chore: add publish wf

Author: haritabh-z01

.github/workflows/release.yml

@@ -0,0 +1,171 @@
+name: Release
+
+on:
+  push:
+    branches:
+      - publish.wf  # TEMPORARY - Remove before merging to main
+    tags:
+      - 'v*'
+  workflow_dispatch:
+    inputs:
+      tag:
+        description: 'Release tag (e.g., v0.0.6)'
+        required: true
+        type: string
+
+jobs:
+  build-macos:
+    name: Build macOS (${{ matrix.arch }})
+    runs-on: macos-latest
+    strategy:
+      matrix:
+        arch: [arm64, x64]
+    
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Setup pnpm
+        uses: pnpm/action-setup@v4
+        with:
+          version: 10.13.1
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: '20'
+          cache: 'pnpm'
+
+      - name: Install dependencies
+        run: pnpm install --frozen-lockfile
+
+      - name: Download Node.js binaries
+        working-directory: apps/desktop
+        run: pnpm download-node:all
+
+      - name: Build Swift helper
+        run: pnpm build:swift-helper
+
+      - name: Import Apple certificates
+        env:
+          APPLE_CERT_BASE64: ${{ secrets.APPLE_CERT_BASE64 }}
+          APPLE_CERT_PASSWORD: ${{ secrets.APPLE_CERT_PASSWORD }}
+        run: |
+          # Create temporary keychain
+          KEYCHAIN_PATH=$RUNNER_TEMP/app-signing.keychain-db
+          KEYCHAIN_PASSWORD=actions
+          
+          # Decode certificate
+          echo "$APPLE_CERT_BASE64" | base64 --decode > certificate.p12
+          
+          # Create keychain
+          security create-keychain -p "$KEYCHAIN_PASSWORD" "$KEYCHAIN_PATH"
+          security set-keychain-settings -lut 21600 "$KEYCHAIN_PATH"
+          security unlock-keychain -p "$KEYCHAIN_PASSWORD" "$KEYCHAIN_PATH"
+          
+          # Import certificate
+          security import certificate.p12 -P "$APPLE_CERT_PASSWORD" -A -t cert -f pkcs12 -k "$KEYCHAIN_PATH"
+          security list-keychain -d user -s "$KEYCHAIN_PATH"
+          
+          # Set key partition list
+          security set-key-partition-list -S apple-tool:,apple:,codesign: -s -k "$KEYCHAIN_PASSWORD" "$KEYCHAIN_PATH"
+          
+          # Clean up
+          rm certificate.p12
+
+      - name: Build artifacts
+        working-directory: apps/desktop
+        env:
+          APPLE_ID: ${{ secrets.APPLE_ID }}
+          APPLE_APP_PASSWORD: ${{ secrets.APPLE_APP_PASSWORD }}
+          APPLE_TEAM_ID: ${{ secrets.APPLE_TEAM_ID }}
+          CODESIGNING_IDENTITY: ${{ secrets.CODESIGNING_IDENTITY }}
+        run: |
+          # Build both DMG and ZIP with single make command
+          pnpm make:${{ matrix.arch }}
+
+      - name: Get version from package.json
+        id: package_version
+        working-directory: apps/desktop
+        run: echo "version=$(node -p "require('./package.json').version")" >> $GITHUB_OUTPUT
+
+      - name: Upload artifacts
+        uses: actions/upload-artifact@v4
+        with:
+          name: macos-${{ matrix.arch }}
+          path: |
+            apps/desktop/out/make/*.dmg
+            apps/desktop/out/make/zip/darwin/${{ matrix.arch }}/*.zip
+
+  release:
+    name: Create Release
+    needs: build-macos
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+    
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Setup pnpm
+        uses: pnpm/action-setup@v4
+        with:
+          version: 10.13.1
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: '20'
+          cache: 'pnpm'
+
+      - name: Get version from package.json
+        id: package_version
+        working-directory: apps/desktop
+        run: echo "version=$(node -p "require('./package.json').version")" >> $GITHUB_OUTPUT
+
+      - name: Download all artifacts
+        uses: actions/download-artifact@v4
+        with:
+          path: artifacts
+
+      - name: List artifacts
+        run: ls -la artifacts/*
+
+      - name: Create Release
+        uses: softprops/action-gh-release@v2
+        with:
+          draft: true
+          prerelease: true
+          tag_name: ${{ github.event.inputs.tag || github.ref_name }}
+          name: Amical Desktop v${{ steps.package_version.outputs.version }}
+          body: |
+            ## Amical Desktop v${{ steps.package_version.outputs.version }}
+            
+            ### What's New
+            - Please update this section with actual changes
+            
+            ### Downloads
+            
+            #### macOS
+            - **Apple Silicon (M1/M2/M3)**: 
+              - DMG: `Amical-${{ steps.package_version.outputs.version }}-arm64.dmg`
+              - ZIP: `Amical-darwin-arm64-${{ steps.package_version.outputs.version }}.zip`
+            - **Intel**: 
+              - DMG: `Amical-${{ steps.package_version.outputs.version }}-x64.dmg`
+              - ZIP: `Amical-darwin-x64-${{ steps.package_version.outputs.version }}.zip`
+            
+            ### Installation
+            
+            **macOS**: 
+            - **DMG**: Download and open the DMG file, then drag Amical to your Applications folder
+            - **ZIP**: Download and extract the ZIP file, then drag Amical to your Applications folder
+            
+            The ZIP files are primarily for automatic updates. We recommend using the DMG files for initial installation.
+          files: |
+            artifacts/macos-arm64/*.dmg
+            artifacts/macos-arm64/*.zip
+            artifacts/macos-x64/*.dmg
+            artifacts/macos-x64/*.zip
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}