name: Release

# Publish by pushing a tag to the gitea remote (`git push gitea v0.5.0`)
# or from the Actions tab → Release → Run workflow (enter a version).
#
# Optional repository variables (Settings → Secrets and variables → Actions → Variables):
#   PANEL_URL      https://panel.example.com — baked into the launcher as the default server
#   LOCK_PANEL     "1" to stop players from changing the server
#   LAUNCHER_NAME  Installer / window name (default "SCOPENET Launcher")

on:
  push:
    tags: ['v*.*.*']
  workflow_dispatch:
    inputs:
      version:
        description: 'Version to release (e.g. 0.2.0)'
        required: true

permissions:
  contents: read
  releases: write
  packages: write

env:
  CARGO_TERM_COLOR: always

jobs:
  version:
    runs-on: linux-build
    outputs:
      version: ${{ steps.v.outputs.version }}
      tag: ${{ steps.v.outputs.tag }}
    steps:
      - name: Verify Linux runner
        run: |
          test "$(uname -s)" = Linux
          command -v bash
      - id: v
        shell: bash
        env:
          INPUT_VERSION: ${{ inputs.version }}
        run: |
          if [ "$GITHUB_EVENT_NAME" = "workflow_dispatch" ]; then v="$INPUT_VERSION"; else v="$GITHUB_REF_NAME"; fi
          v="${v#v}"
          if ! [[ "$v" =~ ^[0-9]+\.[0-9]+\.[0-9]+(-[0-9A-Za-z.]+)?$ ]]; then echo "::error::'$v' is not a semantic version"; exit 1; fi
          echo "version=$v" >> "$GITEA_OUTPUT"
          echo "tag=v$v" >> "$GITEA_OUTPUT"

  launcher:
    name: Windows installer
    needs: version
    runs-on: windows-build
    steps:
      - uses: builtin:checkout
      - name: Verify Windows runner
        shell: pwsh
        run: |
          if (-not $IsWindows) { throw 'windows-build must be a Windows host runner' }
          foreach ($tool in @('cargo', 'node', 'npm')) {
            if (-not (Get-Command $tool -ErrorAction SilentlyContinue)) { throw "Missing $tool" }
          }
      - uses: dtolnay/rust-toolchain@stable
      - uses: Swatinem/rust-cache@v2
        with:
          key: release
      - uses: actions/setup-node@v4
        with:
          node-version: 22
          cache: npm
          cache-dependency-path: launcher/package-lock.json

      - name: Stamp version
        shell: bash
        env:
          VERSION: ${{ needs.version.outputs.version }}
        run: |
          sed -i "0,/^version = \".*\"/s//version = \"$VERSION\"/" Cargo.toml
          node -e "const f='launcher/src-tauri/tauri.conf.json';const c=require('./'+f);c.version=process.env.VERSION;require('fs').writeFileSync(f,JSON.stringify(c,null,2))"
          node -e "const f='launcher/package.json';const c=require('./'+f);c.version=process.env.VERSION;require('fs').writeFileSync(f,JSON.stringify(c,null,2))"

      - run: npm ci --no-audit --no-fund
        working-directory: launcher

      - name: Build installer
        working-directory: launcher
        shell: bash
        env:
          SCOPENET_PANEL_URL: ${{ vars.PANEL_URL }}
          SCOPENET_LOCK_PANEL: ${{ vars.LOCK_PANEL }}
          SCOPENET_REPO: ${{ gitea.server_url }}/${{ gitea.repository }}
          LAUNCHER_NAME: ${{ vars.LAUNCHER_NAME }}
        run: |
          if [ -n "$LAUNCHER_NAME" ]; then
            CONFIG=$(node -e "console.log(JSON.stringify({productName: process.env.LAUNCHER_NAME, app: {windows: [{...require('./src-tauri/tauri.conf.json').app.windows[0], title: process.env.LAUNCHER_NAME}]}}))")
            npx tauri build --bundles nsis --config "$CONFIG"
          else
            npx tauri build --bundles nsis
          fi

      - name: Collect installer
        shell: bash
        run: |
          mkdir -p out
          cp target/release/bundle/nsis/*-setup.exe out/
          ls -la out

