name: Build and Release

on:
  push:
    branches: [main]

jobs:
  build-and-release:
    runs-on: ubuntu-latest
    container:
      image: moyettes/eb
      options: --privileged
    steps:
      - name: Checkout repository
        uses: actions/checkout@v4

      - name: Setup Flatpak wrappers for Docker
        run: |
          # Wrap flatpak: skip 'update' (runtimes pre-installed in image),
          # inject --disable-sandbox for 'build-export' (bwrap can't create namespaces in Docker)
          mv /usr/bin/flatpak /usr/bin/flatpak.real
          cat > /usr/bin/flatpak << 'WRAPPER'
          #!/bin/bash
          if [ "$1" = "update" ]; then
            echo "[flatpak-wrapper] Skipping update (pre-installed)" >&2
            exit 0
          fi
          if [ "$1" = "build-export" ]; then
            shift
            exec /usr/bin/flatpak.real build-export --disable-sandbox "$@"
          fi
          exec /usr/bin/flatpak.real "$@"
          WRAPPER
          chmod +x /usr/bin/flatpak

          # Wrap flatpak-builder: inject --disable-rofiles-fuse for Docker
          mv /usr/bin/flatpak-builder /usr/bin/flatpak-builder.real
          cat > /usr/bin/flatpak-builder << 'FBWRAPPER'
          #!/bin/bash
          exec /usr/bin/flatpak-builder.real --disable-rofiles-fuse "$@"
          FBWRAPPER
          chmod +x /usr/bin/flatpak-builder

          # Add user remote as fallback
          flatpak.real --user remote-add --if-not-exists flathub https://flathub.org/repo/flathub.flatpakrepo

      - name: Cache npm and Electron
        uses: actions/cache@v4
        with:
          path: |
            ~/.npm
            ~/.cache/electron
            ~/.cache/electron-builder
            Frontend/Electron/node_modules
            node_modules
          key: npm-electron-${{ hashFiles('package-lock.json', 'Frontend/Electron/package-lock.json') }}
          restore-keys: |
            npm-electron-

      - name: Install dependencies
        run: |
          npm install
          npm run install:frontend

      - name: Read version from package.json
        id: version
        run: |
          VERSION=$(node -p "require('./Frontend/Electron/package.json').version")
          echo "version=$VERSION" >> $GITHUB_OUTPUT

      - name: Build Electron app
        run: |
          cd Frontend/Electron
          npm run build
          npx electron-builder --linux
          xvfb-run npx electron-builder --win || echo "electron-builder exited with non-zero code, checking artifacts..."
          test -f "dist/Discord Clone Setup"*.exe && echo "Windows build artifact verified" || exit 1
        env:
          GH_TOKEN: ${{ secrets.CI_TOKEN }}
          WINEDEBUG: "-all"
          VITE_CONVEX_URL: ${{ secrets.VITE_CONVEX_URL }}
          VITE_LIVEKIT_URL: ${{ secrets.VITE_LIVEKIT_URL }}

      - name: List build artifacts
        run: ls -la Frontend/Electron/dist/

      - name: Delete existing latest release
        run: |
          RELEASE_ID=$(curl -s -H "Authorization: token $TOKEN" \
            "$GITEA_URL/api/v1/repos/$REPO/releases/tags/latest" | jq -r '.id')
          if [ "$RELEASE_ID" != "null" ] && [ -n "$RELEASE_ID" ]; then
            curl -X DELETE -H "Authorization: token $TOKEN" \
              "$GITEA_URL/api/v1/repos/$REPO/releases/$RELEASE_ID"
            # Also delete the tag so it can be recreated
            curl -X DELETE -H "Authorization: token $TOKEN" \
              "$GITEA_URL/api/v1/repos/$REPO/tags/latest"
          fi
        env:
          GITEA_URL: ${{ secrets.CI_URL }}
          REPO: ${{ gitea.repository }}
          TOKEN: ${{ secrets.CI_TOKEN }}

      - name: Create release and upload artifacts
        run: |
          VERSION="${{ steps.version.outputs.version }}"

          # Create new release with latest tag
          RELEASE_ID=$(curl -s -X POST -H "Authorization: token $TOKEN" \
            -H "Content-Type: application/json" \
            -d "{\"tag_name\":\"latest\",\"name\":\"v${VERSION}\",\"body\":\"Auto-release v${VERSION} from CI\"}" \
            "$GITEA_URL/api/v1/repos/$REPO/releases" | jq -r '.id')

          echo "Created release ID: $RELEASE_ID"

          # Upload each artifact
          for file in Frontend/Electron/dist/latest*.yml \
                      Frontend/Electron/dist/*.exe \
                      Frontend/Electron/dist/*.exe.blockmap \
                      Frontend/Electron/dist/*.AppImage \
                      Frontend/Electron/dist/*.flatpak; do
            [ -f "$file" ] || continue
            FILENAME=$(basename "$file")
            ENCODED_NAME=$(echo -n "$FILENAME" | jq -sRr @uri)
            echo "Uploading: $FILENAME"
            curl -X POST -H "Authorization: token $TOKEN" \
              -F "attachment=@$file" \
              "$GITEA_URL/api/v1/repos/$REPO/releases/$RELEASE_ID/assets?name=$ENCODED_NAME"
          done
        env:
          GITEA_URL: ${{ secrets.CI_URL }}
          REPO: ${{ gitea.repository }}
          TOKEN: ${{ secrets.CI_TOKEN }}