From 9ecb2f8de56e8551ae4ce334525e89c3c0a82cbd Mon Sep 17 00:00:00 2001
From: Mark Saward <mark.saward@episub.com>
Date: Tue, 20 Jan 2026 13:38:38 +1100
Subject: [PATCH 1/2] test updated action

---
 .github/workflows/test-action.yml |  72 +++++++++++++++
 action.yaml                       | 140 ++++++++++++++++++++++++------
 2 files changed, 186 insertions(+), 26 deletions(-)
 create mode 100644 .github/workflows/test-action.yml

diff --git a/.github/workflows/test-action.yml b/.github/workflows/test-action.yml
new file mode 100644
index 0000000..f368916
--- /dev/null
+++ b/.github/workflows/test-action.yml
@@ -0,0 +1,72 @@
+name: Test Action Logic
+
+on:
+  push:
+    branches: [main]
+    paths: ['action.yml', '.github/workflows/test-action.yml']
+  pull_request:
+    branches: [main]
+    paths: ['action.yml', '.github/workflows/test-action.yml']
+  workflow_dispatch:
+
+jobs:
+  # Test 1: Defaults (Get Latest)
+  test-latest:
+    strategy:
+      matrix:
+        os: [ubuntu-latest, macos-latest]
+    runs-on: ${{ matrix.os }}
+    name: "Latest (${{ matrix.os }})"
+    steps:
+      - name: Checkout Code
+        uses: actions/checkout@v4
+
+      - name: Run Action (Local Path)
+        id: spawn
+        # 'uses: ./' tells GitHub to load action.yml from the current repo root
+        uses: ./ 
+        with:
+          # Optional: provide a token to avoid rate limits during testing
+          github_token: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Verify Installation
+        run: |
+          echo "Verifying Spawn installation..."
+          which spawn
+          spawn --version
+
+          echo "Output Version: ${{ steps.spawn.outputs.version }}"
+
+  # Test 2: Specific Version (Pinning)
+  test-specific:
+    runs-on: ubuntu-latest
+    name: "Pinned Version"
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Run Action (v0.1.0)
+        uses: ./
+        with:
+          # REPLACE 'v0.1.0' with a real tag that actually exists in saward/spawn
+          version: 'v0.1.0' 
+          github_token: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Verify
+        run: spawn --version
+
+  # Test 3: Normalization (Input '0.1.0' -> Target 'v0.1.0')
+  test-normalization:
+    runs-on: ubuntu-latest
+    name: "Tag Normalization"
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Run Action (Missing 'v')
+        uses: ./
+        with:
+          # If your repo uses 'v0.1.0', passing '0.1.0' tests your bash script's ability to fix it
+          version: '0.1.0' 
+          github_token: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Verify
+        run: spawn --version
diff --git a/action.yaml b/action.yaml
index 490463c..ec65dd3 100644
--- a/action.yaml
+++ b/action.yaml
@@ -5,57 +5,145 @@ inputs:
   version:
     description: 'Release tag to install (use "latest" for newest)'
     default: 'latest'
+  github_token:
+    description: 'Token for API authentication (optional)'
+    required: false
 
 outputs:
   version:
     description: 'The Spawn version that was installed'
+    value: ${{ steps.resolve.outputs.version }}
 
