release.yml

name: Release

on:
  push:
    tags:
      - 'v*'  # Trigger on version tags like v0.2.0

permissions:
  contents: write
  id-token: write  # Required for trusted publishing

jobs:
  release:
    runs-on: ubuntu-latest
    environment: release
    steps:
      - uses: actions/checkout@v4

      - name: Install uv
        uses: astral-sh/setup-uv@v5
        with:
          enable-cache: true

      - name: Set up Python
        run: uv python install 3.11

      - name: Install system dependencies
        run: |
          sudo apt-get update
          sudo apt-get install -y libasound-dev portaudio19-dev libportaudio2 libportaudiocpp0

      - name: Install dependencies and build
        run: |
          uv sync --all-extras
          uv build

      - name: Extract version from tag
        id: get_version
        run: echo "VERSION=${GITHUB_REF#refs/tags/v}" >> $GITHUB_OUTPUT

      - name: Create Release
        uses: softprops/action-gh-release@v1
        with:
          name: Release ${{ steps.get_version.outputs.VERSION }}
          draft: false
          prerelease: false
          generate_release_notes: true
          files: |
            dist/*.whl
            dist/*.tar.gz
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

      - name: Publish to PyPI
        run: uv publish
        # Uses trusted publishing (no token needed if configured on PyPI)
        # Falls back to PYPI_API_TOKEN if trusted publishing not set up