name: Promote to UAT

on:
  workflow_dispatch:
    inputs:
      image_tag:
        description: "Image tag to deploy to UAT (e.g. 2026.04.03-abc1234)"
        required: true
        type: string

jobs:
  promote-to-uat:
    name: Promote to groombook-uat
    runs-on: ubuntu-latest
    steps:
      - name: Clone groombook/infra
        env:
          GITEA_TOKEN: ${{ gitea.token }}
        run: |
          git clone https://oauth2:$GITEA_TOKEN@git.farh.net/groombook/infra.git /tmp/infra

      - name: Install yq
        run: |
          sudo wget -qO /usr/local/bin/yq https://github.com/mikefarah/yq/releases/latest/download/yq_linux_amd64
          sudo chmod +x /usr/local/bin/yq

      - name: Update UAT overlay image tags and base Job names
        env:
          TAG: ${{ inputs.image_tag }}
        run: |
          echo "Updating UAT overlay image tags to: $TAG"
          cd /tmp/infra
          UAT_KUST="apps/groombook/overlays/uat/kustomization.yaml"

          if [ ! -f "$UAT_KUST" ]; then
            echo "ERROR: UAT overlay not found at $UAT_KUST. Ensure GRO-427 has been completed."
            exit 1
          fi

          SHORT_SHA="${TAG##*-}"
          export SHORT_SHA
          export TAG

          yq -i '(.images[] | select(.name == "git.farh.net/groombook/api")).newTag = env(TAG)' "$UAT_KUST"
          yq -i '(.images[] | select(.name == "git.farh.net/groombook/web")).newTag = env(TAG)' "$UAT_KUST"
          yq -i '(.images[] | select(.name == "git.farh.net/groombook/migrate")).newTag = env(TAG)' "$UAT_KUST"
          yq -i '(.images[] | select(.name == "git.farh.net/groombook/seed")).newTag = env(TAG)' "$UAT_KUST"

          MIGRATE_JOB="apps/groombook/base/migrate-job.yaml"
          if [ -f "$MIGRATE_JOB" ]; then
            yq -i '.metadata.name = "migrate-schema-" + env(SHORT_SHA)' "$MIGRATE_JOB"
            yq -i '.metadata.annotations."groombook.app/deploy-version" = env(TAG)' "$MIGRATE_JOB"
          fi

          SEED_JOB="apps/groombook/base/seed-job.yaml"
          if [ -f "$SEED_JOB" ]; then
            yq -i '.metadata.name = "seed-test-data-" + env(SHORT_SHA)' "$SEED_JOB"
            yq -i '.metadata.annotations."groombook.app/deploy-version" = env(TAG)' "$SEED_JOB"
          fi

          git -C /tmp/infra diff --stat

      - name: Create PR on groombook/infra
        env:
          TAG: ${{ inputs.image_tag }}
          GITEA_TOKEN: ${{ gitea.token }}
        run: |
          cd /tmp/infra
          git config user.name "groombook-engineer[bot]"
          git config user.email "groombook-engineer[bot]@git.farh.net"
          git checkout -b "chore/update-uat-image-tags-${TAG}"
          git add apps/groombook/overlays/uat/ apps/groombook/base/migrate-job.yaml apps/groombook/base/seed-job.yaml
          git commit -m "chore: promote ${TAG} to UAT"
          git push -u origin "chore/update-uat-image-tags-${TAG}"

          PR_NUM=$(curl -s -X POST \
            -H "Authorization: token $GITEA_TOKEN" \
            -H "Content-Type: application/json" \
            "https://git.farh.net/api/v1/repos/groombook/infra/pulls" \
            -d "{\"head\":\"chore/update-uat-image-tags-${TAG}\",\"base\":\"main\",\"title\":\"chore: promote ${TAG} to UAT\",\"body\":\"[GRO-429](/GRO/issues/GRO-429) — UAT promotion triggered by CTO\"}" \
            | jq '.number')
          curl -s -X POST \
            -H "Authorization: token $GITEA_TOKEN" \
            -H "Content-Type: application/json" \
            "https://git.farh.net/api/v1/repos/groombook/infra/pulls/$PR_NUM/merge" \
            -d '{"Do":"merge"}'

      - name: Notify on failure
        if: failure()
        env:
          GITEA_TOKEN: ${{ gitea.token }}
          RUN_ID: ${{ github.run_id }}
        run: |
          curl -s -X POST \
            -H "Authorization: token $GITEA_TOKEN" \
            -H "Content-Type: application/json" \
            "https://git.farh.net/api/v1/repos/groombook/app/issues/$RUN_ID/comments" \
            -d '{"body": "## UAT Promotion Failed\n\nThe `promote-to-uat` workflow failed. Check the workflow run logs for details.\n\nCommon issues:\n- UAT overlay not found (ensure GRO-427 is complete)\n- GITEA_TOKEN permissions"}'