cd-python-sdk.yaml

name: Python SDK publish

permissions:
  contents: write

on:
  workflow_dispatch:
    inputs:
      push_git_tags:
        description: "Push git tags after publishing (true/false)"
        required: false
        default: "false"
  push:
    branches:
      - main
    paths:
      - "packages/sdk/python/human-protocol-sdk/**"

jobs:
  publish-python-sdk:
    name: Publish Python SDK
    runs-on: ubuntu-latest
    env:
      PUSH_GIT_TAGS: ${{ github.event_name == 'workflow_dispatch' && github.event.inputs.push_git_tags || 'true' }}
    steps:
      - uses: actions/checkout@v6
        with:
          token: ${{ secrets.RELEASE_GH_TOKEN }}
      - name: Setup git identity
        run: |
          git config --global user.name "github-actions[bot]"
          git config --global user.email "github-actions[bot]@users.noreply.github.com"
      - uses: actions/setup-node@v6
        with:
          node-version-file: .nvmrc
          cache: yarn
      - name: Set up Python
        uses: actions/setup-python@v6
        with:
          python-version: "3.x"
      - name: Read package version
        id: read_version
        run: |
          VERSION=$(jq -r '.version' packages/sdk/python/human-protocol-sdk/package.json)
          echo "version=$VERSION" >> $GITHUB_OUTPUT
      - name: Install build deps
        working-directory: ./packages/sdk/python/human-protocol-sdk
        run: |
          python -m pip install --upgrade pip
          pip install setuptools==68.2.2 wheel twine
      - name: Build and publish
        working-directory: ./packages/sdk/python/human-protocol-sdk
        env:
          TWINE_USERNAME: __token__
          TWINE_PASSWORD: ${{ secrets.PYPI_API_TOKEN }}
        run: make publish-package
      - name: Create and push tag
        if: ${{ env.PUSH_GIT_TAGS == 'true' }}
        working-directory: ./packages/sdk/python/human-protocol-sdk
        run: |
          VERSION="${{ steps.read_version.outputs.version }}"
          TAG="python/sdk@${VERSION}"
          echo "Version: $VERSION | Tag: $TAG"
          if git rev-parse -q --verify "refs/tags/${TAG}" >/dev/null; then
            echo "Tag ${TAG} already exists. Skipping tag creation."
            exit 0
          fi
          git tag -a "$TAG" -m "Python SDK $VERSION"
          git push origin --tags