name: 'build Mac OS'
description: 'build Mac OS package'
inputs:
  name:
    required: true
  icon:
    required: true
  MACOS_CERTIFICATE:
    required: true
  MACOS_CERTIFICATE_ID:
    required: true
  MACOS_CERTIFICATE_PWD:
    required: true
runs:
  using: "composite"
  steps:
    - uses: ./.github/actions/build-love

    - name: Download template
      uses: ./.github/actions/get-unzip
      with:
        url: https://github.com/26F-Studio/Techmino-CI-template/releases/download/1.0/macos.app.zip

    - name: Download ColdClear
      uses: ./.github/actions/get-cc
      with:
        arch: macOS
    - name: Modify template
      shell: bash
      run: |
        python3 .github/workflows/updateVersion.py -T macOS -N ${{ inputs.name }}
        mv Techmino.love Techmino.app/Contents/Resources
        mv CCloader.dylib Techmino.app/Contents/Frameworks
        mv ${{ inputs.icon }} Techmino.app/Contents/Resources/iconfile.icns
    - name: Codesign executable
      # In secrets:
      #   - MACOS_CERTIFICATE: the *.p12 Developer ID Certificate, encoded in base64
      #   - MACOS_CERTIFICATE_PWD: The password
      shell: bash
      run: |
        echo ${{ inputs.MACOS_CERTIFICATE }} | base64 --decode > certificate.p12
        security create-keychain -p Techminohaowan build.keychain
        security default-keychain -s build.keychain
        security unlock-keychain -p Techminohaowan build.keychain
        security import certificate.p12 -k build.keychain -P ${{ inputs.MACOS_CERTIFICATE_PWD }} -T /usr/bin/codesign
        security set-key-partition-list -S apple-tool:,apple:,codesign: -s -k Techminohaowan build.keychain
        /usr/bin/codesign --force --deep -s ${{ inputs.MACOS_CERTIFICATE_ID }} Techmino.app -v
        security delete-keychain build.keychain