name: Android build

permissions:
  contents: write
  releases: write

on:
  push:
    branches:
      - '**'
  pull_request:
  release:
    types:
      - published
  workflow_dispatch:

jobs:
  build:
    runs-on: ubuntu-latest
    timeout-minutes: 60

    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Set up Java 17
        uses: actions/setup-java@v5
        with:
          distribution: temurin
          java-version: '17'

      - name: Run project build tooling for debug APK
        if: github.event_name != 'release'
        shell: bash
        env:
          CI_VERSION_CODE: ${{ github.run_number }}
        run: |
          set -euxo pipefail
          chmod +x ./BuildTool.sh
          ./BuildTool.sh --no-commit --apk-only

      - name: Run project build tooling for release AAB
        if: github.event_name == 'release'
        shell: bash
        env:
          CI_VERSION_CODE: ${{ github.run_number }}
          CI_ARTIFACT_TIMESTAMP: ${{ github.run_id }}
          ANDROID_KEYSTORE_BASE64: ${{ secrets.ANDROID_KEYSTORE_BASE64 }}
          ANDROID_KEYSTORE_PASSWORD: ${{ secrets.ANDROID_KEYSTORE_PASSWORD }}
          ANDROID_KEY_ALIAS: ${{ secrets.ANDROID_KEY_ALIAS }}
          ANDROID_KEY_PASSWORD: ${{ secrets.ANDROID_KEY_PASSWORD }}
        run: |
          set -euxo pipefail
          chmod +x ./BuildTool.sh
          ./BuildTool.sh --no-commit --with-aab

      - name: Upload debug APK
        if: github.event_name != 'release'
        uses: actions/upload-artifact@v3
        with:
          name: debug-apk
          path: dist/*.apk
          if-no-files-found: error

      - name: Attach release AAB to Gitea release
        if: github.event_name == 'release'
        env:
          GITEA_TOKEN: ${{ secrets.GITEA_TOKEN }}
          GITHUB_TOKEN: ${{ github.token }}
        shell: bash
        run: |
          set -euxo pipefail
          token="${GITHUB_TOKEN:-${GITEA_TOKEN:-}}"
          if [ -z "$token" ]; then
            echo "::error::No release upload token is available from secrets.GITEA_TOKEN or github.token"
            exit 1
          fi
          release_id="$(python3 -c 'import json, os; print(json.load(open(os.environ["GITHUB_EVENT_PATH"], encoding="utf-8"))["release"]["id"])')"
          aab="$(find dist -name '*.aab' | head -n 1)"
          curl --fail-with-body \
            --request POST \
            --header "Authorization: token ${token}" \
            --form "attachment=@${aab}" \
            "${GITHUB_SERVER_URL}/api/v1/repos/${GITHUB_REPOSITORY}/releases/${release_id}/assets?name=$(basename "$aab")"