 runs:
   using: 'composite'
   steps:
-    # 1️⃣ Resolve the version tag ("latest" → real tag_name)
+    # 1️⃣ Resolve version (Global gh check + Tag Normalization)
     - name: Determine version
       id: resolve
       shell: bash
+      env:
+        INPUT_VER: ${{ inputs.version }}
+        INPUT_TOKEN: ${{ inputs.github_token }}
       run: |
         set -euo pipefail
-        if [[ "${{ inputs.version }}" == "latest" ]]; then
-          ver=$(curl -sfL https://api.github.com/repos/saward/spawn/releases/latest \
-                | jq -r .tag_name)
+
+        # --- 1. Token Setup ---
+        # Fallback logic in bash to handle empty inputs vs missing context
+        GH_TOKEN="${INPUT_TOKEN:-${GITHUB_TOKEN:-}}"
+        export GH_TOKEN
+
+        if [[ -z "$GH_TOKEN" ]]; then
+           echo "::warning::No GitHub Token provided. API rate limits may apply."
+        fi
+
+        # --- 2. Dependency Check ---
+        # We require 'gh' for reliable tag resolution. Fail fast if missing.
+        if ! command -v gh &> /dev/null; then
+           echo "::error::The 'gh' CLI is required for this action but was not found."
+           exit 1
+        fi
+
+        # --- 3. Resolution Logic ---
+        if [[ "$INPUT_VER" == "latest" ]]; then
+          echo "Resolving 'latest' via GitHub API..."
+          ver=$(gh release view --repo saward/spawn --json tagName --jq .tagName)
         else
-          ver="${{ inputs.version }}"
+          # Check if the exact tag exists
+          if gh release view --repo saward/spawn "$INPUT_VER" &>/dev/null; then
+             ver="$INPUT_VER"
+          # Check if adding 'v' helps (e.g. input '0.5.0' -> found 'v0.5.0')
+          elif gh release view --repo saward/spawn "v$INPUT_VER" &>/dev/null; then
+             ver="v$INPUT_VER"
+          else
+             echo "::error::Release '$INPUT_VER' (or 'v$INPUT_VER') not found in saward/spawn"
+             exit 1
+          fi
         fi
+        
         echo "version=$ver" >> "$GITHUB_OUTPUT"
-        echo "Spawn version → $ver"
+        echo "Selected version: $ver"
 
-    # 2️⃣ Map the runner platform to the correct asset suffix
+    # 2️⃣ Map Platform
     - name: Select asset target
       id: target
       shell: bash
       run: |
-        case "${{ runner.os }}-${{ runner.arch }}" in
-          Linux-X64)   tgt="x86_64-unknown-linux-musl"  ;;
-          Linux-ARM64) tgt="aarch64-unknown-linux-musl" ;;
-          *) echo "Unsupported platform: ${{ runner.os }} ${{ runner.arch }}"; exit 1 ;;
+        set -euo pipefail
+        OS=$(echo "${{ runner.os }}" | tr '[:upper:]' '[:lower:]')
+        ARCH=$(echo "${{ runner.arch }}" | tr '[:upper:]' '[:lower:]')
+        
+        case "$OS-$ARCH" in
+          linux-x64)   tgt="x86_64-unknown-linux-musl"  ;;
+          linux-arm64) tgt="aarch64-unknown-linux-musl" ;;
+          macos-x64)   tgt="x86_64-apple-darwin" ;; 
+          macos-arm64) tgt="aarch64-apple-darwin" ;;
+          *) 
+            echo "::error::Unsupported platform: $OS $ARCH"
+            exit 1 
+            ;;
         esac
         echo "target=$tgt" >> "$GITHUB_OUTPUT"
 
