name: Build Lotus Chat Desktop

on:
  push:
    branches: [main]
  workflow_dispatch:

env:
  GITEA_URL: https://code.lotusguild.org
  REPO: LotusGuild/cinny-desktop

jobs:
  build-windows:
    runs-on: windows
    steps:
      - uses: actions/checkout@v4

      - name: Checkout submodules (shallow)
        shell: powershell
        run: git submodule update --init --depth=1

      - name: Install frontend deps
        shell: powershell
        run: cd cinny; npm ci

      - name: Install Tauri deps
        shell: powershell
        run: npm ci

      - name: Build
        shell: powershell
        env:
          TAURI_SIGNING_PRIVATE_KEY: ${{ secrets.TAURI_SIGNING_PRIVATE_KEY }}
          TAURI_SIGNING_PRIVATE_KEY_PASSWORD: ''
          NODE_OPTIONS: '--max_old_space_size=4096'
        run: npm run tauri -- build -- --bundles nsis

      - name: Upload to release
        shell: powershell
        env:
          TOKEN: ${{ secrets.RELEASE_TOKEN }}
        run: |
          $VERSION = (Get-Content "src-tauri\tauri.conf.json" | ConvertFrom-Json).version
          Write-Host "Version: $VERSION"

          $release = Invoke-RestMethod -Uri "$env:GITEA_URL/api/v1/repos/$env:REPO/releases/tags/latest" `
            -Headers @{ Authorization = "token $env:TOKEN" } -ErrorAction SilentlyContinue
          if (-not $release) {
            $release = Invoke-RestMethod -Uri "$env:GITEA_URL/api/v1/repos/$env:REPO/releases" `
              -Method Post `
              -Headers @{ Authorization = "token $env:TOKEN"; "Content-Type" = "application/json" } `
              -Body "{`"tag_name`":`"latest`",`"name`":`"Lotus Chat $VERSION`",`"prerelease`":true,`"body`":`"Built from ${{ github.sha }}`"}"
          }
          $releaseId = $release.id

          $nsis = "src-tauri\target\release\bundle\nsis"
          $files = @(
            "$nsis\Lotus Chat_${VERSION}_x64-setup.exe",
            "$nsis\Lotus Chat_${VERSION}_x64-setup.nsis.zip",
            "$nsis\Lotus Chat_${VERSION}_x64-setup.nsis.zip.sig"
          )
          $names = @("LotusChat-x86_64-setup.exe", "LotusChat-x86_64-setup.nsis.zip", "LotusChat-x86_64-setup.nsis.zip.sig")
          for ($i = 0; $i -lt $files.Length; $i++) {
            $existing = (Invoke-RestMethod -Uri "$env:GITEA_URL/api/v1/repos/$env:REPO/releases/$releaseId/assets" `
              -Headers @{ Authorization = "token $env:TOKEN" }) | Where-Object { $_.name -eq $names[$i] }
            if ($existing) {
              Invoke-RestMethod -Uri "$env:GITEA_URL/api/v1/repos/$env:REPO/releases/$releaseId/assets/$($existing.id)" `
                -Method Delete -Headers @{ Authorization = "token $env:TOKEN" }
            }
            $bytes = [System.IO.File]::ReadAllBytes($files[$i])
            Invoke-RestMethod -Uri "$env:GITEA_URL/api/v1/repos/$env:REPO/releases/$releaseId/assets?name=$($names[$i])" `
              -Method Post `
              -Headers @{ Authorization = "token $env:TOKEN"; "Content-Type" = "application/octet-stream" } `
              -Body $bytes
          }

  build-linux:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
        with:
          submodules: true

      - uses: actions/setup-node@v4
        with:
          node-version-file: .node-version

      - name: Install system deps
        run: |
          apt-get update
          apt-get install -y \
            curl wget file \
            libwebkit2gtk-4.1-dev \
            libssl-dev \
            libxdo-dev \
            libayatana-appindicator3-dev \
            librsvg2-dev \
            patchelf \
            xdg-utils

      - uses: dtolnay/rust-toolchain@stable

      - uses: Swatinem/rust-cache@v2
        with:
          workspaces: src-tauri

      - name: Install frontend deps
        run: cd cinny && npm ci

      - name: Install Tauri deps
        run: npm ci

      - name: Stage AppRun for AppImage bundler
        run: |
          mkdir -p ~/.cache/tauri
          cp tools/AppRun-x86_64 ~/.cache/tauri/AppRun-x86_64
          chmod +x ~/.cache/tauri/AppRun-x86_64

      - name: Build
        env:
          TAURI_SIGNING_PRIVATE_KEY: ${{ secrets.TAURI_SIGNING_PRIVATE_KEY }}
          TAURI_SIGNING_PRIVATE_KEY_PASSWORD: ''
          NODE_OPTIONS: '--max_old_space_size=4096'
        run: npm run tauri -- build --bundles appimage,deb

      - name: Upload to release
        env:
          TOKEN: ${{ secrets.RELEASE_TOKEN }}
        run: |
          VERSION=$(python3 -c "import json; print(json.load(open('src-tauri/tauri.conf.json'))['version'])")
          echo "Version: $VERSION"

          APPIMAGE_DIR="src-tauri/target/release/bundle/appimage"
          DEB_DIR="src-tauri/target/release/bundle/deb"

