name: "Publish APK to F-Droid"
description: "Sign APK (v1+v2) and publish to the F-Droid repository, then rebuild the index"

inputs:
  apk_path:
    description: "Path to the APK to sign and publish"
    required: true

runs:
  using: "composite"
  steps:
    - name: Setup Java
      uses: actions/setup-java@v4
      with:
        java-version: 21
        distribution: "adopt"

    - name: Sign APK
      shell: bash
      env:
        KEYSTORE_B64: ${{ vars.ANDROID_KEYSTORE_B64 }}
        KEYSTORE_PASS: ${{ vars.ANDROID_KEYSTORE_PASSWORD }}
        KEY_ALIAS: ${{ vars.ANDROID_KEY_ALIAS }}
        KEY_PASS: ${{ vars.ANDROID_KEY_PASSWORD }}
      run: |
        set -euo pipefail
        echo "Signing ${{ inputs.apk_path }}"
        echo "$KEYSTORE_B64" | base64 -d > /tmp/release.keystore
        curl -sL -o /tmp/uber-apk-signer.jar \
          https://github.com/patrickfav/uber-apk-signer/releases/download/v1.3.0/uber-apk-signer-1.3.0.jar
        java -jar /tmp/uber-apk-signer.jar \
          -a "${{ inputs.apk_path }}" \
          --ks /tmp/release.keystore \
          --ksAlias "$KEY_ALIAS" \
          --ksPass "$KEYSTORE_PASS" \
          --ksKeyPass "$KEY_PASS" \
          --allowResign \
          -o /tmp/apk-out
        echo "Signed APK:"
        ls -la /tmp/apk-out/*.apk

    - name: Push to F-Droid repo and rebuild index
      shell: bash
      env:
        FROID_HOST: ${{ vars.FROID_HOST }}
        FROID_SSH_USER: ${{ vars.FROID_SSH_USER }}
        FROID_SSH_KEY: ${{ vars.FROID_SSH_KEY }}
      run: |
        set -euo pipefail
        mkdir -p ~/.ssh && chmod 700 ~/.ssh
        echo "$FROID_SSH_KEY" > ~/.ssh/froid_ci && chmod 600 ~/.ssh/froid_ci
        APK=$(ls /tmp/apk-out/*.apk | head -1)
        echo "Uploading $(basename "$APK") to ${FROID_SSH_USER}@${FROID_HOST}:/opt/fdroid/repo/"
        scp -i ~/.ssh/froid_ci -o StrictHostKeyChecking=accept-new "$APK" \
          "${FROID_SSH_USER}@${FROID_HOST}:/opt/fdroid/repo/"
        ssh -i ~/.ssh/froid_ci "${FROID_SSH_USER}@${FROID_HOST}" \
          "cd /opt/fdroid && fdroid update"
        echo "Done. F-Droid repo: https://fdroid.binom.pw/repo/"