@interopio/iocd-cli 0.0.30 → 0.0.32

package/dist/templates/ioconnect-desktop/.github/workflows/build.yml

@@ -1,328 +1,396 @@
-# Manual Release Build Workflow
-name: Build
-
-on:
-  workflow_dispatch:
-    inputs:
-      build_windows:
-        description: 'Build for Windows'
-        required: true
-        type: boolean
-        default: true
-      build_mac:
-        description: 'Build for macOS'
-        required: true
-        type: boolean
-        default: true
-      release_notes:
-        description: 'Release Notes'
-        required: true
-        type: string
-        default: 'New release'
-      prerelease:
-        description: 'Mark as prerelease'
-        required: true
-        type: boolean
-        default: true
-
-env:
-  NODE_VERSION: '24'
-
-jobs:
-  get-version:
-    runs-on: ubuntu-latest
-    outputs:
-      version: ${{ steps.get_version.outputs.version }}
-    steps:
-      - name: Checkout code
-        uses: actions/checkout@v4
-      
-      - name: Get version from package.json
-        id: get_version
-        run: |
-          VERSION=$(node -p "require('./package.json').version")
-          echo "version=$VERSION" >> $GITHUB_OUTPUT
-          echo "Version: $VERSION"
-
-  build-windows:
-    if: ${{ inputs.build_windows }}
-    runs-on: windows-latest
-    timeout-minutes: 30
-    needs: get-version
-    env:
-      IOCD_LICENSE_KEY: ${{ secrets.IOCD_LICENSE_KEY }}
-    
-    steps:
-      - name: Checkout code
-        uses: actions/checkout@v4
-        
-      - name: Setup Node.js
-        uses: actions/setup-node@v4
-        with:
-          node-version: ${{ env.NODE_VERSION }}
-          cache: 'npm'
-          
-      - name: Install dependencies
-        run: npm install
-
-      - name: Install latest @interopio/iocd-cli
-        run: npm install @interopio/iocd-cli@latest 
-        
-      - name: Setup project
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-        run: npm run setup
-        
-      - name: Build application
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-        run: npm run build-skip-install
-        
-      - name: Upload Windows artifacts
-        uses: actions/upload-artifact@v4
-        with:
-          name: windows-artifacts
-          path: dist/make/**/*
-          if-no-files-found: error
-          
-      - name: Collect and upload Windows build logs
-        if: always()
-        shell: bash
-        run: |
-          # Get the actual temp directory that Node.js uses
-          NODEJS_TMPDIR=$(node -e "console.log(require('os').tmpdir())")
-          echo "Node.js tmpdir: $NODEJS_TMPDIR"
-          echo "Looking for logs in: $NODEJS_TMPDIR/@interopio-iocd-cli/"
-          
-          # Create logs collection directory
-          mkdir -p ./all-logs/nodejs-temp ./all-logs/runner-temp
-          
-          # Copy from Node.js temp directory (where actual logs are)
-          if [ -d "$NODEJS_TMPDIR/@interopio-iocd-cli" ]; then
-            echo "Found Node.js temp log directory, contents:"
-            ls -la "$NODEJS_TMPDIR/@interopio-iocd-cli/" || true
-            cp -r "$NODEJS_TMPDIR/@interopio-iocd-cli" ./all-logs/nodejs-temp/ 2>/dev/null || echo "No files to copy from Node.js temp"
-          else
-            echo "Node.js temp log directory not found"
-          fi
-          
-          # Also check GitHub Actions temp directory
-          if [ -d "${{ runner.temp }}/@interopio-iocd-cli" ]; then
-            echo "Found GitHub Actions temp log directory"
-            cp -r "${{ runner.temp }}/@interopio-iocd-cli" ./all-logs/runner-temp/ 2>/dev/null || echo "No files to copy from runner temp"
-          else
-            echo "GitHub Actions temp log directory not found"
-          fi
-          
-      - name: Upload Windows build logs
-        if: always()
-        uses: actions/upload-artifact@v4
-        with:
-          name: windows-build-logs
-          path: |
