set -euo pipefail
mkdir -p "$HOME/toolchains"
curl -sSfL "https://nim-lang.org/download/nim-${NIM_VERSION}-linux_x64.tar.xz" \
  | tar -xJ -C "$HOME/toolchains"
curl -sSfL "https://ziglang.org/download/${ZIG_VERSION}/zig-x86_64-linux-${ZIG_VERSION}.tar.xz" \
  | tar -xJ -C "$HOME/toolchains"
echo "$HOME/toolchains/nim-${NIM_VERSION}/bin" >> "$GITHUB_PATH"
echo "$HOME/toolchains/zig-x86_64-linux-${ZIG_VERSION}" >> "$GITHUB_PATH"

nim --version | head -1
zig version

nim c -d:ssl --hints:off -r tests/test_nimstatic.nim

nim c -d:release -d:ssl --hints:off -o:nimstatic-host src/nimstatic.nim

set -euo pipefail
VERSION="${GITHUB_REF_NAME#v}"
NAME="nimstatic-${VERSION}-x86_64-linux"
./nimstatic-host src/nimstatic.nim -o "$NAME" -- -d:ssl --passL:-s
file "$NAME"
ldd "$NAME" 2>&1 | grep -q "not a dynamic executable"
./"$NAME" --help > /dev/null
xz -9e -k "$NAME"
sha256sum "$NAME" "$NAME.xz" > SHA256SUMS
cat SHA256SUMS
echo "NAME=$NAME" >> "$GITHUB_ENV"

set -euo pipefail
api() { curl -sSfL -H "Authorization: Bearer $GITHUB_TOKEN" \
             -H "Accept: application/vnd.github+json" "$@"; }
field() { python3 -c "import json,sys; print(json.load(sys.stdin).get(sys.argv[1],''))" "$1"; }

if ! api "$GITHUB_API_URL/repos/$GITHUB_REPOSITORY/releases/tags/$TAG" > release.json; then
  api -X POST "$GITHUB_API_URL/repos/$GITHUB_REPOSITORY/releases" \
      -d "{\"tag_name\":\"$TAG\",\"name\":\"nimstatic $TAG\"}" > release.json
fi

upload_url=$(field upload_url < release.json | cut -d'{' -f1)
echo "uploading to $upload_url"

for asset in "$NAME" "$NAME.xz" SHA256SUMS; do
  # Replace an asset of the same name, so a re-run is idempotent.
  existing=$(python3 -c "import json,sys; print(next((a['url'] for a in (json.load(open('release.json')).get('assets') or []) if a['name']==sys.argv[1]),''))" "$asset")
  if [ -n "$existing" ]; then
    api -X DELETE "$existing" > /dev/null
  fi
  api -X POST "$upload_url?name=$asset" \
      -H "Content-Type: application/octet-stream" \
      --data-binary "@$asset" > /dev/null
  echo "uploaded $asset"
done