name: helium update

on:
  schedule:
    - cron: "0 6 * * *"
  workflow_dispatch:

jobs:
  update-helium:
    runs-on: ubuntu-latest
    steps:
      - name: checkout
        uses: actions/checkout@v4
        with:
          fetch-depth: 0

      - name: install nix
        uses: cachix/install-nix-action@v27
        with:
          nix_path: nixpkgs=channel:nixos-unstable

      - name: check latest helium release and update file
        id: update
        shell: bash
        run: |
          set -euo pipefail

          FILE="modules/pkgs/helium.nix"

          current_version=$(python - <<'PY'
          import re
          p='modules/pkgs/helium.nix'
          s=open(p).read()
          m=re.search(r'version\s*=\s*"([^"]+)";', s)
          print(m.group(1) if m else "")
          PY
          )

          latest_version=$(python - <<'PY'
          import json, urllib.request
          url='https://api.github.com/repos/imputnet/helium-linux/releases/latest'
          with urllib.request.urlopen(url) as r:
              data=json.load(r)
          tag=data.get('tag_name','').lstrip('v')
          print(tag)
          PY
          )

          echo "current=$current_version"
          echo "latest=$latest_version"

          if [ -z "$latest_version" ] || [ "$latest_version" = "$current_version" ]; then
            echo "updated=false" >> "$GITHUB_OUTPUT"
            exit 0
          fi

          url="https://github.com/imputnet/helium-linux/releases/download/${latest_version}/helium-${latest_version}-x86_64.AppImage"
          new_hash=$(nix store prefetch-file --json "$url" | python -c 'import json,sys; print(json.load(sys.stdin)["hash"])')

          python - <<PY
          import re
          p='modules/pkgs/helium.nix'
          s=open(p).read()
          s=re.sub(r'version\s*=\s*"[^"]+"', f'version = "{latest_version}"', s, count=1)
          s=re.sub(r'hash\s*=\s*"[^"]+"', f'hash = "{new_hash}"', s, count=1)
          open(p,'w').write(s)
          PY

          echo "updated=true" >> "$GITHUB_OUTPUT"
          echo "version=$latest_version" >> "$GITHUB_OUTPUT"

      - name: create branch and commit
        if: steps.update.outputs.updated == 'true'
        shell: bash
        run: |
          set -euo pipefail
          branch="bot/helium-${{ steps.update.outputs.version }}"

          git config user.name "gitea actions"
          git config user.email "actions@localhost"

          git checkout -B "$branch"
          git add modules/pkgs/helium.nix
          git commit -m "update helium to ${{ steps.update.outputs.version }}"
          git push --force origin "$branch"

      - name: open pull request
        if: steps.update.outputs.updated == 'true'
        env:
          GITEA_TOKEN: ${{ gitea.token }}
        shell: bash
        run: |
          set -euo pipefail

          api="${GITHUB_SERVER_URL}/api/v1/repos/${GITHUB_REPOSITORY}"
          branch="bot/helium-${{ steps.update.outputs.version }}"

          # Skip if PR for this branch already exists
          existing=$(curl -fsS \
            -H "Authorization: token ${GITEA_TOKEN}" \
            "${api}/pulls?state=open" \
            | python -c 'import json,sys; d=json.load(sys.stdin); b="'"$branch"'"; print(next((str(pr["number"]) for pr in d if pr.get("head",{}).get("ref")==b), ""))')

          if [ -n "$existing" ]; then
            echo "PR already exists: #$existing"
            exit 0
          fi

          curl -fsS -X POST \
            -H "Authorization: token ${GITEA_TOKEN}" \
            -H "Content-Type: application/json" \
            "${api}/pulls" \
            -d "$(cat <<JSON
          {
            \"title\": \"update helium to ${{ steps.update.outputs.version }}\",
            \"head\": \"${branch}\",
            \"base\": \"${GITHUB_REF_NAME}\",
            \"body\": \"automated update of helium appimage version and hash\"
          }
          JSON
          )"