-            ./all-logs/**/*
-          if-no-files-found: warn
-
-  build-mac:
-    if: ${{ inputs.build_mac }}
-    runs-on: macos-latest
-    timeout-minutes: 30
-    needs: get-version
-    env:
-      IOCD_LICENSE_KEY: ${{ secrets.IOCD_LICENSE_KEY }}
-    
-    steps:
-      - name: Checkout code
-        uses: actions/checkout@v4
-        
-      - name: Setup Node.js
-        uses: actions/setup-node@v4
-        with:
-          node-version: ${{ env.NODE_VERSION }}
-          cache: 'npm'
-          
-      - name: Install dependencies
-        run: npm install
-      
-      - name: Install latest @interopio/iocd-cli
-        run: npm install @interopio/iocd-cli@latest 
-        
-      - name: Setup project
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-        run: npm run setup
-      
-      - name: Setup code-signing (MacOS only)
-        uses: apple-actions/import-codesign-certs@v3
-        with:
-          p12-file-base64: ${{ secrets.APPLE_CERTIFICATE }}
-          p12-password: ${{ secrets.APPLE_CERTIFICATE_PASSWORD }}
-
-      - name: Build application
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          # code-signing environment variables
-          MAC_CODE_SIGN_TYPE: keychain # keychain will use the certificate installed by apple-actions/import-codesign-certs
-          # notarization environment variables
-          MAC_NOTARIZATION_TYPE: notarytool   
-          MAC_NOTARIZATION_APPLE_ID: ${{ secrets.APPLE_ID }}
-          MAC_NOTARIZATION_APPLE_ID_PASSWORD: ${{ secrets.APPLE_PASSWORD }}
-          MAC_NOTARIZATION_APPLE_TEAM_ID: ${{ secrets.APPLE_TEAM_ID }}
-        run: npm run build-skip-install
-        
-      - name: Upload macOS artifacts
-        uses: actions/upload-artifact@v4
-        with:
-          name: mac-artifacts
-          path: dist/make/**/*
-          if-no-files-found: error
-          
-      - name: Collect and upload macOS build logs
-        if: always()
-        shell: bash
-        run: |
-          # Get the actual temp directory that Node.js uses
-          NODEJS_TMPDIR=$(node -e "console.log(require('os').tmpdir())")
-          echo "Node.js tmpdir: $NODEJS_TMPDIR"
-          echo "Looking for logs in: $NODEJS_TMPDIR/@interopio-iocd-cli/"
-          
-          # Create logs collection directory
-          mkdir -p ./all-logs/nodejs-temp ./all-logs/runner-temp
-          
-          # Copy from Node.js temp directory (where actual logs are)
-          if [ -d "$NODEJS_TMPDIR/@interopio-iocd-cli" ]; then
-            echo "Found Node.js temp log directory, contents:"
-            ls -la "$NODEJS_TMPDIR/@interopio-iocd-cli/" || true
-            cp -r "$NODEJS_TMPDIR/@interopio-iocd-cli" ./all-logs/nodejs-temp/ 2>/dev/null || echo "No files to copy from Node.js temp"
-          else
-            echo "Node.js temp log directory not found"
-          fi
-          
-          # Also check GitHub Actions temp directory
-          if [ -d "${{ runner.temp }}/@interopio-iocd-cli" ]; then
-            echo "Found GitHub Actions temp log directory"
-            cp -r "${{ runner.temp }}/@interopio-iocd-cli" ./all-logs/runner-temp/ 2>/dev/null || echo "No files to copy from runner temp"
-          else
-            echo "GitHub Actions temp log directory not found"
-          fi
-          
-      - name: Upload macOS build logs
-        if: always()
-        uses: actions/upload-artifact@v4
-        with:
-          name: mac-build-logs
-          path: |
-            ./all-logs/**/*
-          if-no-files-found: warn
-
-  create-release:
-    runs-on: ubuntu-latest
-    needs: [get-version, build-windows, build-mac]
-    if: always() && ((!inputs.build_windows || needs.build-windows.result == 'success') && (!inputs.build_mac || needs.build-mac.result == 'success') && (inputs.build_windows || inputs.build_mac))
-    
-    steps:
-      - name: Checkout code
-        uses: actions/checkout@v4
-        
