bitrise.yml

---
default_step_lib_source: https://github.com/bitrise-io/bitrise-steplib.git
format_version: "26"
project_type: ios

meta:
  bitrise.io:
    stack: osx-xcode-26.0.x
    machine_type_id: g2-m1.4core

app:
  envs:
    - CONFIG_REPO: SWYP-Find/iOS-Config
    - TUIST_VERSION: 4.154.0
    - REPO: SWYP-Find/Picke-iOS
    # Sentry — SENTRY_AUTH_TOKEN 은 Bitrise Secrets 에 등록한다(코드에 두지 않음).
    # 토큰이 없으면 Fastfile 의 upload_build_to_sentry 가 스스로 스킵하므로 배포는 계속된다.
    - SENTRY_ORG: picke
    - SENTRY_PROJECT: picke-ios
    - SENTRY_CLI_VERSION: 2.57.0
    # Bitrise Release Management — BITRISE_RELEASE_MGMT_TOKEN 은 Secrets 에 등록한다.
    - RELEASE_MGMT_APP_UUID: 3863eca9-01cc-48c7-b008-d7d842adda30

pipelines:
  # PR → 유닛 테스트 + 커버리지/실패 PR 코멘트
  run-tests:
    triggers:
      pull_request:
        - target_branch: "*"
    workflows:
      ios-run-tests: {}

  # develop / release-stg-* push → 빌드 → TestFlight
  deploy-stg:
    triggers:
      push:
        - branch: develop
        - branch: "release-stg-*"
    workflows:
      discord-start:
        environments:
          - NOTIFY_KIND: stg
      build-stg: {}
      fastlane-qa:
        depends_on:
          - build-stg
      discord-success:
        depends_on:
          - fastlane-qa
        environments:
          - NOTIFY_KIND: stg

  # v* 태그 → 빌드 → App Store
  deploy-live:
    triggers:
      tag:
        - name: "v*"
    workflows:
      discord-start:
        environments:
          - NOTIFY_KIND: live
      build-prod: {}
      fastlane-release:
        depends_on:
          - build-prod
      discord-success:
        depends_on:
          - fastlane-release
        environments:
          - NOTIFY_KIND: live

workflows:
  # ── PR 유닛 테스트 ─────────────────────────────────────────────────
  ios-run-tests:
    summary: >-
      자산 주입 → (캐시 복원) → Tuist 설치/generate → tuist test →
      PR이면 커버리지·실패목록을 PR sticky 코멘트로 게시.
    steps:
      - activate-ssh-key@4:
          run_if: '{{getenv "SSH_RSA_PRIVATE_KEY" | ne ""}}'
      - git-clone@8: {}
      - script@1:
          title: 비밀 자산 주입 (Config repo)
          inputs:
            - content: |
                #!/usr/bin/env bash
                set -euo pipefail
                git clone --depth 1 "https://x-access-token:${CONFIG_REPO_TOKEN}@github.com/${CONFIG_REPO}.git" /tmp/cfg
                mkdir -p Config fastlane
                cp /tmp/cfg/Config/*.xcconfig Config/
                cp /tmp/cfg/fastlane/.env fastlane/.env
                mkdir -p Projects/App/Resources && cp /tmp/cfg/App/GoogleService-Info.plist Projects/App/Resources/GoogleService-Info.plist
      - restore-cache@3:
          inputs:
            - key: |-
                deps-v2-{{ .OS }}-{{ .Arch }}-{{ checksum "mise.toml" }}-{{ checksum "Tuist/Package.resolved" }}
                deps-v2-{{ .OS }}-{{ .Arch }}-{{ checksum "mise.toml" }}
                deps-v2-{{ .OS }}-{{ .Arch }}
      - script@1:
          title: Tuist 설치 + 프로젝트 생성
          inputs:
            - content: |
                #!/usr/bin/env bash
                set -euo pipefail
                bash scripts/ci_tuist_install.sh
      - save-cache@1:
          inputs:
            - key: deps-v2-{{ .OS }}-{{ .Arch }}-{{ checksum "mise.toml" }}-{{ checksum "Tuist/Package.resolved" }}
            - paths: |-
                $HOME/.local/bin
                $HOME/.local/share/mise
                $HOME/.cache/mise
                $HOME/.cache/tuist
                $HOME/Library/Caches/org.swift.swiftpm
      - script@1:
          title: Tuist test
          inputs:
            - content: |
                #!/usr/bin/env bash
                set -euxo pipefail
                export PATH="$HOME/.local/bin:$PATH"
                eval "$(mise activate bash)"
                mise exec "tuist@${TUIST_VERSION}" -- swift TuistTool.swift test --result-bundle-path TestResults.xcresult
      - script@1:
          title: PR 테스트 결과 코멘트 (커버리지 + 실패목록)
          is_always_run: true
          inputs:
            - content: |
                #!/usr/bin/env bash
                set -uo pipefail
                PR="${BITRISE_PULL_REQUEST:-}"
                if [ -z "$PR" ]; then echo "PR 빌드 아님 → 코멘트 스킵"; exit 0; fi
                TOKEN="${CONFIG_REPO_TOKEN:-}"
                if [ -z "$TOKEN" ]; then echo "토큰 없음 → 코멘트 스킵"; exit 0; fi
                export XR="TestResults.xcresult"
                export MARKER="<!-- ios-test-bot -->"

