name: Docs deploy

on:
  push:
    branches: [main]

permissions:
  contents: "read"
  id-token: "write"

defaults:
  run:
    shell: bash --noprofile --norc -euo pipefail {0}

# The lack of `concurrency` is intentional.
# We want this job to run on every commit, even if multiple are merged in a row.

jobs:
  has-label:
    name: Check for PR label
    runs-on: ubuntu-latest
    outputs:
      result: ${{ steps.find-pr.outputs.result }}
    steps:
      - uses: actions/checkout@v3
        with:
          # ref - not set, because we want to end up on the merge commit
          fetch-depth: 0 # don't perform a shallow clone

      # Find the PR by the number in the merge commit subject line
      - name: Find PR
        id: find-pr
        env:
          GH_TOKEN: ${{ secrets.RERUN_BOT_TOKEN }}
        run: |
          commit_message=$(git log --pretty=format:%s -n 1 ${{ github.sha }})
          pr_number=$(python3 scripts/ci/parse_pr_number.py "$commit_message" 2>/dev/null || true)

          # Exported commits don't have PR numbers - skip them
          if [ -z "$pr_number" ]; then
            echo "No PR number found in commit message, skipping"
            echo "result=false" >> $GITHUB_OUTPUT
            exit 0
          fi

          result=$(gh pr view $pr_number --json labels | jq -r 'any(.labels[].name; . == "deploy docs")')
          echo "result=$result" >> $GITHUB_OUTPUT

  cherry-pick:
    name: Cherry-pick to docs-latest
    needs: [has-label]
    if: needs.has-label.outputs.result == 'true'
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v3
        with:
          fetch-depth: 0
          token: ${{ secrets.RERUN_BOT_TOKEN }}

      - name: Cherry-pick
        run: |
          # Setup git user
          git config --global user.name "rerun-bot"
          git config --global user.email "bot@rerun.io"

          # Cherry-pick the commit
          git checkout docs-latest
          git cherry-pick ${{ github.sha }}
          git push origin docs-latest