-      - name: Download Windows artifacts
-        if: ${{ inputs.build_windows && needs.build-windows.result == 'success' }}
-        uses: actions/download-artifact@v4
-        with:
-          name: windows-artifacts
-          path: ./artifacts/windows/
-          
-      - name: Download macOS artifacts
-        if: ${{ inputs.build_mac && needs.build-mac.result == 'success' }}
-        uses: actions/download-artifact@v4
-        with:
-          name: mac-artifacts
-          path: ./artifacts/mac/
-          
-      - name: List all artifacts
-        run: |
-          echo "All downloaded artifacts:"
-          find ./artifacts -type f -name "*.dmg" -o -name "*.zip" -o -name "*.exe" 2>/dev/null || echo "No artifacts found"
-          
-      - name: Delete existing release if exists
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-        run: |
-          VERSION="${{ needs.get-version.outputs.version }}"
-          # Try to delete existing release and tag
-          gh release delete "v$VERSION" --yes || echo "Release v$VERSION does not exist"
-          git push --delete origin "v$VERSION" || echo "Tag v$VERSION does not exist"
-        continue-on-error: true
-        
-      - name: Create Release
-        uses: softprops/action-gh-release@v2
-        with:
-          tag_name: v${{ needs.get-version.outputs.version }}
-          name: Release v${{ needs.get-version.outputs.version }}
-          body: ${{ inputs.release_notes }}
-          draft: false
-          prerelease: ${{ inputs.prerelease }}
-          files: |
-            ./artifacts/**/*.dmg
-            ./artifacts/**/*.zip
-            ./artifacts/**/*.exe
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-
-  summary:
-    runs-on: ubuntu-latest
-    needs: [get-version, build-windows, build-mac, create-release]
-    if: always()
-    
-    steps:
-      - name: Generate Summary
-        run: |
-          echo "# Workflow Summary" >> $GITHUB_STEP_SUMMARY
-          echo "" >> $GITHUB_STEP_SUMMARY
-          echo "## Build Results" >> $GITHUB_STEP_SUMMARY
-          echo "- **Version**: v${{ needs.get-version.outputs.version }}" >> $GITHUB_STEP_SUMMARY
-          
-          # Windows Build Status
-          if [[ "${{ inputs.build_windows }}" == "true" ]]; then
-            if [[ "${{ needs.build-windows.result }}" == "success" ]]; then
-              echo "- **Windows Build**: ✅ Success" >> $GITHUB_STEP_SUMMARY
-            elif [[ "${{ needs.build-windows.result }}" == "failure" ]]; then
-              echo "- **Windows Build**: ❌ Failed" >> $GITHUB_STEP_SUMMARY
-            else
-              echo "- **Windows Build**: ⏸️ Cancelled/Skipped" >> $GITHUB_STEP_SUMMARY
-            fi
-          else
-            echo "- **Windows Build**: ⏭️ Not Requested" >> $GITHUB_STEP_SUMMARY
-          fi
-          
-          # macOS Build Status
-          if [[ "${{ inputs.build_mac }}" == "true" ]]; then
-            if [[ "${{ needs.build-mac.result }}" == "success" ]]; then
-              echo "- **macOS Build**: ✅ Success" >> $GITHUB_STEP_SUMMARY
-            elif [[ "${{ needs.build-mac.result }}" == "failure" ]]; then
-              echo "- **macOS Build**: ❌ Failed" >> $GITHUB_STEP_SUMMARY
-            else
-              echo "- **macOS Build**: ⏸️ Cancelled/Skipped" >> $GITHUB_STEP_SUMMARY
-            fi
-          else
-            echo "- **macOS Build**: ⏭️ Not Requested" >> $GITHUB_STEP_SUMMARY
-          fi
-          
-          # Release Status
-          if [[ "${{ needs.create-release.result }}" == "success" ]]; then
-            echo "- **Release Created**: ✅ Success" >> $GITHUB_STEP_SUMMARY
-          elif [[ "${{ needs.create-release.result }}" == "failure" ]]; then
-            echo "- **Release Created**: ❌ Failed" >> $GITHUB_STEP_SUMMARY
-          else
-            echo "- **Release Created**: ⏭️ Skipped (builds failed/cancelled)" >> $GITHUB_STEP_SUMMARY
-          fi