                COV="N/A"
                if [ -d "$XR" ]; then
                  COV=$(xcrun xccov view --report --json "$XR" 2>/dev/null | python3 -c "import sys,json;print('%.1f%%'%(json.load(sys.stdin)['lineCoverage']*100))" 2>/dev/null || echo "N/A")
                fi

                FAILS=""
                if [ -d "$XR" ]; then
                  printf '%s\n' 'import sys,json' 'bt=chr(96)' 'd=json.load(sys.stdin)' 'o=[]' 'st=list(d.get("testNodes",[]))' 'while st:' ' n=st.pop()' ' st+=(n.get("children",[]) or [])' ' if n.get("nodeType")=="Test Case" and n.get("result")=="Failed":' '  m=[c.get("name","") for c in n.get("children",[]) if c.get("nodeType")=="Failure Message"]' '  o.append("- "+bt+n.get("name","")+bt+((" — "+" / ".join(m))[:300] if m else ""))' 'print(chr(10).join(o[:20]))' > /tmp/fails.py
                  FAILS=$(xcrun xcresulttool get test-results tests --path "$XR" 2>/dev/null | python3 /tmp/fails.py 2>/dev/null || echo "")
                fi

                if [ -z "$FAILS" ]; then STATUS="**✅ 전체 통과**"; else STATUS="**❌ 실패 있음**"; fi
                BODY="$MARKER
                ## 🧪 iOS 테스트 · Build #${BITRISE_BUILD_NUMBER}
                $STATUS · 📊 라인 커버리지 **$COV**"
                if [ -n "$FAILS" ]; then BODY="$BODY

                ### 실패
                $FAILS"; fi
                BODY="$BODY

                [🔗 빌드 로그]($BITRISE_BUILD_URL)"
                export BODY
                JSON=$(python3 -c "import json,os;print(json.dumps({'body':os.environ['BODY']}))")

                API="https://api.github.com/repos/$REPO"
                AUTH="Authorization: Bearer $TOKEN"
                ACC="Accept: application/vnd.github+json"
                echo "[diag] repo GET=$(curl -s -o /dev/null -w '%{http_code}' -H "$AUTH" -H "$ACC" "$API")"
                ID=$(curl -s -H "$AUTH" -H "$ACC" "$API/issues/$PR/comments?per_page=100" | python3 -c "import sys,json,os;m=os.environ['MARKER'];d=json.load(sys.stdin);cs=d if isinstance(d,list) else [];print(next((str(c['id']) for c in cs if m in (c.get('body') or '')),''))" 2>/dev/null || echo "")
                if [ -n "$ID" ]; then
                  CODE=$(curl -s -o /tmp/ghresp.json -w "%{http_code}" -X PATCH -H "$AUTH" -H "$ACC" "$API/issues/comments/$ID" -d "$JSON")
                  echo "PATCH status=$CODE (comment #$ID)"
                else
                  CODE=$(curl -s -o /tmp/ghresp.json -w "%{http_code}" -X POST -H "$AUTH" -H "$ACC" "$API/issues/$PR/comments" -d "$JSON")
                  echo "POST status=$CODE (PR #$PR)"
                fi
                case "$CODE" in
                  200|201) echo "✅ 코멘트 반영 완료";;
                  *) echo "❌ 코멘트 실패(HTTP $CODE): $(cat /tmp/ghresp.json 2>/dev/null | head -c 500)";;
                esac
      - deploy-to-bitrise-io@2: {}

