#!/usr/bin/env bash
# Publishes objectiveai-cli to crates.io.
#
# Dispatches the GitHub Actions workflow that runs
# `cargo publish --no-verify -p objectiveai-cli`. `--no-verify` is used
# because the default `viewer` feature's build.rs reaches into
# ../objectiveai-viewer/ (not part of the tarball); the workspace is
# already type-checked before this script runs.
#
# CLI BINARIES (pre-compiled, cross-platform) are released separately
# by .github/workflows/release.yml, which fires automatically on push
# to main when objectiveai-cli/Cargo.toml has a fresh version. No
# manual trigger needed for the binary release.
#
# Usage:
#   bash objectiveai-cli/publish.sh                # crates.io (via GHA)
#   bash objectiveai-cli/publish.sh --build-only   # local dry-run
#
# Setup (one-time):
#   - CARGO_REGISTRY_TOKEN as repo secret (generate at https://crates.io/me).
#   - `gh` CLI authenticated.

set -euo pipefail

MODULE="objectiveai-cli"
CRATE="objectiveai-cli"
SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
REPO_ROOT="$(cd "$SCRIPT_DIR/.." && pwd)"
LOG_DIR="$REPO_ROOT/.logs/publish"
LOG_FILE="$LOG_DIR/$MODULE.txt"
WORKFLOW_FILE=".github/workflows/publish-$MODULE.yml"

mkdir -p "$LOG_DIR"

BUILD_ONLY=false
while [[ $# -gt 0 ]]; do
  case "$1" in
    --test)         echo "ERROR: crates.io has no test registry; --test is not supported." >&2; exit 1 ;;
    --build-only)   BUILD_ONLY=true; shift ;;
    *)              echo "Unknown flag: $1" >&2; exit 1 ;;
  esac
done

if $BUILD_ONLY; then
  run_local() {
    echo "Running cargo publish --dry-run --allow-dirty --no-verify -p $CRATE..."
    cargo publish --dry-run --allow-dirty --no-verify -p "$CRATE" || return $?
  }

  if run_local > "$LOG_FILE" 2>&1; then
    echo "$MODULE: BUILT (cargo publish --dry-run)"
  else
    echo "$MODULE: ERROR (see $LOG_FILE)"
    exit 1
  fi
  exit 0
fi

run_remote() {
  if ! command -v gh >/dev/null 2>&1; then
    echo "ERROR: gh CLI not found. Install it (https://cli.github.com/) or use --build-only." >&2
    return 1
  fi

  if ! gh auth status >/dev/null 2>&1; then
    echo "ERROR: gh CLI not authenticated. Run 'gh auth login' first." >&2
    return 1
  fi

  echo "Triggering $WORKFLOW_FILE on default branch..."
  gh workflow run "$WORKFLOW_FILE" \
    --repo "$(gh repo view --json nameWithOwner -q .nameWithOwner)"

  echo
  echo "Workflow dispatched. Watch progress with:"
  echo "  gh run list --workflow=$WORKFLOW_FILE"
  echo "  gh run watch \$(gh run list --workflow=$WORKFLOW_FILE --limit=1 --json databaseId -q '.[0].databaseId')"
}

if run_remote 2>&1 | tee "$LOG_FILE"; then
  echo "$MODULE: WORKFLOW DISPATCHED"
else
  echo "$MODULE: ERROR (see $LOG_FILE)"
  exit 1
fi