-          
-          echo "- **Prerelease**: ${{ inputs.prerelease && '✅ Yes' || '❌ No' }}" >> $GITHUB_STEP_SUMMARY
-          echo "" >> $GITHUB_STEP_SUMMARY
-          echo "## Release Notes" >> $GITHUB_STEP_SUMMARY
-          echo "${{ inputs.release_notes }}" >> $GITHUB_STEP_SUMMARY
-          echo "" >> $GITHUB_STEP_SUMMARY
-          if [[ "${{ needs.create-release.result }}" == "success" ]]; then
-            echo "🎉 **Release successfully created**: [v${{ needs.get-version.outputs.version }}](https://github.com/${{ github.repository }}/releases/tag/v${{ needs.get-version.outputs.version }})" >> $GITHUB_STEP_SUMMARY
-          else
-            echo "⚠️ **Release creation failed or was skipped**" >> $GITHUB_STEP_SUMMARY
+# Manual Release Build Workflow
+name: Build
+
+on:
+  workflow_dispatch:
+    inputs:
+      build_windows:
+        description: 'Build for Windows'
+        required: true
+        type: boolean
+        default: true
+      build_mac:
+        description: 'Build for macOS'
+        required: true
+        type: boolean
+        default: true
+      windows_sign:
+        description: 'Windows Code Signing Method'
+        required: true
+        type: choice
+        default: 'off'
+        options:
+          - 'off'
+          - 'signtool'
+      release_notes:
+        description: 'Release Notes'
+        required: true
+        type: string
+        default: 'New release'
+      prerelease:
+        description: 'Mark as prerelease'
+        required: true
+        type: boolean
+        default: true
+
+env:
+  NODE_VERSION: '24'
+
+jobs:
+  get-version:
+    runs-on: ubuntu-latest
+    outputs:
+      version: ${{ steps.get_version.outputs.version }}
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+      
+      - name: Get version from package.json
+        id: get_version
+        run: |
+          VERSION=$(node -p "require('./package.json').version")
+          echo "version=$VERSION" >> $GITHUB_OUTPUT
+          echo "Version: $VERSION"
+
+  build-windows:
+    if: ${{ inputs.build_windows }}
+    runs-on: windows-latest
+    timeout-minutes: 30
+    needs: get-version
+    env:
+      IOCD_LICENSE_KEY: ${{ secrets.IOCD_LICENSE_KEY }}
+      WIN_CODE_SIGN_TYPE: ${{ inputs.windows_sign }}    
+      WIN_PFX_PATH: ${{ secrets.WIN_PFX_PATH }}
+      WIN_PFX_PASS: ${{ secrets.WIN_PFX_PASS }}
+      SM_API_KEY: ${{ secrets.SM_API_KEY }}
+      SM_CLIENT_CERT_PASSWORD: ${{ secrets.SM_CLIENT_CERT_PASSWORD }}    
+      SM_HOST: ${{ secrets.SM_HOST }}
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+        
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+         node-version: ${{ env.NODE_VERSION }}
+         cache: 'npm'
+          
+      - name: Install dependencies
+        run: npm install
+
+      - name: Install latest @interopio/iocd-cli
+        run: npm install @interopio/iocd-cli@latest    
+        
+      - name: Setup project
+        env:
+         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}          
+        run: npm run setup
+
+      # This step setup digicert
+      - name: Setup SMCTL Code Signing
+        if: ${{ env.SM_API_KEY != '' }}
+        id: setup-smctl
+        uses: ./.github/actions/setup-smctl
+        with:
+          api-key: ${{ secrets.SM_API_KEY }}
+          client-cert-b64: ${{ secrets.SM_CLIENT_CERT_FILE }}
+          client-cert-password: ${{ secrets.SM_CLIENT_CERT_PASSWORD }}
+          keypair-name: ${{ secrets.SM_KEYPAIR_NAME }}
+          host: ${{ secrets.SM_HOST }}
+
+      - name: Set certificate file path
+        if: ${{ env.SM_API_KEY != '' }}
+        shell: cmd
+        run: echo SM_CLIENT_CERT_FILE=${{ steps.setup-smctl.outputs.cert-file-path }} >> %GITHUB_ENV%   
+
+      - name: SMCTL Health Check
+        if: ${{ env.SM_API_KEY != '' }}
+        shell: cmd
+        run: smctl healthcheck
+    
+      - name: Build application
