sync.yml

name: Sync release
on:
  workflow_dispatch:
  repository_dispatch:
    types: [sync-release]

permissions:
  id-token: write
  contents: write
  actions: write
  attestations: write

env:
  GH_TOKEN: ${{ github.token }}
  SOURCE_REPO: "Liliya2727/AZenith"
  MODULE_NAME: "AZenith"

jobs:
  get_latest_tag:
    runs-on: ubuntu-latest
    outputs:
      latest: ${{ steps.check.outputs.latest }}
      should_sync: ${{ steps.check.outputs.should_sync }}
    steps:
      - name: Check latest tag
        id: check
        run: |
          LATEST=$(gh api repos/$SOURCE_REPO/tags | jq -r '.[].name' | grep "^AZenith" | sort -V | tail -1)

          if [ -z "$LATEST" ]; then
            echo "No matching tags found in source repo"
            echo "should_sync=false" >> $GITHUB_OUTPUT
            exit 0
          fi

          echo "Latest source tag: $LATEST"
          echo "latest=$LATEST" >> $GITHUB_OUTPUT

          if gh api repos/$GITHUB_REPOSITORY/releases/tags/$LATEST >/dev/null 2>&1; then
            echo "Tag already exists in this repo, skipping"
            echo "should_sync=false" >> $GITHUB_OUTPUT
          else
            echo "Tag is new, will sync"
            echo "should_sync=true" >> $GITHUB_OUTPUT
          fi

  release:
    needs: get_latest_tag
    if: needs.get_latest_tag.outputs.should_sync == 'true'
    runs-on: ubuntu-latest
    env:
      TAG: ${{ needs.get_latest_tag.outputs.latest }}
    steps:
      - name: Checkout
        uses: actions/checkout@v6
        with:
          token: ${{ secrets.REPO_SYNC_PAT }}

      - name: Find and download artifact
        id: download
        run: |
          ASSETS_JSON=$(gh api repos/$SOURCE_REPO/releases/tags/$TAG --jq '.assets')
          ASSET_NAME=$(echo "$ASSETS_JSON" | jq -r '.[].name | select(startswith("AZenith") and endswith(".zip"))')

          if [ -z "$ASSET_NAME" ]; then
            echo "No artifact found matching pattern"
            exit 1
          fi

          echo "Found asset: $ASSET_NAME"
          gh release download $TAG --repo $SOURCE_REPO --pattern "$ASSET_NAME"
          echo "asset_name=$ASSET_NAME" >> $GITHUB_OUTPUT

      - name: Get release body
        id: body
        run: |
          BODY=$(gh release view $TAG --repo $SOURCE_REPO --json body -q .body | sed -E 's/<img[^>]*>//g; s/!\[[^]]*\]\([^)]*\)//g')

          echo "body<<EOF" >> $GITHUB_OUTPUT
          echo "$BODY" >> $GITHUB_OUTPUT
          echo "EOF" >> $GITHUB_OUTPUT

      - name: Create Release
        uses: KernelSU-Modules-Repo/module_release@main
        with:
          tag_name: ${{ env.TAG }}
          make_latest: true
          file: "${{ steps.download.outputs.asset_name }}"
          body: ${{ steps.body.outputs.body }}

      - uses: actions/attest-build-provenance@v3
        with:
          subject-path: "${{ steps.download.outputs.asset_name }}"