when:
  - event: tag
    ref: refs/tags/v*

steps:
  - name: deliver
    image: golang:1.26.8-bookworm
    environment:
      RELEASEKIT_GITEA_TOKEN:
        from_secret: releasekit_gitea_token
    commands:
      - |
        set -eu
        test -n "$${CI_COMMIT_TAG}"
        test -n "$${CI_COMMIT_SHA}"
        git check-ref-format "refs/tags/$${CI_COMMIT_TAG}"
        git fetch origin "refs/tags/$${CI_COMMIT_TAG}:refs/tags/$${CI_COMMIT_TAG}"
        tag_commit=$(git rev-parse "refs/tags/$${CI_COMMIT_TAG}^{commit}")
        expected_commit=$(printf '%s' "$${CI_COMMIT_SHA}" | tr '[:upper:]' '[:lower:]')
        test "$(printf '%s' "$${tag_commit}" | tr '[:upper:]' '[:lower:]')" = "$${expected_commit}"
        git checkout --detach "$${tag_commit}"
        test "$(git rev-parse HEAD | tr '[:upper:]' '[:lower:]')" = "$${expected_commit}"
        test -z "$(git status --porcelain --untracked-files=all)"

        bootstrap_dir=$(mktemp -d "$${CI_WORKSPACE%/*}/.releasekit-source.XXXXXX")
        trap 'rm -rf "$${bootstrap_dir}"' EXIT
        export GOWORK=off
        export GOTOOLCHAIN=local
        go build -mod=readonly -o "$${bootstrap_dir}/releasekit" ./cmd/releasekit
        "$${bootstrap_dir}/releasekit" ci-deliver \
          --repo "$${CI_WORKSPACE}" \
          --prepared \
          --commit "$${CI_COMMIT_SHA}" \
          "$${CI_COMMIT_TAG}"