          RELEASE=$(curl -sf "$GITEA_URL/api/v1/repos/$REPO/releases/tags/latest" \
            -H "Authorization: token $TOKEN" 2>/dev/null || true)
          RELEASE_ID=$(echo "$RELEASE" | python3 -c "import sys,json; print(json.load(sys.stdin).get('id',''))" 2>/dev/null || true)
          if [ -z "$RELEASE_ID" ] || [ "$RELEASE_ID" = "None" ]; then
            RELEASE_ID=$(curl -sf -X POST "$GITEA_URL/api/v1/repos/$REPO/releases" \
              -H "Authorization: token $TOKEN" \
              -H "Content-Type: application/json" \
              -d "{\"tag_name\":\"latest\",\"name\":\"Lotus Chat $VERSION\",\"prerelease\":true,\"body\":\"Built from ${{ github.sha }}\"}" \
              | python3 -c "import sys,json; print(json.load(sys.stdin)['id'])")
          fi

          upload() {
            local name="$1" path="$2"
            local existing_id
            existing_id=$(curl -sf "$GITEA_URL/api/v1/repos/$REPO/releases/$RELEASE_ID/assets" \
              -H "Authorization: token $TOKEN" \
              | python3 -c "import sys,json; assets=json.load(sys.stdin); print(next((str(a['id']) for a in assets if a['name']=='$name'), ''))" 2>/dev/null || true)
            if [ -n "$existing_id" ]; then
              curl -sf -X DELETE "$GITEA_URL/api/v1/repos/$REPO/releases/$RELEASE_ID/assets/$existing_id" \
                -H "Authorization: token $TOKEN" || true
            fi
            echo "Uploading $name"
            curl -sf -X POST \
              "$GITEA_URL/api/v1/repos/$REPO/releases/$RELEASE_ID/assets?name=$name" \
              -H "Authorization: token $TOKEN" \
              -H "Content-Type: application/octet-stream" \
              --data-binary @"$path"
          }

          upload "LotusChat-x86_64.AppImage"         "$APPIMAGE_DIR/Lotus Chat_${VERSION}_amd64.AppImage"
          upload "LotusChat-x86_64.AppImage.tar.gz"  "$APPIMAGE_DIR/Lotus Chat_${VERSION}_amd64.AppImage.tar.gz"
          upload "LotusChat-x86_64.AppImage.tar.gz.sig" "$APPIMAGE_DIR/Lotus Chat_${VERSION}_amd64.AppImage.tar.gz.sig"
          upload "LotusChat-x86_64.deb"              "$DEB_DIR/Lotus Chat_${VERSION}_amd64.deb"

  update-manifest:
    needs: [build-windows, build-linux]
    runs-on: ubuntu-latest
    env:
      GITEA_URL: https://code.lotusguild.org
      REPO: LotusGuild/cinny-desktop
    steps:
      - name: Generate and upload release.json
        env:
          TOKEN: ${{ secrets.RELEASE_TOKEN }}
        run: |
          BASE="$GITEA_URL/LotusGuild/cinny-desktop/releases/download/latest"

          WIN_SIG=$(curl -sf "$BASE/LotusChat-x86_64-setup.nsis.zip.sig")
          LIN_SIG=$(curl -sf "$BASE/LotusChat-x86_64.AppImage.tar.gz.sig")

          RELEASE=$(curl -sf "$GITEA_URL/api/v1/repos/$REPO/releases/tags/latest" \
            -H "Authorization: token $TOKEN")
          RELEASE_ID=$(echo "$RELEASE" | python3 -c "import sys,json; print(json.load(sys.stdin)['id'])")
          VERSION=$(echo "$RELEASE" | python3 -c "import sys,json; print(json.load(sys.stdin)['name'].split()[-1])")
          DATE=$(date -u +%Y-%m-%dT%H:%M:%SZ)

          python3 -c "
import json, sys
win_sig, lin_sig = sys.argv[1], sys.argv[2]
print(json.dumps({
  'version': '$VERSION',
  'notes': 'Latest Lotus Chat release',
  'pub_date': '$DATE',
  'platforms': {
    'windows-x86_64': {'url': '$BASE/LotusChat-x86_64-setup.nsis.zip', 'signature': win_sig},
    'linux-x86_64':   {'url': '$BASE/LotusChat-x86_64.AppImage.tar.gz', 'signature': lin_sig}
  }
}, indent=2))
" "$WIN_SIG" "$LIN_SIG" > release.json

          cat release.json

          OLD=$(curl -sf "$GITEA_URL/api/v1/repos/$REPO/releases/$RELEASE_ID/assets" \
            -H "Authorization: token $TOKEN" \
            | python3 -c "import sys,json; print(next((str(a['id']) for a in json.load(sys.stdin) if a['name']=='release.json'), ''))" 2>/dev/null || true)
          [ -n "$OLD" ] && curl -sf -X DELETE \
            "$GITEA_URL/api/v1/repos/$REPO/releases/$RELEASE_ID/assets/$OLD" \
            -H "Authorization: token $TOKEN" || true

          curl -sf -X POST \
            "$GITEA_URL/api/v1/repos/$REPO/releases/$RELEASE_ID/assets?name=release.json" \
            -H "Authorization: token $TOKEN" \
            -H "Content-Type: application/json" \
            --data-binary @release.json