297 lines
13 KiB
YAML
297 lines
13 KiB
YAML
name: Control iOS Xcode Cloud
|
|
|
|
on:
|
|
workflow_dispatch:
|
|
inputs:
|
|
mode:
|
|
description: Inspect workflows or start the selected Archive workflow
|
|
required: true
|
|
type: choice
|
|
options:
|
|
- inspect
|
|
- start
|
|
- monitor
|
|
- store-status
|
|
- submit-review
|
|
default: inspect
|
|
workflow_id:
|
|
description: Optional Xcode Cloud workflow ID; auto-selects a single enabled Archive workflow when empty
|
|
required: false
|
|
type: string
|
|
build_run_id:
|
|
description: Xcode Cloud build run ID to monitor
|
|
required: false
|
|
type: string
|
|
app_store_version:
|
|
description: App Store marketing version to inspect
|
|
required: false
|
|
type: string
|
|
default: "1.42.1"
|
|
app_store_build_id:
|
|
description: App Store Connect build resource ID to inspect
|
|
required: false
|
|
type: string
|
|
|
|
permissions:
|
|
contents: read
|
|
|
|
jobs:
|
|
xcode-cloud:
|
|
if: github.repository == 'tianma-if/edgeever' && inputs.mode != 'submit-review'
|
|
runs-on: ubuntu-latest
|
|
timeout-minutes: 90
|
|
steps:
|
|
- name: Install App Store Connect client dependencies
|
|
run: python3 -m pip install --quiet PyJWT cryptography
|
|
|
|
- name: Inspect or start Xcode Cloud
|
|
env:
|
|
ASC_APP_ID: "6792625631"
|
|
ASC_API_ISSUER: ${{ secrets.EDGEEVER_APPLE_API_ISSUER }}
|
|
ASC_API_KEY_ID: ${{ secrets.EDGEEVER_APPLE_API_KEY_ID }}
|
|
ASC_API_KEY_BASE64: ${{ secrets.EDGEEVER_APPLE_API_KEY_BASE64 }}
|
|
XCODE_CLOUD_MODE: ${{ inputs.mode }}
|
|
XCODE_CLOUD_WORKFLOW_ID: ${{ inputs.workflow_id }}
|
|
XCODE_CLOUD_BUILD_RUN_ID: ${{ inputs.build_run_id }}
|
|
APP_STORE_VERSION: ${{ inputs.app_store_version }}
|
|
APP_STORE_BUILD_ID: ${{ inputs.app_store_build_id }}
|
|
run: |
|
|
python3 - <<'PY'
|
|
import base64
|
|
import json
|
|
import os
|
|
import re
|
|
import time
|
|
import urllib.error
|
|
import urllib.parse
|
|
import urllib.request
|
|
|
|
import jwt
|
|
|
|
app_id = os.environ["ASC_APP_ID"]
|
|
issuer = os.environ["ASC_API_ISSUER"]
|
|
key_id = os.environ["ASC_API_KEY_ID"]
|
|
private_key = base64.b64decode(os.environ["ASC_API_KEY_BASE64"]).decode()
|
|
mode = os.environ["XCODE_CLOUD_MODE"]
|
|
requested_workflow_id = os.environ.get("XCODE_CLOUD_WORKFLOW_ID", "").strip()
|
|
build_run_id = os.environ.get("XCODE_CLOUD_BUILD_RUN_ID", "").strip()
|
|
store_version = os.environ.get("APP_STORE_VERSION", "").strip()
|
|
store_build_id = os.environ.get("APP_STORE_BUILD_ID", "").strip()
|
|
|
|
now = int(time.time())
|
|
token = jwt.encode(
|
|
{"iss": issuer, "iat": now, "exp": now + 20 * 60, "aud": "appstoreconnect-v1"},
|
|
private_key,
|
|
algorithm="ES256",
|
|
headers={"kid": key_id, "typ": "JWT"},
|
|
)
|
|
|
|
def api(method, path, body=None):
|
|
request = urllib.request.Request(
|
|
"https://api.appstoreconnect.apple.com" + path,
|
|
data=None if body is None else json.dumps(body).encode(),
|
|
method=method,
|
|
)
|
|
request.add_header("Authorization", f"Bearer {token}")
|
|
if body is not None:
|
|
request.add_header("Content-Type", "application/json")
|
|
try:
|
|
with urllib.request.urlopen(request) as response:
|
|
payload = response.read().decode()
|
|
return json.loads(payload) if payload else {}
|
|
except urllib.error.HTTPError as error:
|
|
details = error.read().decode()
|
|