  # ── 빌드 (Stage): 자산 주입 + Tuist generate + 의존성 캐시 워밍업 ──────
  build-stg:
    summary: 자산 주입 → Tuist 설치/generate → 의존성 캐시 저장 (fastlane-qa 가 캐시 재사용)
    steps:
      - activate-ssh-key@4:
          run_if: '{{getenv "SSH_RSA_PRIVATE_KEY" | ne ""}}'
      - git-clone@8: {}
      - script@1:
          title: 비밀 자산 주입 (Config repo)
          inputs:
            - content: |
                #!/usr/bin/env bash
                set -euo pipefail
                git clone --depth 1 "https://x-access-token:${CONFIG_REPO_TOKEN}@github.com/${CONFIG_REPO}.git" /tmp/cfg
                mkdir -p Config fastlane
                cp /tmp/cfg/Config/*.xcconfig Config/
                cp /tmp/cfg/fastlane/.env fastlane/.env
                mkdir -p Projects/App/Resources && cp /tmp/cfg/App/GoogleService-Info.plist Projects/App/Resources/GoogleService-Info.plist
      - restore-cache@3:
          inputs:
            - key: |-
                deps-v2-{{ .OS }}-{{ .Arch }}-{{ checksum "mise.toml" }}-{{ checksum "Tuist/Package.resolved" }}
                deps-v2-{{ .OS }}-{{ .Arch }}-{{ checksum "mise.toml" }}
                deps-v2-{{ .OS }}-{{ .Arch }}
      - script@1:
          title: Tuist 설치 + 프로젝트 생성
          inputs:
            - content: |
                #!/usr/bin/env bash
                set -euo pipefail
                bash scripts/ci_tuist_install.sh
                ls -d *.xcworkspace
      - script@1:
          title: Sentry CLI 설치 (deps 캐시에 포함)
          inputs:
            - content: |
                #!/usr/bin/env bash
                set -euo pipefail
                # $HOME/.local/bin 은 아래 save-cache 에 포함되므로 배포 워크플로가 캐시로 재사용한다.
                curl -sL https://sentry.io/get-cli/ | INSTALL_DIR="$HOME/.local/bin" bash
                "$HOME/.local/bin/sentry-cli" --version
      - save-cache@1:
          inputs:
            - key: deps-v2-{{ .OS }}-{{ .Arch }}-{{ checksum "mise.toml" }}-{{ checksum "Tuist/Package.resolved" }}
            - paths: |-
                $HOME/.local/bin
                $HOME/.local/share/mise
                $HOME/.cache/mise
                $HOME/.cache/tuist
                $HOME/Library/Caches/org.swift.swiftpm

