name: Publish portfolio
description: Build the image and create the matching Gitea release

inputs:
  image-tag:
    description: Docker image tag
    required: true
  prerelease:
    description: Whether the Gitea release is a pre-release
    required: true
  registry-username:
    description: Registry username
    required: true
  registry-password:
    description: Registry password or token
    required: true
  gitea-token:
    description: Token for Gitea releases
    required: true

runs:
  using: composite
  steps:
    - name: Use Node.js v24.15.0
      uses: actions/setup-node@v4
      with:
        node-version: '24.15.0'

    - name: Set build version
      shell: bash
      run: npm run version:set

    - name: Read version from package.json
      id: version
      shell: bash
      env:
        PRERELEASE: ${{ inputs.prerelease }}
      run: |
        version=$(node -p 'require("./package.json").version')
        release_tag="v${version//+/-}"
        if [ "$PRERELEASE" = true ]; then
          release_tag="${release_tag}-dev"
        fi
        echo "value=$version" >> "$GITHUB_OUTPUT"
        echo "release_tag=$release_tag" >> "$GITHUB_OUTPUT"
        echo "revision=$GITEA_RUN_ATTEMPT" >> "$GITHUB_OUTPUT"

    - name: Set up Docker Buildx
      uses: docker/setup-buildx-action@v3

    - name: Log in to registry
      uses: docker/login-action@v3
      with:
        registry: docker.lechner-systems.at
        username: ${{ inputs.registry-username }}
        password: ${{ inputs.registry-password }}

    - name: Build and push image
      uses: docker/build-push-action@v6
      with:
        context: .
        push: true
        provenance: false
        build-args: |
          APP_VERSION=${{ steps.version.outputs.value }}
          VCS_REF=${{ steps.version.outputs.revision }}
        tags: docker.lechner-systems.at/lechnersystems/portfolio:${{ inputs.image-tag }}

    - name: Create Gitea release
      shell: bash
      env:
        GITEA_TOKEN: ${{ inputs.gitea-token }}
        RELEASE_TAG: ${{ steps.version.outputs.release_tag }}
        PRERELEASE: ${{ inputs.prerelease }}
      run: |
        api_url="${{ gitea.server_url }}/api/v1/repos/${{ gitea.repository }}/releases"
        # ponytail: 50 recent releases cover normal reruns; paginate if old releases are rebuilt.
        releases="$(curl --fail-with-body --silent --show-error \
            --header "Authorization: token ${GITEA_TOKEN}" \
            "${api_url}?limit=50")"
        previous_tag="$(printf '%s' "$releases" | jq -r \
            --arg tag "$RELEASE_TAG" \
            --argjson prerelease "$PRERELEASE" \
            '[.[] | select(.draft == false and .prerelease == $prerelease and .tag_name != $tag)][0].tag_name // empty')"

        if [ -n "$previous_tag" ]; then
            commit_messages="$(git log --reverse --format='- %s' "${previous_tag}..${GITEA_SHA}")"
            full_changelog="${{ gitea.server_url }}/${{ gitea.repository }}/compare/${previous_tag}...${RELEASE_TAG}"
        else
            commit_messages="$(git log --reverse --format='- %s' "${GITEA_SHA}")"
            full_changelog=""
        fi

        if [ -z "$commit_messages" ]; then
            commit_messages='- No commits since the previous release'
        fi

        {
            echo '## Changes'
            echo
            printf '%s\n' "$commit_messages"
            echo
            if [ -n "$full_changelog" ]; then
                echo "**Full Changelog**: ${full_changelog}"
            fi
        } > release-notes.md

        jq --null-input \
            --arg tag "$RELEASE_TAG" \
            --arg target "$GITEA_SHA" \
            --argjson prerelease "$PRERELEASE" \
            --rawfile body release-notes.md \
            '{tag_name: $tag, target_commitish: $target, name: $tag, body: $body, prerelease: $prerelease}' \
            > release.json

        release_id="$(printf '%s' "$releases" | jq -r \
            --arg tag "$RELEASE_TAG" \
            '.[] | select(.tag_name == $tag) | .id')"
        if [ -n "$release_id" ]; then
            method=PATCH
            release_url="${api_url}/${release_id}"
        else
            method=POST
            release_url="$api_url"
        fi

        curl --fail-with-body --silent --show-error \
            --request "$method" \
            --header "Authorization: token ${GITEA_TOKEN}" \
            --header 'Content-Type: application/json' \
            --data-binary @release.json \
            "$release_url"