name: Promote OSS Desktop Auto-Update
run-name: Promote desktop-v${{ inputs.version }} to auto-update

on:
  workflow_dispatch:
    inputs:
      version:
        description: Stable desktop version to promote (X.Y.Z)
        required: true
        type: string

concurrency:
  group: oss-desktop-auto-update-promotion
  cancel-in-progress: false

permissions:
  contents: read

jobs:
  promote:
    if: github.repository == 'block/buzz'
    runs-on: ubuntu-latest
    timeout-minutes: 10
    permissions:
      contents: write
    steps:
      - name: Require the reviewed workflow from main
        env:
          DISPATCH_REF: ${{ github.ref }}
        run: |
          if [ "$DISPATCH_REF" != "refs/heads/main" ]; then
            echo "::error::OSS desktop promotion must be dispatched from main, not $DISPATCH_REF"
            exit 1
          fi

      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
        with:
          ref: ${{ github.sha }}
          persist-credentials: false

      - name: Validate and promote exact release manifest
        env:
          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          VERSION: ${{ inputs.version }}
        run: scripts/promote-oss-desktop-release.sh "$VERSION"