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          WIN_CERT_SHA1: ${{ secrets.SM_CODE_SIGNING_CERT_SHA1_HASH }}
+        shell: pwsh
+        run: |
+          # Add SMCTL to PATH
+          $env:PATH = "C:\Program Files\DigiCert\DigiCert Keylocker Tools;$env:PATH"
+          
+          # Find and add signtool to PATH dynamically
+          $sdkPath = "C:\Program Files (x86)\Windows Kits\10\bin"
+          if (Test-Path $sdkPath) {
+            $signtoolPath = Get-ChildItem -Path $sdkPath -Filter "signtool.exe" -Recurse -ErrorAction SilentlyContinue | 
+                           Where-Object { $_.FullName -match "\\x64\\signtool.exe$" } | 
+                           Select-Object -First 1 -ExpandProperty Directory
+            if ($signtoolPath) {
+              Write-Host "Found signtool at: $signtoolPath"
+              $env:PATH = "$signtoolPath;$env:PATH"
+            } else {
+              Write-Host "Warning: signtool.exe not found in Windows SDK"
+            }
+          }
+          
+          npm run build-skip-install
+      
+      - name: Upload Windows artifacts
+        uses: actions/upload-artifact@v4
+        with:
+          name: windows-artifacts
+          path: dist/make/**/*
+          if-no-files-found: error
+          
+      - name: Gather logs
+        if: always()
+        shell: bash
+        run: |
+          # Get the actual temp directory that Node.js uses
+          NODEJS_TMPDIR=$(node -e "console.log(require('os').tmpdir())")
+          echo "Node.js tmpdir: $NODEJS_TMPDIR"
+          echo "Looking for logs in: $NODEJS_TMPDIR/@interopio-iocd-cli/"
+          
+          # Create logs collection directory
+          mkdir -p ./all-logs/nodejs-temp ./all-logs/runner-temp
+          
+          # Copy from Node.js temp directory (where actual logs are)
+          if [ -d "$NODEJS_TMPDIR/@interopio-iocd-cli" ]; then
+            echo "Found Node.js temp log directory, contents:"
+            ls -la "$NODEJS_TMPDIR/@interopio-iocd-cli/" || true
+            cp -r "$NODEJS_TMPDIR/@interopio-iocd-cli" ./all-logs/nodejs-temp/ 2>/dev/null || echo "No files to copy from Node.js temp"
+          else
+            echo "Node.js temp log directory not found"
+          fi
+          
+          # Also check GitHub Actions temp directory
+          if [ -d "${{ runner.temp }}/@interopio-iocd-cli" ]; then
+            echo "Found GitHub Actions temp log directory"
+            cp -r "${{ runner.temp }}/@interopio-iocd-cli" ./all-logs/runner-temp/ 2>/dev/null || echo "No files to copy from runner temp"
+          else
+            echo "GitHub Actions temp log directory not found"
+          fi
+          
+      - name: Upload Windows build logs
+        if: always()
+        uses: actions/upload-artifact@v4
+        with:
+          name: windows-build-logs
+          path: |
+            ./all-logs/**/*
+          if-no-files-found: warn
+
+  build-mac:
+    if: ${{ inputs.build_mac }}
+    runs-on: macos-latest
+    timeout-minutes: 30
+    needs: get-version
+    env:
+      IOCD_LICENSE_KEY: ${{ secrets.IOCD_LICENSE_KEY }}
+    
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+        
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: ${{ env.NODE_VERSION }}
+          cache: 'npm'
+          
+      - name: Install dependencies
+        run: npm install
+      
+      - name: Install latest @interopio/iocd-cli
+        run: npm install @interopio/iocd-cli@latest 
+        
+      - name: Setup project
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: npm run setup
+      
+      - name: Setup code-signing (MacOS only)
+        uses: apple-actions/import-codesign-certs@v3
+        with:
+          p12-file-base64: ${{ secrets.APPLE_CERTIFICATE }}
+          p12-password: ${{ secrets.APPLE_CERTIFICATE_PASSWORD }}
+
+      - name: Build application
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          APPLE_ID: ${{ secrets.APPLE_ID }}