raise SystemExit(f"App Store Connect API {method} {path} failed ({error.code}): {details}")
|
|
|
|
if mode == "monitor":
|
|
if not build_run_id:
|
|
raise SystemExit("build_run_id is required in monitor mode")
|
|
deadline = time.time() + 85 * 60
|
|
while True:
|
|
run = api("GET", f"/v1/ciBuildRuns/{build_run_id}")["data"]
|
|
attributes = run.get("attributes") or {}
|
|
progress = attributes.get("executionProgress")
|
|
completion = attributes.get("completionStatus")
|
|
print(
|
|
f"Xcode Cloud build #{attributes.get('number')} "
|
|
f"progress={progress} completion={completion}",
|
|
flush=True,
|
|
)
|
|
if progress == "COMPLETE":
|
|
actions = api(
|
|
"GET",
|
|
f"/v1/ciBuildRuns/{build_run_id}/actions?limit=200&"
|
|
"fields[ciBuildActions]=name,actionType,executionProgress,completionStatus,issueCounts",
|
|
)
|
|
for action in actions.get("data", []):
|
|
action_attributes = action.get("attributes") or {}
|
|
print(
|
|
f"- action={action_attributes.get('name')} "
|
|
f"type={action_attributes.get('actionType')} "
|
|
f"completion={action_attributes.get('completionStatus')} "
|
|
f"issues={action_attributes.get('issueCounts')}"
|
|
)
|
|
builds = api(
|
|
"GET",
|
|
f"/v1/ciBuildRuns/{build_run_id}/builds?limit=50&"
|
|
"fields[builds]=version,processingState,uploadedDate",
|
|
)
|
|
for build in builds.get("data", []):
|
|
build_attributes = build.get("attributes") or {}
|
|
print(
|
|
f"- App Store build id={build.get('id')} "
|
|
f"version={build_attributes.get('version')} "
|
|
f"processing={build_attributes.get('processingState')} "
|
|
f"uploaded={build_attributes.get('uploadedDate')}"
|
|
)
|
|
if completion != "SUCCEEDED":
|
|
raise SystemExit(f"Xcode Cloud build completed with {completion}")
|
|
raise SystemExit(0)
|
|
if time.time() >= deadline:
|
|
raise SystemExit("Timed out waiting for Xcode Cloud build")
|
|
time.sleep(30)
|
|
|
|
if mode == "store-status":
|
|
if not store_version or not store_build_id:
|
|
raise SystemExit("app_store_version and app_store_build_id are required in store-status mode")
|
|
version_query = urllib.parse.urlencode({
|
|
"filter[platform]": "IOS",
|
|
"filter[versionString]": store_version,
|
|
"fields[appStoreVersions]": "platform,versionString,appStoreState,releaseType,build",
|
|
"limit": 10,
|
|
})
|
|
versions = api("GET", f"/v1/apps/{app_id}/appStoreVersions?{version_query}")
|
|
print(f"App Store version records for {store_version}: {len(versions.get('data', []))}")
|
|
for version in versions.get("data", []):
|
|
attributes = version.get("attributes") or {}
|
|
print(
|
|
f"- version id={version.get('id')} state={attributes.get('appStoreState')} "
|
|
f"releaseType={attributes.get('releaseType')}"
|
|
)
|
|
try:
|
|
attached = api(
|
|
"GET",
|
|
f"/v1/appStoreVersions/{version['id']}/build?fields[builds]=version,processingState",
|
|
)
|
|
except SystemExit:
|
|
attached = {"data": None}
|
|
attached_data = attached.get("data") or {}
|
|
attached_attributes = attached_data.get("attributes") or {}
|
|
print(
|
|
f"- attached build id={attached_data.get('id')} "
|
|
f"version={attached_attributes.get('version')} "
|
|
f"processing={attached_attributes.get('processingState')}"
|
|
)
|
|
build = api(
|
|
"GET",
|
|
f"/v1/builds/{store_build_id}?fields[builds]=version,processingState,uploadedDate",
|
|
)["data"]
|
|
build_attributes = build.get("attributes") or {}
|
|
print(
|
|
