.email "github-actions[bot]@users.noreply.github.com"
          git add muxi/version.py
          git commit -m "chore: release v${{ steps.version.outputs.version }}"
          git push origin HEAD:main

      - name: Create and push tag
        run: |
          TAG="v${{ steps.version.outputs.version }}"
          if git rev-parse "$TAG" >/dev/null 2>&1; then
            echo "Tag $TAG already exists"
          else
            git tag "$TAG"
            git push origin "$TAG"
          fi

      - name: Create GitHub Release
        uses: softprops/action-gh-release@a06a81a03ee405af7f2048a818ed3f03bbf83c7b # v2.5.0
        with:
          tag_name: v${{ steps.version.outputs.version }}
          name: v${{ steps.version.outputs.version }}
          body: |
            Python SDK v${{ steps.version.outputs.version }}

  sync_develop:
    if: "${{ !startsWith(github.event.head_commit.message, 'chore: release') }}"
    needs: release
    runs-on: ubuntu-latest
    permissions:
      contents: write
    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
        with:
          ref: develop
          fetch-depth: 0
          token: ${{ secrets.MUXI_RELEASE_TOKEN }}

      - name: Merge main into develop
        run: |
          git fetch origin main develop
          git config user.name "github-actions[bot]"
          git config user.email "github-actions[bot]@users.noreply.github.com"
          git merge origin/main --no-edit -m "chore: sync main to develop [skip ci]"
          git push origin HEAD:develop

  update_sdks_pointer:
    if: "${{ !startsWith(github.event.head_commit.message, 'chore: release') }}"
    needs: release
    runs-on: ubuntu-latest
    permissions:
      contents: write
    steps:
      - name: Checkout parent sdks repo
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
        with:
          repository: muxi-ai/sdks
          ref: main
          fetch-depth: 0
          token: ${{ secrets.MUXI_RELEASE_TOKEN }}
          path: sdks

      - name: Update python submodule to latest main
        run: |
          cd sdks
          git config --global url."https://x-access-token:${{ secrets.MUXI_RELEASE_TOKEN }}@github.com/".insteadOf "https://github.com/"
          git config submodule.python.url https://github.com/muxi-ai/muxi-python.git
          git submodule update --init --depth 1 python
          cd python
          git fetch origin main --depth 1
          git reset --hard FETCH_HEAD
          cd ..
          git config user.name "github-actions[bot]"
          git config user.email "github-actions[bot]@users.noreply.github.com"
          git add python
          if git diff --cached --quiet; then
            echo "No submodule pointer change"
          else
            git commit -m "Update python submodule pointer"
            git push origin main
          fi