cd.yml

name: CD

permissions:
  contents: write

on:
  workflow_dispatch:
  push:
    branches:
      - main
    paths:
      - package.json

jobs:
  release:
    name: Build and Release
    runs-on: ubuntu-latest

    env:
      CONFIGURATION: Release
      MAIN_SOLUTION: ./src/Purview.Telemetry.SourceGenerator.slnx
      SAMPLE_SOLUTION: ./samples/SampleApp/SampleApp.slnx
      PACKAGE_PROJECT: ./src/Purview.Telemetry.SourceGenerator/Purview.Telemetry.SourceGenerator.csproj
      ARTIFACTS_DIR: ./artifacts/nuget

    steps:
      - name: Checkout code
        uses: actions/checkout@v6
        with:
          fetch-depth: 0

      - id: version
        name: Read release version
        shell: bash
        run: |
          set -euo pipefail

          version="$(node -p "require('./package.json').version")"
          echo "value=${version}" >> "${GITHUB_OUTPUT}"
          echo "tag=v${version}" >> "${GITHUB_OUTPUT}"

          if [[ "${version}" == *-* ]]; then
            echo "prerelease=true" >> "${GITHUB_OUTPUT}"
          else
            echo "prerelease=false" >> "${GITHUB_OUTPUT}"
          fi

      - id: release-check
        name: Check if release already exists
        env:
          GH_TOKEN: ${{ github.token }}
          RELEASE_TAG: ${{ steps.version.outputs.tag }}
        shell: bash
        run: |
          set -euo pipefail

          if gh release view "${RELEASE_TAG}" --repo "${GITHUB_REPOSITORY}" &>/dev/null; then
            echo "::notice::Release ${RELEASE_TAG} already exists — skipping."
            echo "should_release=false" >> "${GITHUB_OUTPUT}"
          else
            echo "should_release=true" >> "${GITHUB_OUTPUT}"
          fi

      - name: Set up .NET
        if: ${{ steps.release-check.outputs.should_release == 'true' }}
        uses: actions/setup-dotnet@v5
        with:
          global-json-file: ./global.json

      - name: Restore dotnet tools
        if: ${{ steps.release-check.outputs.should_release == 'true' }}
        run: dotnet tool restore

      - name: CSharpier format check
        if: ${{ steps.release-check.outputs.should_release == 'true' }}
        run: dotnet csharpier check .

      - name: Restore main solution
        if: ${{ steps.release-check.outputs.should_release == 'true' }}
        run: dotnet restore ${{ env.MAIN_SOLUTION }}

      - name: Build main solution
        if: ${{ steps.release-check.outputs.should_release == 'true' }}
        run: dotnet build ${{ env.MAIN_SOLUTION }} --no-restore --configuration ${{ env.CONFIGURATION }}

      - name: Test main solution
        if: ${{ steps.release-check.outputs.should_release == 'true' }}
        run: dotnet test ${{ env.MAIN_SOLUTION }} --no-build --configuration ${{ env.CONFIGURATION }} --verbosity normal

      - name: Restore sample solution
        if: ${{ steps.release-check.outputs.should_release == 'true' }}
        run: dotnet restore ${{ env.SAMPLE_SOLUTION }}

      - name: Build sample solution
        if: ${{ steps.release-check.outputs.should_release == 'true' }}
        run: dotnet build ${{ env.SAMPLE_SOLUTION }} --no-restore --configuration ${{ env.CONFIGURATION }}

      - name: Test sample solution
        if: ${{ steps.release-check.outputs.should_release == 'true' }}
        run: dotnet test ${{ env.SAMPLE_SOLUTION }} --no-build --configuration ${{ env.CONFIGURATION }} --verbosity normal

      - name: Pack NuGet artifacts
        if: ${{ steps.release-check.outputs.should_release == 'true' }}
        env:
          PACKAGE_VERSION: ${{ steps.version.outputs.value }}
        shell: bash
        run: |
          set -euo pipefail

          mkdir -p "${ARTIFACTS_DIR}"

          dotnet pack "${PACKAGE_PROJECT}" \
            --configuration "${CONFIGURATION}" \
            --no-build \
            --output "${ARTIFACTS_DIR}" \
            --include-symbols \
            "/p:Version=${PACKAGE_VERSION}" \
            "/p:RepositoryBranch=${GITHUB_REF_NAME}" \
            "/p:RepositoryCommit=${GITHUB_SHA}" \
            "/p:COPYRIGHT_YEAR=$(date -u +%Y)"

      - name: Publish GitHub Release
        if: ${{ steps.release-check.outputs.should_release == 'true' }}
        env:
          GH_TOKEN: ${{ github.token }}
          RELEASE_TAG: ${{ steps.version.outputs.tag }}
          PRERELEASE: ${{ steps.version.outputs.prerelease }}
        shell: bash
        run: |
          set -euo pipefail

          # On any error: delete the draft release and its tag so the next run starts clean.
          # Draft releases are never immutable, so this always succeeds.
          cleanup() {
            echo "::warning::Release failed — cleaning up draft and tag for ${RELEASE_TAG}..."
            gh release delete "${RELEASE_TAG}" --yes --cleanup-tag 2>/dev/null || true
          }
          trap cleanup ERR

          PRERELEASE_FLAG=""
          if [[ "${PRERELEASE}" == "true" ]]; then
            PRERELEASE_FLAG="--prerelease"
          fi

          # Create as draft first — draft releases are never immutable, so assets
          # can be freely attached. The release becomes immutable only after --draft=false.
          gh release create "${RELEASE_TAG}" \
            --draft \
            --title "${RELEASE_TAG}" \
            --generate-notes \
            ${PRERELEASE_FLAG} \
            ./artifacts/nuget/*.nupkg \
            ./artifacts/nuget/*.snupkg

          # Publish: marks as latest and becomes immutable. Any retry will clean up above.
          gh release edit "${RELEASE_TAG}" \
            --draft=false \
            --latest

          echo "✅ Release ${RELEASE_TAG} published successfully."

      - name: Skip release publish
        if: ${{ steps.release-check.outputs.should_release != 'true' }}
        run: echo "Release ${{ steps.version.outputs.tag }} already exists — skipping."

      - name: Set up Bun
        if: ${{ steps.release-check.outputs.should_release == 'true' }}
        uses: oven-sh/setup-bun@v2

      - name: Install dependencies
        if: ${{ steps.release-check.outputs.should_release == 'true' }}
        run: bun install

      - name: Update wiki
        if: ${{ steps.release-check.outputs.should_release == 'true' }}
        env:
          GH_TOKEN: ${{ github.token }}
        shell: bash
        run: |
          set -euo pipefail

          git config --global user.email "github-actions[bot]@users.noreply.github.com"
          git config --global user.name "github-actions[bot]"
          git config --global url."https://x-access-token:${GH_TOKEN}@github.com/".insteadOf "https://github.com/"

          bun .build/update-version.ts