on:
  push:
    branches:
      - dev

jobs:
  deploy:
    runs-on: docker

    steps:
      - name: Check out repo
        uses: https://data.forgejo.org/actions/checkout@v4
        with:
          fetch-depth: 0

      - name: Install Packages
        run: apt-get update && apt-get install -y sudo curl jq

      - name: Install Nix
        uses: https://github.com/cachix/install-nix-action@v30

      - name: Install Bun
        uses: oven-sh/setup-bun@v2

      - name: Install dependencies
        run: bun install --frozen-lockfile

      - name: Setup Android Keystore
        env:
          KEYSTORE_BASE64: ${{ secrets.ANDROID_KEYSTORE_BASE64 }}
          KEYSTORE_PROPERTIES: ${{ secrets.ANDROID_KEYSTORE_PROPERTIES }}
        run: |
          bun -e "require('fs').writeFileSync('keystore.jks', Buffer.from(process.env.KEYSTORE_BASE64.replace(/\s+/g, ''), 'base64'))"
          bun -e "const content = process.env.KEYSTORE_PROPERTIES.replace(/\\\\n/g, '\n').replace(/\\r/g, '').split('\n').map(l => l.trim()).filter(l => l).join('\n'); require('fs').writeFileSync('keystore.properties', content)"

      - name: Build
        run: bun run build:apps

      - name: Install rsync
        run: apt-get update && apt-get install -y rsync

      - name: Deploy
        run: rsync -a --delete apps/web/dist/ /var/lib/www/tensamin-web-dev/

      - name: Read version and hash
        id: version
        run: |
          VERSION="$(node -p "require('./package.json').version")"
          SHORT_SHA="$(git rev-parse --short HEAD)"
          echo "version=$VERSION" >> "$FORGEJO_OUTPUT"
          echo "short_sha=$SHORT_SHA" >> "$FORGEJO_OUTPUT"
          echo "tag=dev-${VERSION}-${SHORT_SHA}" >> "$FORGEJO_OUTPUT"
          echo "title=${VERSION}-dev-${SHORT_SHA}" >> "$FORGEJO_OUTPUT"

      - name: Create pre-release and upload files
        env:
          TOKEN: ${{ forgejo.token }}
          API: ${{ forgejo.api_url }}
          REPO: ${{ forgejo.repository }}
          SHA: ${{ forgejo.sha }}
          TAG: ${{ steps.version.outputs.tag }}
          TITLE: ${{ steps.version.outputs.title }}
        run: |
          set -eu

          test -d releases
          find releases -type f | grep -q .

          LATEST_PROD_TAG="$(git tag --list 'v*' --sort=-v:refname | head -n 1 || true)"
          if [ -n "$LATEST_PROD_TAG" ]; then
            BODY="$(git log "$LATEST_PROD_TAG"..HEAD --pretty=format:'- %s' | sed 's/$/<br>/')"
          else
            BODY="$(git log --pretty=format:'- %s' | sed 's/$/<br>/')"
          fi

          HTTP_STATUS=$(curl -s -w "%{http_code}" -o release_out.json -H "Authorization: token $TOKEN" "$API/repos/$REPO/releases/tags/$TAG")

          if [ "$HTTP_STATUS" = "200" ]; then
            echo "Release $TAG already exists."
            RELEASE_ID="$(jq -r .id release_out.json)"
          else
            echo "Creating new pre-release for $TAG"
            RELEASE_JSON="$(curl -f -sS -X POST "$API/repos/$REPO/releases" \
              -H "Authorization: token $TOKEN" \
              -H "Content-Type: application/json" \
              -d "$(jq -n \
                --arg tag "$TAG" \
                --arg name "$TITLE" \
                --arg body "$BODY" \
                --arg target "$SHA" \
                '{
                  tag_name: $tag,
                  name: $name,
                  body: $body,
                  target_commitish: $target,
                  draft: false,
                  prerelease: true
                }')")"
            RELEASE_ID="$(echo "$RELEASE_JSON" | jq -r .id)"
          fi

          find releases -type f -print0 | while IFS= read -r -d '' file; do
            name="$(basename "$file")"
            curl -fsS -X POST "$API/repos/$REPO/releases/$RELEASE_ID/assets?name=$name" \
              -H "Authorization: token $TOKEN" \
              -F "attachment=@$file"
          done