+          APPLE_PASSWORD: ${{ secrets.APPLE_PASSWORD }}
+          APPLE_TEAM_ID: ${{ secrets.APPLE_TEAM_ID }}
+        run: npm run build-skip-install
+        
+      - name: Upload macOS artifacts
+        uses: actions/upload-artifact@v4
+        with:
+          name: mac-artifacts
+          path: dist/make/**/*
+          if-no-files-found: error
+          
+      - name: Collect and upload macOS build logs
+        if: always()
+        shell: bash
+        run: |
+          # Get the actual temp directory that Node.js uses
+          NODEJS_TMPDIR=$(node -e "console.log(require('os').tmpdir())")
+          echo "Node.js tmpdir: $NODEJS_TMPDIR"
+          echo "Looking for logs in: $NODEJS_TMPDIR/@interopio-iocd-cli/"
+          
+          # Create logs collection directory
+          mkdir -p ./all-logs/nodejs-temp ./all-logs/runner-temp
+          
+          # Copy from Node.js temp directory (where actual logs are)
+          if [ -d "$NODEJS_TMPDIR/@interopio-iocd-cli" ]; then
+            echo "Found Node.js temp log directory, contents:"
+            ls -la "$NODEJS_TMPDIR/@interopio-iocd-cli/" || true
+            cp -r "$NODEJS_TMPDIR/@interopio-iocd-cli" ./all-logs/nodejs-temp/ 2>/dev/null || echo "No files to copy from Node.js temp"
+          else
+            echo "Node.js temp log directory not found"
+          fi
+          
+          # Also check GitHub Actions temp directory
+          if [ -d "${{ runner.temp }}/@interopio-iocd-cli" ]; then
+            echo "Found GitHub Actions temp log directory"
+            cp -r "${{ runner.temp }}/@interopio-iocd-cli" ./all-logs/runner-temp/ 2>/dev/null || echo "No files to copy from runner temp"
+          else
+            echo "GitHub Actions temp log directory not found"
+          fi
+          
+      - name: Upload macOS build logs
+        if: always()
+        uses: actions/upload-artifact@v4
+        with:
+          name: mac-build-logs
+          path: |
+            ./all-logs/**/*
+          if-no-files-found: warn
+
+  create-release:
+    runs-on: ubuntu-latest
+    needs: [get-version, build-windows, build-mac]
+    if: always() && ((!inputs.build_windows || needs.build-windows.result == 'success') && (!inputs.build_mac || needs.build-mac.result == 'success') && (inputs.build_windows || inputs.build_mac))
+    
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+        
+      - name: Download Windows artifacts
+        if: ${{ inputs.build_windows && needs.build-windows.result == 'success' }}
+        uses: actions/download-artifact@v4
+        with:
+          name: windows-artifacts
+          path: ./artifacts/windows/
+          
+      - name: Download macOS artifacts
+        if: ${{ inputs.build_mac && needs.build-mac.result == 'success' }}
+        uses: actions/download-artifact@v4
+        with:
+          name: mac-artifacts
+          path: ./artifacts/mac/
+          
+      - name: List all artifacts
+        run: |
+          echo "All downloaded artifacts:"
+          find ./artifacts -type f -name "*.dmg" -o -name "*.zip" -o -name "*.exe" 2>/dev/null || echo "No artifacts found"
+          
+      - name: Delete existing release if exists
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          VERSION="${{ needs.get-version.outputs.version }}"
+          echo "Checking for existing release v$VERSION..."
+          
+          # Try to delete existing release first
+          if gh release view "v$VERSION" >/dev/null 2>&1; then
+            echo "Found existing release v$VERSION, deleting..."
+            gh release delete "v$VERSION" --yes
+            echo "Release v$VERSION deleted"
+          else
+            echo "No existing release v$VERSION found"
+          fi
+          
+          # Try to delete existing tag
+          if git ls-remote --tags origin | grep -q "refs/tags/v$VERSION$"; then
+            echo "Found existing tag v$VERSION, deleting..."
