publish-python.yml

name: 🚀 Publish Python SDK to PyPI

on:
  push:
    tags:
      - 'python-v*'
  workflow_dispatch:

jobs:
  publish:
    name: Publish to PyPI
    runs-on: ubuntu-latest

    # Required for PyPI trusted publishing (OIDC)
    permissions:
      id-token: write
      contents: read

    steps:
      - name: 📥 Checkout Code
        uses: actions/checkout@v4

      - name: 🐍 Setup Python
        uses: actions/setup-python@v5
        with:
          python-version: '3.11'

      - name: 📦 Install build tools
        run: pip install build

      - name: ✅ Run Tests
        working-directory: ./python
        run: |
          pip install -e ".[dev]"
          pytest tests/ -v

      - name: 🔨 Build distribution
        working-directory: ./python
        run: python -m build

      - name: 🚀 Publish to PyPI
        uses: pypa/gh-action-pypi-publish@release/v1
        with:
          packages-dir: python/dist/
          # Uses OIDC trusted publishing — no API token needed.
          # Configure your PyPI project's trusted publisher settings to allow
          # this repository + workflow combination.

      - name: 🔍 Verify publication
        run: |
          pip install uverify-sdk --index-url https://pypi.org/simple/
          python -c "import uverify_sdk; print('uverify_sdk', uverify_sdk.__version__)"