update-package-managers.yml

name: Update Package Managers

on:
  release:
    types: [published]
  workflow_dispatch:
    inputs:
      tag:
        description: 'Release tag (e.g., v0.1.9)'
        required: true

permissions:
  contents: read

jobs:
  update-homebrew:
    name: Update Homebrew Formula
    runs-on: ubuntu-latest
    steps:
      - name: Get release info
        id: release
        run: |
          if [ -n "${{ github.event.inputs.tag }}" ]; then
            TAG="${{ github.event.inputs.tag }}"
          else
            TAG="${{ github.event.release.tag_name }}"
          fi
          VERSION="${TAG#v}"
          echo "tag=$TAG" >> $GITHUB_OUTPUT
          echo "version=$VERSION" >> $GITHUB_OUTPUT

      - name: Download source tarball and compute hash
        id: hash
        run: |
          TAG="${{ steps.release.outputs.tag }}"
          URL="https://github.com/writerslogic/witnessd-cli/archive/refs/tags/${TAG}.tar.gz"
          curl -sSfL -o source.tar.gz "$URL"
          SHA256=$(sha256sum source.tar.gz | awk '{print $1}')
          echo "sha256=$SHA256" >> $GITHUB_OUTPUT
          echo "url=$URL" >> $GITHUB_OUTPUT

      - name: Checkout homebrew-tap
        uses: actions/checkout@v4
        with:
          repository: writerslogic/homebrew-tap
          token: ${{ secrets.TAP_GITHUB_TOKEN }}
          path: homebrew-tap

      - name: Update formula
        run: |
          cd homebrew-tap
          TAG="${{ steps.release.outputs.tag }}"
          SHA256="${{ steps.hash.outputs.sha256 }}"
          URL="${{ steps.hash.outputs.url }}"

          sed -i "s|url \".*\"|url \"${URL}\"|" Formula/witnessd.rb
          sed -i "s|sha256 \".*\"|sha256 \"${SHA256}\"|" Formula/witnessd.rb

      - name: Commit and push
        run: |
          cd homebrew-tap
          git config user.name "github-actions[bot]"
          git config user.email "github-actions[bot]@users.noreply.github.com"
          git add Formula/witnessd.rb
          if git diff --cached --quiet; then
            echo "No changes to commit"
          else
            git commit -m "witnessd ${{ steps.release.outputs.tag }}"
            git push
          fi

  update-scoop:
    name: Update Scoop Manifest
    runs-on: ubuntu-latest
    steps:
      - name: Get release info
        id: release
        run: |
          if [ -n "${{ github.event.inputs.tag }}" ]; then
            TAG="${{ github.event.inputs.tag }}"
          else
            TAG="${{ github.event.release.tag_name }}"
          fi
          VERSION="${TAG#v}"
          echo "tag=$TAG" >> $GITHUB_OUTPUT
          echo "version=$VERSION" >> $GITHUB_OUTPUT

      - name: Download Windows artifact and compute hash
        id: hash
        run: |
          TAG="${{ steps.release.outputs.tag }}"
          URL="https://github.com/writerslogic/witnessd-cli/releases/download/${TAG}/witnessd_${TAG}_x86_64-pc-windows-msvc.zip"
          curl -sSfL -o windows.zip "$URL"
          SHA256=$(sha256sum windows.zip | awk '{print $1}')
          echo "sha256=$SHA256" >> $GITHUB_OUTPUT
          echo "url=$URL" >> $GITHUB_OUTPUT

      - name: Checkout scoop-bucket
        uses: actions/checkout@v4
        with:
          repository: writerslogic/scoop-bucket
          token: ${{ secrets.TAP_GITHUB_TOKEN }}
          path: scoop-bucket

      - name: Update manifest
        run: |
          cd scoop-bucket
          TAG="${{ steps.release.outputs.tag }}"
          VERSION="${{ steps.release.outputs.version }}"
          SHA256="${{ steps.hash.outputs.sha256 }}"
          URL="${{ steps.hash.outputs.url }}"

          cat > witnessd.json << MANIFEST
          {
              "\$schema": "https://raw.githubusercontent.com/ScoopInstaller/Scoop/master/schema.json",
              "version": "${VERSION}",
              "description": "Cryptographic authorship witnessing for writers and creators",
              "homepage": "https://writerslogic.com",
              "license": "GPL-3.0-only",
              "architecture": {
                  "64bit": {
                      "url": "${URL}",
                      "hash": "${SHA256}"
                  }
              },
              "bin": [
                  "witnessd-cli.exe",
                  ["witnessd-cli.exe", "witnessd"]
              ],
              "checkver": {
                  "github": "https://github.com/writerslogic/witnessd-cli"
              },
              "autoupdate": {
                  "architecture": {
                      "64bit": {
                          "url": "https://github.com/writerslogic/witnessd-cli/releases/download/v\$version/witnessd_v\$version_x86_64-pc-windows-msvc.zip",
                          "hash": {
                              "url": "https://github.com/writerslogic/witnessd-cli/releases/download/v\$version/checksums.txt",
                              "regex": "([a-f0-9]{64})\\s+witnessd_v\$version_x86_64-pc-windows-msvc.zip"
                          }
                      }
                  }
              }
          }
          MANIFEST

      - name: Commit and push
        run: |
          cd scoop-bucket
          git config user.name "github-actions[bot]"
          git config user.email "github-actions[bot]@users.noreply.github.com"
          git add witnessd.json
          if git diff --cached --quiet; then
            echo "No changes to commit"
          else
            git commit -m "witnessd ${{ steps.release.outputs.tag }}"
            git push
          fi