f"Requested build id={build.get('id')} version={build_attributes.get('version')} "
|
|
f"processing={build_attributes.get('processingState')} "
|
|
f"uploaded={build_attributes.get('uploadedDate')}"
|
|
)
|
|
raise SystemExit(0)
|
|
|
|
product = api("GET", f"/v1/apps/{app_id}/ciProduct").get("data")
|
|
workflows = []
|
|
for product in [product] if product else []:
|
|
product_id = product["id"]
|
|
query = urllib.parse.urlencode({
|
|
"limit": 50,
|
|
"fields[ciWorkflows]": "name,isEnabled,lastModifiedDate",
|
|
})
|
|
response = api("GET", f"/v1/ciProducts/{product_id}/workflows?{query}")
|
|
workflows.extend(response.get("data", []))
|
|
|
|
if not workflows:
|
|
raise SystemExit("No Xcode Cloud workflows found for EdgeEver")
|
|
|
|
print("Available Xcode Cloud workflows:")
|
|
for workflow in workflows:
|
|
attributes = workflow.get("attributes") or {}
|
|
print(
|
|
f"- id={workflow['id']} name={attributes.get('name')} "
|
|
f"enabled={attributes.get('isEnabled')} modified={attributes.get('lastModifiedDate')}"
|
|
)
|
|
|
|
if mode == "inspect":
|
|
raise SystemExit(0)
|
|
|
|
if requested_workflow_id:
|
|
matches = [workflow for workflow in workflows if workflow["id"] == requested_workflow_id]
|
|
else:
|
|
matches = [
|
|
workflow
|
|
for workflow in workflows
|
|
if (workflow.get("attributes") or {}).get("isEnabled")
|
|
and re.search(
|
|
r"archive|app\s*store|release",
|
|
str((workflow.get("attributes") or {}).get("name", "")),
|
|
re.IGNORECASE,
|
|
)
|
|
]
|
|
|
|
if len(matches) != 1:
|
|
raise SystemExit(
|
|
f"Expected exactly one matching enabled Archive workflow, found {len(matches)}; "
|
|
"rerun with workflow_id from the list above"
|
|
)
|
|
|
|
workflow = matches[0]
|
|
result = api(
|
|
"POST",
|
|
"/v1/ciBuildRuns",
|
|
{
|
|
"data": {
|
|
"type": "ciBuildRuns",
|
|
"attributes": {},
|
|
"relationships": {
|
|
"workflow": {
|
|
"data": {"type": "ciWorkflows", "id": workflow["id"]}
|
|
}
|
|
},
|
|
}
|
|
},
|
|
)
|
|
build = result["data"]
|
|
attributes = build.get("attributes") or {}
|
|
print(
|
|
f"Started Xcode Cloud build id={build['id']} number={attributes.get('number')} "
|
|
f"status={attributes.get('executionProgress')}"
|
|
)
|
|
PY
|
|
|
|
submit-review:
|
|
if: github.repository == 'tianma-if/edgeever' && inputs.mode == 'submit-review'
|
|
runs-on: ubuntu-latest
|
|
timeout-minutes: 30
|
|
steps:
|
|
- name: Check out the submission source
|
|
uses: actions/checkout@v4
|
|
|
|
- name: Set up Ruby
|
|
uses: ruby/setup-ruby@v1
|
|
with:
|
|
ruby-version: "3.3"
|
|
|
|
- name: Install fastlane
|
|
run: gem install fastlane --no-document
|
|
|
|
- name: Submit App Store build for review
|
|
env:
|
|
APP_STORE_BUILD_NUMBER: "39"
|
|
APP_STORE_CONNECT_API_ISSUER_ID: ${{ secrets.EDGEEVER_APPLE_API_ISSUER }}
|
|
APP_STORE_CONNECT_API_KEY_ID: ${{ secrets.EDGEEVER_APPLE_API_KEY_ID }}
|
|
APP_STORE_CONNECT_API_KEY_P8_BASE64: ${{ secrets.EDGEEVER_APPLE_API_KEY_BASE64 }}
|
|
APP_STORE_RELEASE_NOTES_ZH: |-
|
|
改进笔记正文布局，提升任务列表、引用、表格和代码块的阅读体验。
|
|
优化行内代码配色，在浅色与深色模式下都更加清晰。
|
|
APP_STORE_RELEASE_NOTES_EN: |-
|
|
Refine note layouts for clearer task lists, quotes, tables, and code blocks.
|
|
Improve inline-code colors for better clarity in both light and dark modes.
|
|
APP_STORE_VERSION: ${{ inputs.app_store_version }}
|
|
run: fastlane ios submit_review
|
|
working-directory: apps/ios
|