name: "Charts/Website: Build-and-Release"

concurrency:
  group: ${{ github.head_ref }}-charts-website-release

on:
  workflow_call:
  workflow_dispatch:
  #pull_request:
  #  paths:
  #    - "charts/**"
  #    - "website/**"
  push:
    branches:
      - master
    paths:
      - "charts/**"
      - "website/**"
      - ".github/workflows/charts-release.yaml"

# Use `bash --noprofile --norc -exo pipefail` by default for all `run` steps in this workflow:
# https://docs.github.com/en/actions/reference/workflow-syntax-for-github-actions#defaultsrun
defaults:
  run:
    shell: bash

jobs:
  check_changes:
    runs-on:
      group: default
    outputs:
      changes_detected: ${{ steps.filter.outputs.changed }}

    steps:
      - name: Checkout code
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6

      - name: Filter paths
        id: filter
        uses: dorny/paths-filter@fbd0ab8f3e69293af611ebaee6363fc25e6d187d # v4
        with:
          list-files: json
          filters: |
            changed:
            - 'website/**'
            - '**/docs/**'
            - '**/Chart.yaml'


  release-helm:
    permissions:
      pull-requests: write
    name: "${{ github.ref == 'refs/heads/master' && '(Production)' || '(Preview)' }}"
    runs-on:
      group: default
    needs: check_changes
    steps:
      - name: Checkout
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
        with:
          fetch-depth: 0

      - name: Setup Forgetool
        shell: bash
        env:
          GITHUB_TOKEN: ${{ inputs.token }}
        run: |-
          TAG=""
          if RELEASES_JSON="$(curl -fsSL \
            https://api.github.com/repos/trueforge-org/forgetool/releases)"; then
            TAG="$(jq -r '[.[]
              | select(.prerelease == true)
              | .tag_name
              | select(test("^(forgetool-)?v[0-9]+\\.[0-9]+\\.[0-9]+-ALPHA[0-9]+$"))
              | {tag: ., alpha: (capture("ALPHA(?<n>[0-9]+)$").n | tonumber)}
            ] | if length > 0 then max_by(.alpha).tag else empty end' <<< "${RELEASES_JSON}")"
          fi
          [ -n "${TAG}" ] && [ "${TAG}" != "null" ] || TAG="v4.0.0-ALPHA24"
          VERSION="${TAG#v}"
          VERSION="${VERSION#forgetool-v}"
          case "$(uname -m)" in
            x86_64) ARCH="amd64" ;;
            aarch64) ARCH="arm64" ;;
            *) echo "Unsupported uname architecture: $(uname -m). Supported uname values: x86_64, aarch64." && exit 1 ;;
          esac
          curl -fsSL -o "${RUNNER_TEMP}/forgetool.tar.gz" "https://github.com/trueforge-org/forgetool/releases/download/${TAG}/forgetool_${VERSION}_linux_${ARCH}.tar.gz" || { echo "Failed to download forgetool release ${TAG} for linux_${ARCH}"; exit 1; }
          mkdir -p "${RUNNER_TEMP}/forgetool-bin"
          tar -xzf "${RUNNER_TEMP}/forgetool.tar.gz" -C "${RUNNER_TEMP}/forgetool-bin" forgetool || { echo "Failed to extract forgetool binary from archive"; exit 1; }
          chmod +x "${RUNNER_TEMP}/forgetool-bin/forgetool"
          echo "${RUNNER_TEMP}/forgetool-bin" >> "${GITHUB_PATH}"


      - name: Get Changelog Format Version
        shell: bash
        if: github.event_name == 'push'
        run: |
          ver="1"
          rev="1"
          key="changelog-format-$ver-rev-$rev"
          echo "Cache Key is: $key"
          echo "CHANGELOG_CACHE_KEY=$key" >> $GITHUB_ENV

      - name: Cache Changelog
        id: cache-changelog
        if: github.event_name == 'push'
        uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5
        with:
          key: ${{ env.CHANGELOG_CACHE_KEY }}-${{ hashFiles('**/Chart.yaml') }}
          path: changelog.json.gz
          restore-keys: |
            ${{ env.CHANGELOG_CACHE_KEY }}-${{ hashFiles('**/Chart.yaml') }}
            ${{ env.CHANGELOG_CACHE_KEY }}-

      - name: Generate Changelog
        shell: bash
        if: github.event_name == 'push'
        run: |
          export REPO_PATH="./"
          export TEMPLATE_PATH="./templates/CHANGELOG.md.tmpl"
          export OUTPUT_DIR="./changelogs"
          export JSON_FILE="changelog.json"

          ls -l

          if [ -f "$JSON_FILE.gz" ]; then
            gunzip "$JSON_FILE.gz" --force # Force overwrite if file already exists
          fi

          forgetool charts genchangelog "$REPO_PATH" "$TEMPLATE_PATH" "$OUTPUT_DIR"

          # TODO: Test remove later
          echo ""
          echo "rootcontent"
          ls ./
          echo ""

          gzip "$JSON_FILE" --best || echo "Compression failed, ignoring..."

