python-package.yml

name: Build and Package Python Library

on:
  push:
    branches: [ feat/codesign-python-package ]
  workflow_dispatch:
    inputs:
      model_dir:
        description: "Path to model directory in janhq/models repo"
        required: true
      model_name:
        description: "name of model to be release"
        required: true


env:
  MODEL_DIR: models/whispervq # ${{ inputs.model_dir }}
  MODEL_NAME: whispervq # ${{ inputs.model_name }}

jobs:
  build-and-test:
    runs-on: ${{ matrix.runs-on }}
    timeout-minutes: 60
    strategy:
      fail-fast: false
      matrix:
        include:
          # - os: "linux"
          #   name: "amd64"
          #   runs-on: "ubuntu-20-04-cuda-12-0"
          - os: "mac"
            name: "amd64"
            runs-on: "macos-selfhosted-12"
          - os: "mac"
            name: "arm64"
            runs-on: "macos-silicon"
        #   - os: "windows"
        #     name: "amd64"
        #     runs-on: "windows-cuda-12-0"
    steps:
      - name: Clone
        id: checkout
        uses: actions/checkout@v3
        with:
          submodules: recursive
          repository: janhq/models
          ref: "feat/ci-python-models"

      - uses: conda-incubator/setup-miniconda@v3
        with:
          auto-update-conda: true
          python-version: 3.11

      - name: Install dependencies Windows
        if: runner.os == 'windows'
        run: |
          conda create -y -n ${{env.MODEL_NAME}} python=3.11
          source $HOME/miniconda/bin/activate base
          conda init
          conda activate ${{env.MODEL_NAME}}
          python -m pip install --upgrade pip
          python -m pip install -r ${{env.MODEL_DIR}}/requirements.cuda.txt

      - name: Install dependencies Linux
        if: runner.os == 'linux'
        run: |
          conda create -y -n ${{env.MODEL_NAME}} python=3.11
          source $HOME/miniconda/bin/activate base
          conda init
          conda activate ${{env.MODEL_NAME}}
          python -m pip install --upgrade pip
          python -m pip install -r ${{env.MODEL_DIR}}/requirements.cuda.txt
    
      - name: Install dependencies Mac
        if: runner.os == 'macOS'
        run: |
          conda create -y -n ${{env.MODEL_NAME}} python=3.11
          source $HOME/miniconda/bin/activate base
          conda init
          conda activate ${{env.MODEL_NAME}}
          python -m pip install --upgrade pip
          python -m pip install -r ${{env.MODEL_DIR}}/requirements.txt

      - name: prepare python package windows
        if : runner.os == 'windows'
        shell: cmd
        run: |
            source $HOME/miniconda/bin/activate base
            conda init
            conda activate ${{env.MODEL_NAME}}
            for /f "delims=" %%a in ('where python') do set "PYTHON_PATH=%%a"
            echo %PYTHON_PATH%
            
      - name: prepare python package unix
        if : runner.os != 'windows'
        run: |
            source $HOME/miniconda/bin/activate base
            conda init
            conda activate ${{env.MODEL_NAME}}
            PYTHON_PATH=$(which python)
            echo $PYTHON_PATH
            PYTHON_FOLDER=$(dirname $(dirname "$PYTHON_PATH"))
            echo "PYTHON_FOLDER=$PYTHON_FOLDER" >> $GITHUB_ENV
            echo "github end PYTHON_FOLDER: ${{env.PYTHON_FOLDER}}"

      - name: Upload Artifact
        if : runner.os == 'macOS' || runner.os == 'linux'
        uses: actions/upload-artifact@v4
        with:
            name: ${{env.MODEL_NAME}}-${{ matrix.os }}-${{ matrix.name }}
            path: ${{env.PYTHON_FOLDER}}

  codesign:
    runs-on: macos-latest
    needs: build-and-test
    steps:
      - name: checkout
        uses: actions/checkout@v3
      - uses: apple-actions/import-codesign-certs@v2
        continue-on-error: true
        with:
          p12-file-base64: ${{ secrets.CODE_SIGN_P12_BASE64 }}
          p12-password: ${{ secrets.CODE_SIGN_P12_PASSWORD }}
      - name: Download Artifact
        uses: actions/download-artifact@v4
        with:
          name: ${{env.MODEL_NAME}}-mac-amd64
          path: ${{env.MODEL_NAME}}-mac-amd64
      - name: Download Artifact
        uses: actions/download-artifact@v4
        with:
          name: ${{env.MODEL_NAME}}-mac-arm64
          path: ${{env.MODEL_NAME}}-mac-arm64

      - run: |
          find "${{env.MODEL_NAME}}-mac-amd64" \( -type f \) -exec codesign --force --entitlements="./engine/templates/macos/entitlements.plist" -s "${{ secrets.DEVELOPER_ID }}" --options=runtime {} \;
          find "${{env.MODEL_NAME}}-mac-arm64" \( -type f \) -exec codesign --force --entitlements="./engine/templates/macos/entitlements.plist" -s "${{ secrets.DEVELOPER_ID }}" --options=runtime {} \;
      
      - name: Upload Artifact
        uses: actions/upload-artifact@v4
        with:
          name: ${{env.MODEL_NAME}}-mac-amd64-signed
          path: ${{env.MODEL_NAME}}-mac-amd64
      - name: Upload Artifact
        uses: actions/upload-artifact@v4
        with:
          name: ${{env.MODEL_NAME}}-mac-arm64-signed
          path: ${{env.MODEL_NAME}}-mac-arm64