name: Release Integration

on:
  workflow_dispatch:
  push:
    branches:
      - main

jobs:
  release-integration:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: actions/setup-python@v5
        with:
          python-version: "3.12"
      - uses: actions/setup-node@v4
        with:
          node-version: "22"
      - name: Configure SSH for release dependencies
        env:
          GOVOPLAN_RELEASE_SSH_KEY_B64: ${{ secrets.GOVOPLAN_RELEASE_SSH_KEY_B64 }}
        run: |
          mkdir -p ~/.ssh
          chmod 700 ~/.ssh
          if [ -z "${GOVOPLAN_RELEASE_SSH_KEY_B64:-}" ]; then
            echo "GOVOPLAN_RELEASE_SSH_KEY_B64 secret is required for git+ssh release dependencies."
            exit 1
          fi
          printf '%s' "$GOVOPLAN_RELEASE_SSH_KEY_B64" | base64 -d > ~/.ssh/id_ed25519
          chmod 600 ~/.ssh/id_ed25519
          echo 'git.add-ideas.de ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDe48IOof2fJS1dTbJtLWQnWnr+JorZXKIFdOAM9ct8G' > ~/.ssh/known_hosts
          chmod 600 ~/.ssh/known_hosts
      - name: Install backend release integration dependencies
        run: |
          python -m venv .venv
          .venv/bin/python -m pip install --upgrade pip
          .venv/bin/python -m pip install -r requirements-release.txt
          .venv/bin/python -m pip install '.[dev]'
      - name: Install WebUI release dependencies
        working-directory: webui
        run: bash ../scripts/install-webui-release-dependencies.sh .
      - name: Run release integration checks
        run: bash scripts/check-release-integration.sh