name: Build APK
on:
  push:
    branches: [main]
  workflow_dispatch: {}

env:
  FLUTTER_IMAGE: ghcr.io/cirruslabs/flutter:3.24.5

jobs:
  build:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Build signed APK (Flutter)
        run: |
          set -e
          RUN="${{ github.run_number }}"
          NAME="1.0.${RUN}"
          echo "${{ secrets.ANDROID_KEYSTORE_B64 }}" | base64 -d > "${PWD}/gamemanager.keystore"
          docker run --rm -v "${PWD}:/app" -w /app \
            -e KSPW="${{ secrets.ANDROID_KEYSTORE_PASSWORD }}" \
            -e ALIAS="${{ secrets.ANDROID_KEY_ALIAS }}" \
            -e BUILD_NAME="${NAME}" -e BUILD_NUMBER="${RUN}" \
            "${FLUTTER_IMAGE}" bash -euxc 'git config --global --add safe.directory /app && flutter create --platforms=android --org nfteam --project-name gamemanager . && python3 tool/patch_android.py && flutter pub get && flutter build apk --release --build-name="${BUILD_NAME}" --build-number="${BUILD_NUMBER}"'
          cp build/app/outputs/flutter-apk/app-release.apk gamemanager.apk
          printf '{"version":"1.0.%s","version_code":%s,"notes":"Build CI #%s"}' "${RUN}" "${RUN}" "${RUN}" > version.json

      - name: Publish Gitea release
        run: |
          set -e
          RUN="${{ github.run_number }}"
          TAG="v1.0.${RUN}"
          API="${GITHUB_SERVER_URL}/api/v1/repos/${GITHUB_REPOSITORY}"
          AUTH="Authorization: token ${{ secrets.GITHUB_TOKEN }}"
          REL=$(curl -s -X POST "${API}/releases" -H "${AUTH}" -H 'Content-Type: application/json' -d "{\"tag_name\":\"${TAG}\",\"name\":\"GameManager ${TAG}\",\"target_commitish\":\"main\"}")
          ID=$(echo "${REL}" | python3 -c "import sys,json;print(json.load(sys.stdin)['id'])")
          curl -s -X POST "${API}/releases/${ID}/assets?name=gamemanager.apk" -H "${AUTH}" -F "attachment=@gamemanager.apk;type=application/vnd.android.package-archive" >/dev/null
          curl -s -X POST "${API}/releases/${ID}/assets?name=version.json" -H "${AUTH}" -F "attachment=@version.json;type=application/json" >/dev/null
          echo "Release ${TAG} publiee"

      - name: Notify ntfy
        if: always()
        run: |
          if [ "${{ job.status }}" = "success" ]; then E="white_check_mark"; P="default"; else E="rotating_light"; P="high"; fi
          curl -s -H "Authorization: Bearer ${{ secrets.NTFY_TOKEN }}" -H "Title: gamemanager APK - ${{ job.status }}" -H "Priority: ${P}" -H "Tags: ${E}" -d "Build APK #${{ github.run_number }} : ${{ job.status }}" "${{ secrets.NTFY_URL }}/${{ secrets.NTFY_TOPIC }}" || true