  # ── 배포 (Stage → TestFlight): fastlane QA ──────────────────────────
  fastlane-qa:
    summary: 자산 주입(+Match) → Tuist generate(캐시 재사용) → fastlane QA(TestFlight)
    steps:
      - activate-ssh-key@4:
          run_if: '{{getenv "SSH_RSA_PRIVATE_KEY" | ne ""}}'
      - git-clone@8: {}
      - script@1:
          title: 비밀 자산 주입 (Config repo + Match)
          inputs:
            - content: |
                #!/usr/bin/env bash
                set -euo pipefail
                git clone --depth 1 "https://x-access-token:${CONFIG_REPO_TOKEN}@github.com/${CONFIG_REPO}.git" /tmp/cfg
                mkdir -p Config fastlane
                cp /tmp/cfg/Config/*.xcconfig Config/
                cp /tmp/cfg/fastlane/.env       fastlane/.env
                mkdir -p Projects/App/Resources && cp /tmp/cfg/App/GoogleService-Info.plist Projects/App/Resources/GoogleService-Info.plist
                envman add --key MATCH_GIT_URL --value "https://x-access-token:${CONFIG_REPO_TOKEN}@github.com/Roy-wonji/FastlaneMatch.git"
      - restore-cache@3:
          inputs:
            - key: |-
                deps-v2-{{ .OS }}-{{ .Arch }}-{{ checksum "mise.toml" }}-{{ checksum "Tuist/Package.resolved" }}
                deps-v2-{{ .OS }}-{{ .Arch }}-{{ checksum "mise.toml" }}
                deps-v2-{{ .OS }}-{{ .Arch }}
      - script@1:
          title: Tuist 설치 + 프로젝트 생성
          inputs:
            - content: |
                #!/usr/bin/env bash
                set -euo pipefail
                bash scripts/ci_tuist_install.sh
                ls -d *.xcworkspace
      - restore-cache@3:
          title: Gem 캐시 복원
          inputs:
            - key: |-
                gems-{{ .OS }}-{{ .Arch }}-{{ checksum "Gemfile.lock" }}
                gems-{{ .OS }}-{{ .Arch }}
      - script@1:
          title: Gem 설치 (bundle install)
          inputs:
            - content: |
                #!/usr/bin/env bash
                set -euo pipefail
                export PATH="$HOME/.local/bin:$PATH"
                eval "$(mise activate bash)"
                # fastlane 스텝과 동일한 ruby(mise)로 설치해야 bundle exec가 gem을 찾음
                bundle config set --local path vendor/bundle
                bundle install
      - save-cache@1:
          title: Gem 캐시 저장
          inputs:
            - key: gems-{{ .OS }}-{{ .Arch }}-{{ checksum "Gemfile.lock" }}
            - paths: vendor/bundle
      - script@1:
          title: Sentry CLI 설치
          inputs:
            - content: |
                #!/usr/bin/env bash
                set -euo pipefail
                if [ -z "${SENTRY_AUTH_TOKEN:-}" ]; then
                  echo "ℹ️ SENTRY_AUTH_TOKEN 미설정 — Sentry 업로드 스킵"
                  exit 0
                fi
                curl -sL https://sentry.io/get-cli/ | INSTALL_DIR="$HOME/.local/bin" bash
                "$HOME/.local/bin/sentry-cli" --version
      - script@1:
          title: Fastlane QA — Stage → TestFlight
          inputs:
            - content: |
                #!/usr/bin/env bash
                set -euo pipefail
                export PATH="$HOME/.local/bin:$PATH"
                eval "$(mise activate bash)"
                # Fastfile 내부에서 'tuist generate'를 호출하므로 mise(tuist) 활성화 필수
                bundle exec fastlane ios QA
                # 빌드된 IPA를 Bitrise 배포 디렉토리로 복사 → Installable artifacts 노출
                mkdir -p "$BITRISE_DEPLOY_DIR"
                cp -f fastlane/output/*.ipa "$BITRISE_DEPLOY_DIR/" 2>/dev/null || true
      - script@1:
          title: Bitrise Release Management 업로드 (Installable Artifact)
          inputs:
            - content: |
                #!/usr/bin/env bash
                set -euo pipefail
                # 토큰이 없으면 배포를 막지 않고 넘어간다.
                if [ -z "${BITRISE_RELEASE_MGMT_TOKEN:-}" ]; then
                  echo "ℹ️ BITRISE_RELEASE_MGMT_TOKEN 미설정 — Release Management 업로드 스킵"
                  exit 0
                fi

                IPA=$(ls -1 "$BITRISE_DEPLOY_DIR"/*.ipa 2>/dev/null | head -1 || true)
                if [ -z "$IPA" ]; then
                  echo "⚠️ IPA 없음 — Release Management 업로드 스킵"
                  exit 0
                fi

