action.yml

name: Create verified commit
description: Create a GitHub-verified commit from local workspace changes.

inputs:
  base-ref:
    description: Branch name or refs/heads reference used as the commit parent and base tree.
    required: true
  commit-message:
    description: Commit message for the new commit.
    required: true

outputs:
  has-changes:
    description: Whether there were local changes to commit.
    value: ${{ steps.create.outputs.has-changes }}
  commit-sha:
    description: SHA of the created commit.
    value: ${{ steps.create.outputs.commit-sha }}
  parent-sha:
    description: SHA of the parent commit used for the new commit.
    value: ${{ steps.create.outputs.parent-sha }}

runs:
  using: composite
  steps:
    - id: create
      uses: actions/github-script@v7
      env:
        BASE_REF: ${{ inputs.base-ref }}
        COMMIT_MESSAGE: ${{ inputs.commit-message }}
      with:
        script: |
          const fs = require('fs')
          const { execSync } = require('child_process')

          const owner = context.repo.owner
          const repo = context.repo.repo
          const baseRefInput = process.env.BASE_REF
          const baseRef = baseRefInput.replace(/^refs\/heads\//, '')
          const commitMessage = process.env.COMMIT_MESSAGE

          const statusLines = execSync('git status --porcelain=v1 --untracked-files=all', {
            encoding: 'utf-8'
          })
            .split('\n')
            .filter(Boolean)

          if (statusLines.length === 0) {
            core.info('No changes to commit.')
            core.setOutput('has-changes', 'false')
            return
          }

          const baseRefResponse = await github.rest.git.getRef({
            owner,
            repo,
            ref: `heads/${baseRef}`
          })

          const parentSha = baseRefResponse.data.object.sha
          const baseCommit = await github.rest.git.getCommit({
            owner,
            repo,
            commit_sha: parentSha
          })

          async function createBlobEntry(filePath) {
            const content = fs.readFileSync(filePath, 'utf8')
            const blob = await github.rest.git.createBlob({
              owner,
              repo,
              content,
              encoding: 'utf-8'
            })

            return {
              path: filePath,
              mode: '100644',
              type: 'blob',
              sha: blob.data.sha
            }
          }

          const tree = []

          for (const line of statusLines) {
            const status = line.slice(0, 2)
            const rawPath = line.slice(3)

            if (status.includes('R') && rawPath.includes(' -> ')) {
              const [oldPath, newPath] = rawPath.split(' -> ')

              tree.push({
                path: oldPath,
                mode: '100644',
                type: 'blob',
                sha: null
              })

              tree.push(await createBlobEntry(newPath))
              continue
            }

            if (status.includes('D')) {
              tree.push({
                path: rawPath,
                mode: '100644',
                type: 'blob',
                sha: null
              })
              continue
            }

            tree.push(await createBlobEntry(rawPath))
          }

          const newTree = await github.rest.git.createTree({
            owner,
            repo,
            base_tree: baseCommit.data.tree.sha,
            tree
          })

          const newCommit = await github.rest.git.createCommit({
            owner,
            repo,
            message: commitMessage,
            tree: newTree.data.sha,
            parents: [parentSha]
          })

          core.setOutput('has-changes', 'true')
          core.setOutput('commit-sha', newCommit.data.sha)
          core.setOutput('parent-sha', parentSha)