      - name: Fix Pre-Commit issues
        shell: bash
        run: |
          echo "Running pre-commit test-and-cleanup..."
          pre-commit run --all ||:
          # Fix sh files to always be executable
          find . -name '*.sh' | xargs chmod +x

      - name: Install Helm
        uses: azure/setup-helm@dda3372f752e03dde6b3237bc9431cdc2f7a02a2 # v5
        with:
          version: v3.18.6

      # Optional step if GPG signing is used
      - name: Prepare GPG key
        if: github.event_name == 'push'
        run: |
          gpg_dir=.cr-gpg
          mkdir "$gpg_dir"
          keyring="$gpg_dir/secring.gpg"
          base64 -d <<< "$GPG_KEYRING_BASE64" > "$keyring"
          passphrase_file="$gpg_dir/passphrase"
          echo "$GPG_PASSPHRASE" > "$passphrase_file"
          echo "CR_PASSPHRASE_FILE=$passphrase_file" >> "$GITHUB_ENV"
          echo "CR_KEYRING=$keyring" >> "$GITHUB_ENV"
        env:
          GPG_KEYRING_BASE64: "${{ secrets.GPG_KEYRING_BASE64 }}"
          GPG_PASSPHRASE: "${{ secrets.GPG_PASSPHRASE }}"

      - name: Helm | Login
        if: github.event_name == 'push'
        shell: bash
        run: echo ${{ secrets.QUAY_SECRET }} | helm registry login -u ${{ secrets.QUAY_USER }} --password-stdin quay.io

      - name: Release Charts
        shell: bash
        if: github.event_name == 'push'
        env:
          CR_SKIP_EXISTING: "true"
        run: |
          owner=$(cut -d '/' -f 1 <<< "$GITHUB_REPOSITORY")
          repo=$(cut -d '/' -f 2 <<< "$GITHUB_REPOSITORY")
          install="$RUNNER_TOOL_CACHE/cr/${{ inputs.version }}/$(uname -m)"
          echo "$install" >> "$GITHUB_PATH"
          ./.github/scripts/cr.sh  --quay-token "${{ secrets.QUAY_TOKEN }}" --instal-dir $install

      - name: Helm | Logout
        shell: bash
        if: github.event_name == 'push'
        run: helm registry logout quay.io

      - name: Checkout website repo
        if: github.event_name == 'push'
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
        with:
          repository: trueforge-org/websites
          path: website   # checkout into ./website
          ref: main       # branch to push to
          token: "${{ secrets.BOT_TOKEN }}"

      - name: Copy docs to website
        if: github.event_name == 'push'
        shell: bash
        run: |
          #!/bin/bash
          echo "Maing sure directories exist..."
          mkdir -p website/truecharts/public/img/hotlink-ok/chart-icons || echo "chart-icons path already exists, continuing..."
          mkdir -p website/truecharts/public/img/hotlink-ok/chart-icons-small || echo "chart-icons-small path already exists, continuing..."
          mkdir -p website/truecharts/src/assets || echo "assets path already exists, continuing..."

          forgetool charts genchartlist ./charts
          mv -f charts.json website/truecharts/src/assets/charts.json
          mv -f ./website/truecharts/src/content/docs/charts/index.mdx ./index.mdx
          echo "Copying changelogs to docs"
          rm -rf ./website/truecharts/src/content/docs/charts/stable ./website/truecharts/src/content/docs/charts/incubator ./website/truecharts/src/content/docs/charts/library
          mkdir -p ./website/truecharts/src/content/docs/charts/
          mv -f ./index.mdx ./website/truecharts/src/content/docs/charts/index.mdx
          mkdir -p ./changelogs

          # Check if there are any directories in changelogs
          if [ -n "$(find ./changelogs -mindepth 1 -type d)" ]; then
              cp -r ./changelogs/** ./website/truecharts/src/content/docs/charts/
          else
              echo "No directories in ./changelogs. Skipping copy."
          fi

          export DEBUG=false
          export STRICT=true
          go-yq --version

          for item in charts/*/*/Chart.yaml; do
            # TODO: Move all website docs structure generation to charttool
            IFS='/' read -r -a chart_parts <<<"$item"
            ./.github/scripts/chart-docs.sh "${chart_parts[1]}/${chart_parts[2]}"
          done
          rm -rf ./website/truecharts/src/content/docs-common
          mv ./website/truecharts/src/content/docs/charts/library/common ./website/truecharts/src/content/docs-common

      - name: Prefetch contributor icons
        shell: bash
        if: github.event_name == 'push'
        run: |
          #!/bin/bash

          ## Loop through each contributor
          ## TODO: reenable later
          #while read -r contributor; do
          #    avatar_url=$(echo "$contributor" | grep -oP '"avatar_url": "\K[^"]+')
          #
          #    # Download the image
          #    wget -q "$avatar_url" -O temp_avatar
          #
          #    # Generate new filename with original extension
          #    new_filename="public/assets/contributors/$(basename "$avatar_url" | cut -d '?' -f 1)"
          #
          #    echo "converting file: $avatar_url"
          #    EXT=${FILE##*.} # file extension
          #    QUALITY=75 # quality for the image
          #    # convert the image using cwebp and output a file with the extension replaced as .webp
          #    cwebp -mt -m 6 -q $QUALITY -resize 32 32 "temp_avatar" -o "${new_filename}.webp" &>/dev/null
          #    rm temp_avatar
          #
          #done < src/assets/contributors.json

      - name: Commit and push changes
        if: github.event_name == 'push'
        run: |
          cd website
          git config user.name "TrueForge-Bot"
          git config user.email "bot@trueforge.org"
          # Ensure we rebase in case there are changes from other sources in-between
          git stash push --include-untracked -m "autogenerated TrueCharts changes"
          git pull --rebase origin main
          git stash pop
          git add .
          git diff-index --quiet HEAD || git commit -m "Update website with latest charts and docs"
          git push origin main