name: Release LinkLog

on:
  push:
    tags:
      - 'v*'
  workflow_dispatch:

env:
  IMAGE_NAME: git.kolkman.org/olaf/link-log

jobs:
  release:
    runs-on: ubuntu-latest
    steps:
      - name: Check out release tag
        uses: actions/checkout@v4

      - name: Validate versions and signed XPI
        id: release
        run: |
          python3 scripts/release/validate_release.py
          version=$(python3 -c "import json; print(json.load(open('frontend/version.json'))['version'])")
          echo "version=$version" >> "$GITHUB_OUTPUT"
          if [ "${GITHUB_REF_NAME#v}" != "$version" ]; then
            echo "tag ${GITHUB_REF_NAME} does not match release version $version" >&2
            exit 1
          fi

      - name: Log in to Gitea container registry
        uses: docker/login-action@v3
        with:
          registry: git.kolkman.org
          username: ${{ secrets.REGISTRY_USERNAME }}
          password: ${{ secrets.REGISTRY_PASSWORD }}

      - name: Build and publish Docker image
        uses: docker/build-push-action@v6
        with:
          context: .
          push: true
          tags: |
            ${{ env.IMAGE_NAME }}:${{ steps.release.outputs.version }}
            ${{ env.IMAGE_NAME }}:latest
          labels: |
            org.opencontainers.image.version=${{ steps.release.outputs.version }}
            org.opencontainers.image.source=https://git.kolkman.org/olaf/Link-Log

      - name: Create Gitea release
        id: gitea_release
        env:
          GITEA_TOKEN: ${{ secrets.GITEA_TOKEN }}
          VERSION: ${{ steps.release.outputs.version }}
        run: |
          response=$(curl --fail-with-body --silent --show-error \
            -X POST \
            -H "Authorization: token $GITEA_TOKEN" \
            -H 'Content-Type: application/json' \
            -d "{\"tag_name\":\"v$VERSION\",\"name\":\"LinkLog $VERSION\",\"draft\":false,\"prerelease\":false}" \
            https://git.kolkman.org/api/v1/repos/olaf/Link-Log/releases)
          release_id=$(printf '%s' "$response" | jq -r '.id')
          test "$release_id" != null
          test "$release_id" != 0
          upload_url="https://git.kolkman.org/api/v1/repos/olaf/Link-Log/releases/$release_id/assets"
          echo "upload_url=$upload_url" >> "$GITHUB_OUTPUT"

      - name: Upload signed XPI and update manifest
        env:
          GITEA_TOKEN: ${{ secrets.GITEA_TOKEN }}
          UPLOAD_URL: ${{ steps.gitea_release.outputs.upload_url }}
          VERSION: ${{ steps.release.outputs.version }}
        run: |
          curl --fail-with-body --silent --show-error \
            -X POST -H "Authorization: token $GITEA_TOKEN" \
            -H 'Content-Type: application/x-xpinstall' \
            --data-binary "@XPI/signed/LinkLog-$VERSION.xpi" \
            "$UPLOAD_URL?name=LinkLog-$VERSION.xpi"
          curl --fail-with-body --silent --show-error \
            -X POST -H "Authorization: token $GITEA_TOKEN" \
            -H 'Content-Type: application/json' \
            --data-binary @webextension/updates.json \
            "$UPLOAD_URL?name=updates.json"

      - name: Publish release links
        env:
          VERSION: ${{ steps.release.outputs.version }}
        run: |
          echo "Docker image: $IMAGE_NAME:$VERSION"
          echo "Signed XPI: https://git.kolkman.org/olaf/Link-Log/releases/download/v$VERSION/LinkLog-$VERSION.xpi"
          echo "Firefox update manifest: https://git.kolkman.org/olaf/Link-Log/raw/branch/main/webextension/updates.json"