      - uses: actions/upload-artifact@v4
        with:
          name: windows-installer
          path: out/*-setup.exe
          if-no-files-found: error

  panel-image:
    name: Panel image (Gitea registry)
    needs: version
    runs-on: linux-build
    steps:
      - uses: builtin:checkout
      - name: Verify container runner
        run: |
          test "$(uname -s)" = Linux
          command -v docker
          docker info >/dev/null
          docker buildx version >/dev/null
      - name: Image name
        run: echo "IMAGE=${GITHUB_SERVER_URL#https://}/${GITHUB_REPOSITORY_OWNER,,}/scopenet-mc-panel" >> "$GITEA_ENV"
      - name: Stamp version
        run: sed -i "0,/^version = \".*\"/s//version = \"${{ needs.version.outputs.version }}\"/" Cargo.toml
      - uses: docker/setup-buildx-action@v3
      - uses: docker/login-action@v3
        with:
          registry: gitea.jadonsandbox.com
          username: ${{ gitea.actor }}
          password: ${{ secrets.GITEA_TOKEN }}
      - id: meta
        uses: docker/metadata-action@v5
        with:
          images: ${{ env.IMAGE }}
          tags: |
            type=semver,pattern={{version}},value=${{ needs.version.outputs.tag }}
            type=semver,pattern={{major}}.{{minor}},value=${{ needs.version.outputs.tag }}
            type=raw,value=latest,enable=${{ !contains(needs.version.outputs.version, '-') }}
      - uses: docker/build-push-action@v6
        with:
          context: .
          platforms: linux/amd64,linux/arm64
          push: true
          tags: ${{ steps.meta.outputs.tags }}
          labels: ${{ steps.meta.outputs.labels }}
          cache-from: type=registry,ref=${{ env.IMAGE }}:buildcache
          cache-to: type=registry,ref=${{ env.IMAGE }}:buildcache,mode=max

  server-integrations:
    needs: version
    uses: ./.gitea/workflows/integrations.yml
    with:
      version: ${{ needs.version.outputs.version }}

  release:
    name: Gitea release
    needs: [version, launcher, panel-image, server-integrations]
    runs-on: linux-build
    steps:
      - name: Verify release runner
        run: |
          test "$(uname -s)" = Linux
          command -v curl
          command -v jq
      - uses: actions/download-artifact@v4
        with:
          name: windows-installer
          path: dist
      - uses: actions/download-artifact@v4
        with:
          pattern: server-*
          merge-multiple: true
          path: dist
      - name: Release notes
        run: |
          IMAGE="${GITHUB_SERVER_URL#https://}/${GITHUB_REPOSITORY_OWNER,,}/scopenet-mc-panel"
          cat > notes.md <<NOTES
          ## Downloads

          **Launcher (Windows):** download the \`-setup.exe\` below and run it. Installed launchers update themselves automatically.

          **Servers:** download \`scopenet-paper\` or the Fabric/Forge JAR for your exact Minecraft version. Keep \`online-mode=true\` and install authlib-injector as documented in \`docs/server-integration.md\`.

          **Admin panel (Docker):**
          \`\`\`bash
          docker pull ${IMAGE}:${{ needs.version.outputs.version }}
          \`\`\`
          Or with Compose: set \`image: ${IMAGE}:${{ needs.version.outputs.version }}\` in \`docker-compose.yml\` and run \`docker compose up -d\`.
          NOTES
      - name: Publish Gitea release and assets
        env:
          TOKEN: ${{ secrets.GITEA_TOKEN }}
          TAG: ${{ needs.version.outputs.tag }}
          VERSION: ${{ needs.version.outputs.version }}
        run: |
          set -euo pipefail
          command -v curl && command -v jq
          test -n "$TOKEN" || { echo 'GITEA_TOKEN is unavailable'; exit 1; }
          api="$GITHUB_SERVER_URL/api/v1/repos/$GITHUB_REPOSITORY/releases"
          body=$(jq -n --arg tag "$TAG" --arg notes "$(cat notes.md)" --arg sha "$GITHUB_SHA" --argjson pre "$(case "$VERSION" in *-*) echo true;; *) echo false;; esac)" '{tag_name:$tag,name:$tag,body:$notes,target_commitish:$sha,prerelease:$pre}')
          release=$(curl -fsS -H "Authorization: token $TOKEN" "$api/tags/$TAG") || \
            release=$(curl --fail-with-body -sS -H "Authorization: token $TOKEN" -H 'Content-Type: application/json' -d "$body" "$api")
          id=$(printf '%s' "$release" | jq -er '.id')
          for file in dist/*-setup.exe dist/*.jar; do
            test -f "$file" || continue
            if printf '%s' "$release" | jq -e --arg name "$(basename "$file")" '.assets[]? | select(.name == $name)' >/dev/null; then continue; fi
            curl --fail-with-body -sS -H "Authorization: token $TOKEN" -F "attachment=@$file" "$api/$id/assets?name=$(basename "$file")" >/dev/null
          done