#!/usr/bin/env bash
# Create/update the Gitea Release after all platform package workflows succeed.
set -euo pipefail

tag="${CI_COMMIT_TAG:-}"
[[ "$tag" =~ ^v[0-9]+\.[0-9]+\.[0-9]+(-[0-9A-Za-z.-]+)?$ ]] || {
  echo "release must run from a vMAJOR.MINOR.PATCH tag" >&2
  exit 2
}
[[ -n "${GITEA_TOKEN:-}" ]] || { echo "GITEA_TOKEN is required" >&2; exit 2; }

version="${tag#v}"
gitea_base="${GITEA_BASE:-http://192.168.2.162:3100}"
gitea_base="${gitea_base%/}"
gitea_host="${gitea_base#https://}"
gitea_host="${gitea_host#http://}"
gitea_host="${gitea_host%%/*}"
gitea_host="${gitea_host%%:*}"
api="$gitea_base/api/v1/repos/justme/MyMonitor"
tmp="$(mktemp -d)"
netrc="$tmp/netrc"
release_json="$tmp/release.json"
assets_json="$tmp/assets.json"
chmod 700 "$tmp"
printf 'machine %s login justme password %s\n' "$gitea_host" "$GITEA_TOKEN" > "$netrc"
chmod 600 "$netrc"
trap 'rm -rf "$tmp"' EXIT

release_body="Agent and Probe builds: Linux glibc and musl (x64, arm64, arm), macOS (x64, arm64), and Windows (x64, arm64). macOS binaries are not Developer ID signed or notarized. Backend OCI images: registry.oeo.one/monitor/monitor-backend:$version (linux/amd64 and linux/arm64)."
payload="$(printf '{"tag_name":"%s","target_commitish":"%s","name":"MyMonitor %s","body":"%s","draft":false,"prerelease":false}' \
  "$tag" "${CI_COMMIT_SHA:-}" "$tag" "$release_body")"
release_status="$(curl --silent --show-error --retry 3 --netrc-file "$netrc" \
  --output "$release_json" --write-out '%{http_code}' "$api/releases/tags/$tag")"
release_created=false
if [[ "$release_status" == 404 ]]; then
  release_status="$(curl --silent --show-error --retry 3 --netrc-file "$netrc" \
    --header 'Content-Type: application/json' --data "$payload" \
    --output "$release_json" --write-out '%{http_code}' "$api/releases")"
  release_created=true
fi
[[ "$release_status" =~ ^2 ]] || {
  echo "Gitea Release lookup/create failed (HTTP $release_status)" >&2
  cat "$release_json" >&2
  exit 1
}
release_id="$(grep -o '"id":[[:space:]]*[0-9][0-9]*' "$release_json" | head -1 | tr -cd '0-9')"
[[ -n "$release_id" ]] || { echo "Could not read Gitea Release ID" >&2; exit 1; }
if [[ "$release_created" == false ]]; then
  update_response="$tmp/release-update.json"
  update_status="$(curl --silent --show-error --retry 3 --netrc-file "$netrc" \
    --request PATCH --header 'Content-Type: application/json' --data "$payload" \
    --output "$update_response" --write-out '%{http_code}' "$api/releases/$release_id")"
  [[ "$update_status" =~ ^2 ]] || {
    echo "Gitea Release update failed (HTTP $update_status)" >&2
    cat "$update_response" >&2
    exit 1
  }
fi
curl --fail-with-body --silent --show-error --retry 3 --netrc-file "$netrc" \
  "$api/releases/$release_id/assets" -o "$assets_json"

assets=(
  "monitor-agent-v$version-linux-amd64.tar.gz"
  "monitor-agent-v$version-linux-arm64.tar.gz"
  "monitor-probe-v$version-linux-amd64.tar.gz"
  "monitor-probe-v$version-linux-arm64.tar.gz"
  "monitor-agent-v$version-linux-arm.tar.gz"
  "monitor-probe-v$version-linux-arm.tar.gz"
  "monitor-agent-v$version-linux-musl-amd64.tar.gz"
  "monitor-probe-v$version-linux-musl-amd64.tar.gz"
  "monitor-agent-v$version-linux-musl-arm64.tar.gz"
  "monitor-probe-v$version-linux-musl-arm64.tar.gz"
  "monitor-agent-v$version-linux-musl-arm.tar.gz"
  "monitor-probe-v$version-linux-musl-arm.tar.gz"
  "monitor-agent-v$version-macos-x64.tar.gz"
  "monitor-probe-v$version-macos-x64.tar.gz"
  "monitor-agent-v$version-macos-arm64.tar.gz"
  "monitor-probe-v$version-macos-arm64.tar.gz"
  "monitor-agent-v$version-windows-amd64.zip"
  "monitor-agent-v$version-windows-arm64.zip"
  "monitor-probe-v$version-windows-amd64.zip"
  "monitor-probe-v$version-windows-arm64.zip"
)
for archive in "${assets[@]}"; do
  for name in "$archive" "$archive.sha256"; do
    if grep -Eq "\"name\"[[:space:]]*:[[:space:]]*\"$name\"" "$assets_json"; then
      echo "release asset $name already exists; keeping the existing asset"
      continue
    fi
    file="$tmp/$name"
    upload_response="$tmp/upload.json"
    curl --fail-with-body --silent --show-error --retry 3 --netrc-file "$netrc" \
      "$gitea_base/api/packages/justme/generic/monitor-node/$version/$name" -o "$file"
    status="$(curl --silent --show-error --retry 3 --netrc-file "$netrc" \
      --request POST --header 'Content-Type: application/octet-stream' --data-binary "@$file" \
      --output "$upload_response" --write-out '%{http_code}' \
      "$api/releases/$release_id/assets?name=$name")"
    case "$status" in
      2*) echo "attached $name" ;;
      *) echo "Gitea Release asset upload failed for $name (HTTP $status)" >&2; cat "$upload_response" >&2; exit 1 ;;
    esac
  done
done

echo "published Gitea Release $tag: https://git.oeo.one/justme/MyMonitor/releases/tag/$tag"