name: Release

on:
  push:
    tags:
      - 'v*'

jobs:
  release:
    runs-on: ubuntu-latest

    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Install build dependencies
        run: |
          sudo apt-get update
          sudo apt-get install -y --no-install-recommends \
            build-essential gcc make cppcheck lcov \
            python3 python3-pip ca-certificates \
            jq curl

      - name: Tag from ref
        run: echo "TAG=${GITHUB_REF#refs/tags/}" >> $GITHUB_ENV

      - name: Build + Tests + Coverage
        run: |
          make test
          make coverage

      - name: Traceability + Diagramme
        run: |
          python3 tools/traceability.py publish docs/traceability
          python3 tools/render_plantuml.py

      - name: Cppcheck-Report (XML)
        run: |
          cppcheck --enable=all --inconclusive --xml --xml-version=2 \
            -I src src 2> build/cppcheck-report.xml || true

      - name: Release-Bundle paketieren
        run: |
          BUNDLE_DIR="release/demo-epb-${TAG}"
          mkdir -p "$BUNDLE_DIR/coverage" "$BUNDLE_DIR/traceability" "$BUNDLE_DIR/diagrams" "$BUNDLE_DIR/reports"

          cp -r build/coverage-html/* "$BUNDLE_DIR/coverage/" 2>/dev/null || true
          cp -r docs/traceability/* "$BUNDLE_DIR/traceability/"
          cp -r docs/diagrams/* "$BUNDLE_DIR/diagrams/"
          cp build/cppcheck-report.xml "$BUNDLE_DIR/reports/" 2>/dev/null || true

          # Source-Archiv (was eingecheckt ist)
          git archive --format=tar.gz \
            --prefix="demo-epb-${TAG}/" \
            HEAD -o "release/demo-epb-${TAG}-source.tar.gz"

          # Artefakt-Archiv
          tar -czf "release/demo-epb-${TAG}-artifacts.tar.gz" -C release "demo-epb-${TAG}"

          ls -la release/

      - name: Release-Notes generieren
        run: |
          cat > release/RELEASE_NOTES.md <<EOF
          # demo-epb ${TAG}

          Vollstaendige Demo des slohmaier Dev Process anhand einer
          EPB-Steuergeraet-Software.

          ## Was im Release enthalten ist

          | Asset | Inhalt |
          |-------|--------|
          | \`demo-epb-${TAG}-source.tar.gz\` | Vollstaendiger Quellcode (git archive) |
          | \`demo-epb-${TAG}-artifacts.tar.gz\` | Coverage-HTML, Traceability-Matrix, PlantUML-Diagramme, Cppcheck-Report |

          ## Build-Beweis

          - Alle Unit-Tests gruen (Linux-Runner verbindlich)
          - Coverage gemessen mit gcov/lcov
          - Statische Analyse mit Cppcheck
          - MISRA-Check (siehe Cppcheck-Report)
          - Traceability bidirektional verifiziert (siehe Matrix)

          ## Referenzen

          - Methodik: https://gitea.slohmaier.com/slohmaier/dev-process
          - Commit: ${{ github.sha }}
          - Built: $(date -u +%Y-%m-%dT%H:%M:%SZ)
          EOF

      - name: Gitea-Release anlegen + Artefakte hochladen
        env:
          GITEA_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        run: |
          OWNER="${GITHUB_REPOSITORY_OWNER}"
          REPO="${GITHUB_REPOSITORY##*/}"
          API="${GITHUB_SERVER_URL}/api/v1"

          # Create release (idempotent: if exists, fetch)
          BODY=$(jq -Rs '.' < release/RELEASE_NOTES.md)
          RESP=$(curl -sf -X POST \
            -H "Authorization: token ${GITEA_TOKEN}" \
            -H "Content-Type: application/json" \
            -d "{\"tag_name\":\"${TAG}\",\"name\":\"demo-epb ${TAG}\",\"body\":${BODY},\"draft\":false,\"prerelease\":false}" \
            "${API}/repos/${OWNER}/${REPO}/releases" || \
            curl -sf -H "Authorization: token ${GITEA_TOKEN}" \
              "${API}/repos/${OWNER}/${REPO}/releases/tags/${TAG}")
          RELEASE_ID=$(echo "$RESP" | jq -r '.id')
          echo "Release-ID: $RELEASE_ID"

          # Upload each asset
          for f in release/demo-epb-${TAG}-source.tar.gz \
                   release/demo-epb-${TAG}-artifacts.tar.gz; do
            NAME=$(basename "$f")
            echo "Uploading $NAME ..."
            curl -sf -X POST \
              -H "Authorization: token ${GITEA_TOKEN}" \
              -H "Content-Type: application/gzip" \
              --data-binary "@$f" \
              "${API}/repos/${OWNER}/${REPO}/releases/${RELEASE_ID}/assets?name=${NAME}"
          done

          echo "Release verfuegbar unter ${GITHUB_SERVER_URL}/${OWNER}/${REPO}/releases/tag/${TAG}"

      - name: Upload artifacts (Backup als CI-Artefakt)
        uses: actions/upload-artifact@v3
        if: always()
        with:
          name: release-${{ env.TAG }}
          path: release/