-    # 3️⃣ Download and extract the tarball
-    - name: Download Spawn ${{ steps.resolve.outputs.version }}
+    # 3️⃣ Download, Extract, and Install
+    - name: Install Spawn
       shell: bash
+      env:
+        VER: ${{ steps.resolve.outputs.version }}
+        TGT: ${{ steps.target.outputs.target }}
       run: |
         set -euo pipefail
-        ver=${{ steps.resolve.outputs.version }}
-        tgt=${{ steps.target.outputs.target }}
-        asset="spawn-${ver}-${tgt}.tar.gz"
-        url="https://github.com/saward/spawn/releases/download/${ver}/${asset}"
-        echo "Fetching $url"
-        curl -sLf -o "$asset" "$url"
-        tar -xzf "$asset"
-        chmod +x spawn
-        echo "$PWD" >> "$GITHUB_PATH"   # add to PATH
-
-    # 4️⃣ Log installed version
-    - name: Done
+        
+        # 1. Setup clean directories
+        # Use a specific download folder to separate extraction mess from final binary
+        DOWNLOAD_DIR="$RUNNER_TEMP/spawn-dl"
+        BIN_DIR="$RUNNER_TEMP/spawn-bin"
+        mkdir -p "$DOWNLOAD_DIR" "$BIN_DIR"
+        
+        # 2. Download
+        ASSET="spawn-${VER}-${TGT}.tar.gz"
+        URL="https://github.com/saward/spawn/releases/download/${VER}/${ASSET}"
+        echo "Downloading $URL..."
+        curl -sSfL -o "$DOWNLOAD_DIR/spawn.tar.gz" "$URL"
+        
+        # 3. Extract
+        echo "Extracting..."
+        tar -xzf "$DOWNLOAD_DIR/spawn.tar.gz" -C "$DOWNLOAD_DIR"
+        
+        # 4. Find the binary (Robust Heuristic)
+        # First, look for a file named 'spawn' that has execute permissions
+        FOUND_BIN=$(find "$DOWNLOAD_DIR" -type f -name "spawn" -perm -111 | head -n 1 || true)
+        
+        # Fallback: Look for any file named 'spawn' (in case perms were lost in zip)
+        if [[ -z "$FOUND_BIN" ]]; then
+          FOUND_BIN=$(find "$DOWNLOAD_DIR" -type f -name "spawn" | head -n 1 || true)
+        fi
+
+        if [[ -z "$FOUND_BIN" ]]; then
+          echo "::error::Could not find 'spawn' binary in extracted archive"
+          echo "::group::Archive Contents (Debug)"
+          find "$DOWNLOAD_DIR" -maxdepth 3
+          echo "::endgroup::"
+          exit 1
+        fi
+
+        # 5. Copy to stable directory (cp is safer than mv across potential mounts)
+        echo "Installing $FOUND_BIN to $BIN_DIR/spawn"
+        cp "$FOUND_BIN" "$BIN_DIR/spawn"
+        chmod +x "$BIN_DIR/spawn"
+        
+        # 6. Add deterministic path to GITHUB_PATH
+        echo "$BIN_DIR" >> "$GITHUB_PATH"
+
+    # 4️⃣ Verify
+    - name: Verify Installation
       shell: bash
-      run: echo "::notice title=Spawn::Installed version ${{ steps.resolve.outputs.version }}"
+      run: |
+        set -euo pipefail
+        # Ensure it's on the path and runnable
+        if ! command -v spawn &> /dev/null; then
+           echo "::error::Spawn command not found on PATH"
+           exit 1
+        fi
+        
+        INSTALLED_VER=$(spawn --version)
+        echo "::notice title=Spawn::Installed version $INSTALLED_VER"

From 08b62b2f9c9f412930df44cdbf8ecabda21b1f9e Mon Sep 17 00:00:00 2001
From: Mark Saward <mark.saward@episub.com>
Date: Tue, 20 Jan 2026 13:39:51 +1100
Subject: [PATCH 2/2] update version used in test

---
 .github/workflows/test-action.yml | 5 ++---
 1 file changed, 2 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/test-action.yml b/.github/workflows/test-action.yml
index f368916..2c0856c 100644
--- a/.github/workflows/test-action.yml
+++ b/.github/workflows/test-action.yml
@@ -47,8 +47,7 @@ jobs:
       - name: Run Action (v0.1.0)
         uses: ./
         with:
-          # REPLACE 'v0.1.0' with a real tag that actually exists in saward/spawn
-          version: 'v0.1.0' 
+          version: 'v0.1.5' 
           github_token: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Verify
@@ -65,7 +64,7 @@ jobs:
         uses: ./
         with:
           # If your repo uses 'v0.1.0', passing '0.1.0' tests your bash script's ability to fix it
-          version: '0.1.0' 
+          version: '0.1.5' 
           github_token: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Verify