                FILE_NAME=$(basename "$IPA")
                FILE_SIZE=$(stat -f%z "$IPA")
                ARTIFACT_UUID=$(uuidgen | tr "[:upper:]" "[:lower:]")
                BASE="https://api.bitrise.io/release-management/v1/connected-apps/${RELEASE_MGMT_APP_UUID}/installable-artifacts/${ARTIFACT_UUID}"
                echo "📦 ${FILE_NAME} (${FILE_SIZE} bytes) → artifact ${ARTIFACT_UUID}"

                # 1) 업로드 URL 발급
                UPLOAD_URL=$(curl -fsS -H "Authorization: ${BITRISE_RELEASE_MGMT_TOKEN}" \
                  "${BASE}/upload-url?file_name=${FILE_NAME}&file_size_bytes=${FILE_SIZE}" \
                  | python3 -c "import sys,json; print(json.load(sys.stdin)['upload_url'])")

                # 2) 파일 업로드
                curl -fsS -X PUT \
                  -H "Content-Type: application/octet-stream" \
                  -H "X-Goog-Content-Length-Range: 0,${FILE_SIZE}" \
                  --upload-file "$IPA" "$UPLOAD_URL"

                # 3) 처리 상태 폴링 (최대 5분)
                for i in $(seq 1 30); do
                  STATUS=$(curl -fsS -H "Authorization: ${BITRISE_RELEASE_MGMT_TOKEN}" "${BASE}/status" \
                    | python3 -c "import sys,json; print(json.load(sys.stdin).get('artifact_status',''))" || echo "")
                  echo "  [$i/30] status=${STATUS:-unknown}"
                  case "$STATUS" in
                    processed) echo "✅ Release Management 업로드 완료"; exit 0 ;;
                    failed)    echo "❌ 처리 실패"; exit 1 ;;
                  esac
                  sleep 10
                done
                echo "⚠️ 처리 상태 확인 시간 초과 — 업로드 자체는 완료됨"
      - deploy-to-bitrise-io@2: {}

  # ── 빌드 (Prod): 릴리스 버전 + 자산 주입 + Tuist generate + 캐시 ───────
  build-prod:
    summary: 릴리스 버전 추출 → 자산 주입 → Tuist 설치/generate → 의존성 캐시 저장
    steps:
      - activate-ssh-key@4:
          run_if: '{{getenv "SSH_RSA_PRIVATE_KEY" | ne ""}}'
      - git-clone@8: {}
      - script@1:
          title: 비밀 자산 주입 (Config repo)
          inputs:
            - content: |
                #!/usr/bin/env bash
                set -euo pipefail
                git clone --depth 1 "https://x-access-token:${CONFIG_REPO_TOKEN}@github.com/${CONFIG_REPO}.git" /tmp/cfg
                mkdir -p Config fastlane
                cp /tmp/cfg/Config/*.xcconfig Config/
                cp /tmp/cfg/fastlane/.env       fastlane/.env
                mkdir -p Projects/App/Resources && cp /tmp/cfg/App/GoogleService-Info.plist Projects/App/Resources/GoogleService-Info.plist
      - restore-cache@3:
          inputs:
            - key: |-
                deps-v2-{{ .OS }}-{{ .Arch }}-{{ checksum "mise.toml" }}-{{ checksum "Tuist/Package.resolved" }}
                deps-v2-{{ .OS }}-{{ .Arch }}-{{ checksum "mise.toml" }}
                deps-v2-{{ .OS }}-{{ .Arch }}
      - script@1:
          title: Tuist 설치 + 프로젝트 생성
          inputs:
            - content: |
                #!/usr/bin/env bash
                set -euo pipefail
                bash scripts/ci_tuist_install.sh
                ls -d *.xcworkspace
      - script@1:
          title: Sentry CLI 설치 (deps 캐시에 포함)
          inputs:
            - content: |
                #!/usr/bin/env bash
                set -euo pipefail
                # $HOME/.local/bin 은 아래 save-cache 에 포함되므로 배포 워크플로가 캐시로 재사용한다.
                curl -sL https://sentry.io/get-cli/ | INSTALL_DIR="$HOME/.local/bin" bash
                "$HOME/.local/bin/sentry-cli" --version
      - save-cache@1:
          inputs:
            - key: deps-v2-{{ .OS }}-{{ .Arch }}-{{ checksum "mise.toml" }}-{{ checksum "Tuist/Package.resolved" }}
            - paths: |-
                $HOME/.local/bin
                $HOME/.local/share/mise
                $HOME/.cache/mise
                $HOME/.cache/tuist
                $HOME/Library/Caches/org.swift.swiftpm

