name: Publish kewt-git to AUR

on:
  push:
    branches:
      - main
    paths:
      - 'packaging/AUR/PKGBUILD.git'
      - 'packaging/AUR/.SRCINFO.git'
  workflow_dispatch:

jobs:
  publish-aur-git:
    runs-on: local
    steps:
      - name: Checkout repository
        uses: actions/checkout@v4

      - name: Ensure publish tools are available
        run: |
          sudo apt-get update
          sudo apt-get install -y openssh-client git

      - name: Prepare AUR files
        run: |
          mkdir -p aur-work
          cp packaging/AUR/PKGBUILD.git aur-work/PKGBUILD
          cp packaging/AUR/.SRCINFO.git aur-work/.SRCINFO

      - name: Setup SSH
        run: |
          mkdir -p ~/.ssh
          printf '%s\n' "${{ secrets.AUR_SSH_PRIVATE_KEY }}" > ~/.ssh/id_rsa
          chmod 600 ~/.ssh/id_rsa
          ssh-keyscan -H aur.archlinux.org >> ~/.ssh/known_hosts

      - name: Publish to AUR
        run: |
          rm -rf aur-repo
          git clone "ssh://aur@aur.archlinux.org/kewt-git.git" aur-repo
          cp aur-work/PKGBUILD aur-repo/PKGBUILD
          cp aur-work/.SRCINFO aur-repo/.SRCINFO

          cd aur-repo
          git config user.name "${{ github.actor }}"
          git config user.email "${{ github.actor }}@users.noreply.github.com"
          git add PKGBUILD .SRCINFO
          git commit -m "Update kewt-git to ${GITHUB_SHA}" || exit 0
          GIT_SSH_COMMAND="ssh -i ~/.ssh/id_rsa -o IdentitiesOnly=yes -o StrictHostKeyChecking=yes" git push origin HEAD:master