+            git push --delete origin "v$VERSION"
+            echo "Tag v$VERSION deleted"
+          else
+            echo "No existing tag v$VERSION found"
+          fi
+        continue-on-error: true
+        
+      - name: Create Release
+        uses: softprops/action-gh-release@v2
+        with:
+          tag_name: v${{ needs.get-version.outputs.version }}
+          name: Release v${{ needs.get-version.outputs.version }}
+          body: ${{ inputs.release_notes }}
+          draft: false
+          prerelease: ${{ inputs.prerelease }}
+          files: |
+            ./artifacts/**/*.dmg
+            ./artifacts/**/*.zip
+            ./artifacts/**/*.exe
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
+  summary:
+    runs-on: ubuntu-latest
+    needs: [get-version, build-windows, build-mac, create-release]
+    if: always()
+    
+    steps:
+      - name: Generate Summary
+        run: |
+          echo "# Workflow Summary" >> $GITHUB_STEP_SUMMARY
+          echo "" >> $GITHUB_STEP_SUMMARY
+          echo "## Build Results" >> $GITHUB_STEP_SUMMARY
+          echo "- **Version**: v${{ needs.get-version.outputs.version }}" >> $GITHUB_STEP_SUMMARY
+          echo "- **Windows Signing**: ${{ inputs.windows_sign }}" >> $GITHUB_STEP_SUMMARY
+          
+          # Windows Build Status
+          if [[ "${{ inputs.build_windows }}" == "true" ]]; then
+            if [[ "${{ needs.build-windows.result }}" == "success" ]]; then
+              echo "- **Windows Build**: ✅ Success" >> $GITHUB_STEP_SUMMARY
+            elif [[ "${{ needs.build-windows.result }}" == "failure" ]]; then
+              echo "- **Windows Build**: ❌ Failed" >> $GITHUB_STEP_SUMMARY
+            else
+              echo "- **Windows Build**: ⏸️ Cancelled/Skipped" >> $GITHUB_STEP_SUMMARY
+            fi
+          else
+            echo "- **Windows Build**: ⏭️ Not Requested" >> $GITHUB_STEP_SUMMARY
+          fi
+          
+          # macOS Build Status
+          if [[ "${{ inputs.build_mac }}" == "true" ]]; then
+            if [[ "${{ needs.build-mac.result }}" == "success" ]]; then
+              echo "- **macOS Build**: ✅ Success" >> $GITHUB_STEP_SUMMARY
+            elif [[ "${{ needs.build-mac.result }}" == "failure" ]]; then
+              echo "- **macOS Build**: ❌ Failed" >> $GITHUB_STEP_SUMMARY
+            else
+              echo "- **macOS Build**: ⏸️ Cancelled/Skipped" >> $GITHUB_STEP_SUMMARY
+            fi
+          else
+            echo "- **macOS Build**: ⏭️ Not Requested" >> $GITHUB_STEP_SUMMARY
+          fi
+          
+          # Release Status
+          if [[ "${{ needs.create-release.result }}" == "success" ]]; then
+            echo "- **Release Created**: ✅ Success" >> $GITHUB_STEP_SUMMARY
+          elif [[ "${{ needs.create-release.result }}" == "failure" ]]; then
+            echo "- **Release Created**: ❌ Failed" >> $GITHUB_STEP_SUMMARY
+          else
+            echo "- **Release Created**: ⏭️ Skipped (builds failed/cancelled)" >> $GITHUB_STEP_SUMMARY
+          fi
+          
+          echo "- **Prerelease**: ${{ inputs.prerelease && '✅ Yes' || '❌ No' }}" >> $GITHUB_STEP_SUMMARY
+          echo "" >> $GITHUB_STEP_SUMMARY
+          echo "## Release Notes" >> $GITHUB_STEP_SUMMARY
+          echo "${{ inputs.release_notes }}" >> $GITHUB_STEP_SUMMARY
+          echo "" >> $GITHUB_STEP_SUMMARY
+          if [[ "${{ needs.create-release.result }}" == "success" ]]; then
+            echo "🎉 **Release successfully created**: [v${{ needs.get-version.outputs.version }}](https://github.com/${{ github.repository }}/releases/tag/v${{ needs.get-version.outputs.version }})" >> $GITHUB_STEP_SUMMARY
+          else
+            echo "⚠️ **Release creation failed or was skipped**" >> $GITHUB_STEP_SUMMARY
           fi