  # ── 배포 (Prod → App Store): fastlane release ───────────────────────
  fastlane-release:
    summary: 자산 주입(+Match) → 릴리스 버전 → Tuist generate(캐시) → fastlane release(App Store)
    steps:
      - activate-ssh-key@4:
          run_if: '{{getenv "SSH_RSA_PRIVATE_KEY" | ne ""}}'
      - git-clone@8: {}
      - script@1:
          title: 비밀 자산 주입 (Config repo + Match)
          inputs:
            - content: |
                #!/usr/bin/env bash
                set -euo pipefail
                git clone --depth 1 "https://x-access-token:${CONFIG_REPO_TOKEN}@github.com/${CONFIG_REPO}.git" /tmp/cfg
                mkdir -p Config fastlane
                cp /tmp/cfg/Config/*.xcconfig Config/
                cp /tmp/cfg/fastlane/.env       fastlane/.env
                mkdir -p Projects/App/Resources && cp /tmp/cfg/App/GoogleService-Info.plist Projects/App/Resources/GoogleService-Info.plist
                envman add --key MATCH_GIT_URL --value "https://x-access-token:${CONFIG_REPO_TOKEN}@github.com/Roy-wonji/FastlaneMatch.git"
      - script@1:
          title: 릴리스 버전 추출
          inputs:
            - content: |
                #!/usr/bin/env bash
                set -euo pipefail
                EXT="Plugins/ProjectTemplatePlugin/ProjectDescriptionHelpers/Project+Templete/Extension+String.swift"
                VER="${BITRISE_GIT_TAG#v}"
                if [ -z "$VER" ]; then
                  VER=$(grep -oE 'appVersion\(version: String = "[0-9.]+"' "$EXT" | grep -oE '[0-9]+\.[0-9]+\.[0-9]+' | head -1)
                fi
                envman add --key RELEASE_VERSION --value "$VER"
                echo "📦 릴리스 버전: ${VER}"
      - restore-cache@3:
          inputs:
            - key: |-
                deps-v2-{{ .OS }}-{{ .Arch }}-{{ checksum "mise.toml" }}-{{ checksum "Tuist/Package.resolved" }}
                deps-v2-{{ .OS }}-{{ .Arch }}-{{ checksum "mise.toml" }}
                deps-v2-{{ .OS }}-{{ .Arch }}
      - script@1:
          title: Tuist 설치 + 프로젝트 생성
          inputs:
            - content: |
                #!/usr/bin/env bash
                set -euo pipefail
                bash scripts/ci_tuist_install.sh
                ls -d *.xcworkspace
      - restore-cache@3:
          title: Gem 캐시 복원
          inputs:
            - key: |-
                gems-{{ .OS }}-{{ .Arch }}-{{ checksum "Gemfile.lock" }}
                gems-{{ .OS }}-{{ .Arch }}
      - script@1:
          title: Gem 설치 (bundle install)
          inputs:
            - content: |
                #!/usr/bin/env bash
                set -euo pipefail
                export PATH="$HOME/.local/bin:$PATH"
                eval "$(mise activate bash)"
                # fastlane 스텝과 동일한 ruby(mise)로 설치해야 bundle exec가 gem을 찾음
                bundle config set --local path vendor/bundle
                bundle install
      - save-cache@1:
          title: Gem 캐시 저장
          inputs:
            - key: gems-{{ .OS }}-{{ .Arch }}-{{ checksum "Gemfile.lock" }}
            - paths: vendor/bundle
      - script@1:
          title: Sentry CLI 설치
          inputs:
            - content: |
                #!/usr/bin/env bash
                set -euo pipefail
                if [ -z "${SENTRY_AUTH_TOKEN:-}" ]; then
                  echo "ℹ️ SENTRY_AUTH_TOKEN 미설정 — Sentry 업로드 스킵"
                  exit 0
                fi
                curl -sL https://sentry.io/get-cli/ | INSTALL_DIR="$HOME/.local/bin" bash
                "$HOME/.local/bin/sentry-cli" --version
      - script@1:
          title: Fastlane release — Prod → App Store
          inputs:
            - content: |
                #!/usr/bin/env bash
                set -euo pipefail
                export PATH="$HOME/.local/bin:$PATH"
                eval "$(mise activate bash)"
                # Fastfile 내부에서 'tuist generate'를 호출하므로 mise(tuist) 활성화 필수
                bundle exec fastlane ios release version:$RELEASE_VERSION
                # 빌드된 IPA를 Bitrise 배포 디렉토리로 복사 → Installable artifacts 노출
                mkdir -p "$BITRISE_DEPLOY_DIR"
                cp -f fastlane/output/*.ipa "$BITRISE_DEPLOY_DIR/" 2>/dev/null || true
      - script@1:
          title: Bitrise Release Management 업로드 (Installable Artifact)
          inputs:
            - content: |
                #!/usr/bin/env bash
                set -euo pipefail
                # 토큰이 없으면 배포를 막지 않고 넘어간다.
                if [ -z "${BITRISE_RELEASE_MGMT_TOKEN:-}" ]; then
                  echo "ℹ️ BITRISE_RELEASE_MGMT_TOKEN 미설정 — Release Management 업로드 스킵"
                  exit 0
                fi

                IPA=$(ls -1 "$BITRISE_DEPLOY_DIR"/*.ipa 2>/dev/null | head -1 || true)
                if [ -z "$IPA" ]; then
                  echo "⚠️ IPA 없음 — Release Management 업로드 스킵"
                  exit 0
                fi

                FILE_NAME=$(basename "$IPA")
                FILE_SIZE=$(stat -f%z "$IPA")
                ARTIFACT_UUID=$(uuidgen | tr "[:upper:]" "[:lower:]")
                BASE="https://api.bitrise.io/release-management/v1/connected-apps/${RELEASE_MGMT_APP_UUID}/installable-artifacts/${ARTIFACT_UUID}"
                echo "📦 ${FILE_NAME} (${FILE_SIZE} bytes) → artifact ${ARTIFACT_UUID}"

                # 1) 업로드 URL 발급
                UPLOAD_URL=$(curl -fsS -H "Authorization: ${BITRISE_RELEASE_MGMT_TOKEN}" \
                  "${BASE}/upload-url?file_name=${FILE_NAME}&file_size_bytes=${FILE_SIZE}" \
                  | python3 -c "import sys,json; print(json.load(sys.stdin)['upload_url'])")

                # 2) 파일 업로드
                curl -fsS -X PUT \
                  -H "Content-Type: application/octet-stream" \
                  -H "X-Goog-Content-Length-Range: 0,${FILE_SIZE}" \
                  --upload-file "$IPA" "$UPLOAD_URL"

                # 3) 처리 상태 폴링 (최대 5분)
                for i in $(seq 1 30); do
                  STATUS=$(curl -fsS -H "Authorization: ${BITRISE_RELEASE_MGMT_TOKEN}" "${BASE}/status" \
                    | python3 -c "import sys,json; print(json.load(sys.stdin).get('artifact_status',''))" || echo "")
                  echo "  [$i/30] status=${STATUS:-unknown}"
                  case "$STATUS" in
                    processed) echo "✅ Release Management 업로드 완료"; exit 0 ;;
                    failed)    echo "❌ 처리 실패"; exit 1 ;;
                  esac
                  sleep 10
                done
                echo "⚠️ 처리 상태 확인 시간 초과 — 업로드 자체는 완료됨"
      - deploy-to-bitrise-io@2: {}

  # ── Discord 알림 (배포 워크플로와 분리, 파이프라인이 오케스트레이션) ──────────
  discord-start:
    summary: 빌드 시작 Discord 알림. NOTIFY_KIND(stg/live)로 메시지 분기.
    steps:
      - script@1:
          title: Discord 빌드 시작 알림
          inputs:
            - content: |
                #!/usr/bin/env bash
                python3 - <<'PY'
                import os, json, urllib.request
                kind = os.environ.get('NOTIFY_KIND','stg')
                bn = os.environ.get('BITRISE_BUILD_NUMBER','')
                url = os.environ.get('BITRISE_BUILD_URL','')
                if kind == 'live':
                    tag = os.environ.get('BITRISE_GIT_TAG','')
                    ver = tag[1:] if tag.startswith('v') else tag
                    msg = f"🚀 **Picke** App Store(Prod) 빌드 시작 · {ver} · #{bn}\n{url}"
                else:
                    msg = f"🛠️ **Picke** TestFlight(QA) 빌드 시작 · #{bn}\n{url}"
                wh = os.environ.get('DISCORD_WEBHOOK','')
                if wh:
                    req = urllib.request.Request(wh, data=json.dumps({"content": msg}).encode(),
                                                 headers={"Content-Type":"application/json","User-Agent":"Picke-CI/1.0"})
                    try: urllib.request.urlopen(req); print("discord ok")
                    except Exception as e: print("discord skip:", e)
                PY

  discord-success:
    summary: 배포 성공 Discord 알림. 릴리스 노트는 레포에서 직접 계산. NOTIFY_KIND로 분기.
    steps:
      - activate-ssh-key@4:
          run_if: '{{getenv "SSH_RSA_PRIVATE_KEY" | ne ""}}'
      - git-clone@8: {}
      - script@1:
          title: Discord 성공 알림 (@everyone + 릴리스 노트)
          inputs:
            - content: |
                #!/usr/bin/env bash
                set -uo pipefail
                EXT="Plugins/ProjectTemplatePlugin/ProjectDescriptionHelpers/Project+Templete/Extension+String.swift"
                VER=$(grep -oE 'appVersion\(version: String = "[0-9.]+"' "$EXT" 2>/dev/null | grep -oE '[0-9]+\.[0-9]+\.[0-9]+' | head -1)
                BODY=$(sed -E '/^\[[vV] ?[0-9.]+\]/d' fastlane/metadata/ko/release_notes.txt 2>/dev/null | sed '/./,$!d')
                [ -z "$BODY" ] && BODY=$(sed -E '/^\[[vV] ?[0-9.]+\]/d' fastlane/release_notes.txt 2>/dev/null | sed '/./,$!d')
                [ -z "$BODY" ] && BODY="- 버그 수정"
                NOTES="[v${VER}]
                ${BODY}"
                export NOTES
                python3 - <<'PY'
                import os, json, urllib.request
                kind = os.environ.get('NOTIFY_KIND','stg')
                bn = os.environ.get('BITRISE_BUILD_NUMBER','')
                url = os.environ.get('BITRISE_BUILD_URL','')
                notes = os.environ.get('NOTES','').strip()
                if kind == 'live':
                    tag = os.environ.get('BITRISE_GIT_TAG','')
                    ver = tag[1:] if tag.startswith('v') else tag
                    msg = f"@everyone\n🚀 **Picke** {ver} App Store 제출 완료 · #{bn}"
                    if url: msg += "\n" + url
                else:
                    msg = "@everyone\n"
                    msg += f"✅ **Picke** TestFlight 배포 완료 · #{bn}"
                    if notes: msg += "\n" + notes
                    msg += "\n🔗 TestFlight: https://testflight.apple.com/join/AQZ5xFkB"
                    if url: msg += "\n" + url
                wh = os.environ.get('DISCORD_WEBHOOK','')
                if wh:
                    req = urllib.request.Request(wh, data=json.dumps({"content": msg}).encode(),
                                                 headers={"Content-Type":"application/json","User-Agent":"Picke-CI/1.0"})
                    try: urllib.request.urlopen(req); print("discord ok")
                    except Exception as e: print("discord skip:", e)
                PY