run.sh

#!/usr/bin/env bash
set -euo pipefail

ACTION_PATH="${GITHUB_ACTION_PATH:-$(pwd)}"
BIN_PATH="${ACTION_PATH}/linear-release"

if [[ -z "${LINEAR_ACCESS_KEY:-}" ]]; then
  echo "::error::access_key input is required"
  exit 1
fi

if [[ ! -x "$BIN_PATH" ]]; then
  echo "::error::Linear Release CLI not found at $BIN_PATH. Ensure the install step ran."
  exit 1
fi

if ! command -v jq &>/dev/null; then
  echo "::error::jq is required but not found. Install jq or use a GitHub-hosted runner."
  exit 1
fi

if [[ -z "${GITHUB_OUTPUT:-}" ]]; then
  echo "::error::GITHUB_OUTPUT is not set. This action must run inside GitHub Actions."
  exit 1
fi

# Resolve alias: "release_version" → "version"
if [[ -z "${INPUT_VERSION:-}" && -n "${INPUT_RELEASE_VERSION:-}" ]]; then
  INPUT_VERSION="${INPUT_RELEASE_VERSION}"
fi

COMMAND="${COMMAND:-sync}"
case "$COMMAND" in
  sync|complete|update)
    ;;
  *)
    echo "::error::Invalid command '$COMMAND'. Must be: sync, complete, or update"
    exit 1
    ;;
esac

if [[ "$COMMAND" == "update" && -z "${INPUT_STAGE:-}" ]]; then
  echo "::error::stage input is required when command is 'update'"
  exit 1
fi

args=()
[[ -n "${INPUT_NAME:-}" ]] && args+=("--name=${INPUT_NAME}")
[[ -n "${INPUT_DESCRIPTION:-}" ]] && args+=("--description=${INPUT_DESCRIPTION}")
[[ -n "${INPUT_VERSION:-}" ]] && args+=("--release-version=${INPUT_VERSION}")
[[ -n "${INPUT_STAGE:-}" ]] && args+=("--stage=${INPUT_STAGE}")
[[ -n "${INPUT_INCLUDE_PATHS:-}" ]] && args+=("--include-paths=${INPUT_INCLUDE_PATHS}")
[[ -n "${INPUT_INCLUDE_SUBJECTS:-}" ]] && args+=("--include-subjects=${INPUT_INCLUDE_SUBJECTS}")
[[ -n "${INPUT_ISSUE_PATTERN:-}" ]] && args+=("--issue-pattern=${INPUT_ISSUE_PATTERN}")
[[ -n "${INPUT_BASE_REF:-}" ]] && args+=("--base-ref=${INPUT_BASE_REF}")
if [[ -n "${INPUT_LINKS:-}" ]]; then
  while IFS= read -r link || [[ -n "$link" ]]; do
    [[ "$link" =~ ^[[:space:]]*$ ]] && continue
    args+=("--link=${link}")
  done <<<"${INPUT_LINKS}"
fi
if [[ -n "${INPUT_DOCUMENTS:-}" ]]; then
  while IFS= read -r doc || [[ -n "$doc" ]]; do
    [[ "$doc" =~ ^[[:space:]]*$ ]] && continue
    args+=("--document-file=${doc}")
  done <<<"${INPUT_DOCUMENTS}"
fi
[[ -n "${INPUT_RELEASE_NOTES:-}" ]] && args+=("--release-notes-file=${INPUT_RELEASE_NOTES}")
[[ -n "${INPUT_TIMEOUT:-}" ]] && args+=("--timeout=${INPUT_TIMEOUT}")

case "${INPUT_NO_BRANCH_REF_DETECTION:-false}" in
  true)        args+=("--no-branch-ref-detection") ;;
  false|"")    ;;
  *)
    echo "::error::Invalid no_branch_ref_detection '${INPUT_NO_BRANCH_REF_DETECTION}'. Must be: true or false"
    exit 1
    ;;
esac

case "${INPUT_DRY_RUN:-false}" in
  true)        args+=("--dry-run") ;;
  false|"")    ;;
  *)
    echo "::error::Invalid dry_run '${INPUT_DRY_RUN}'. Must be: true or false"
    exit 1
    ;;
esac

if [[ -n "${INPUT_LOG_LEVEL:-}" ]]; then
  case "$INPUT_LOG_LEVEL" in
    quiet)   args+=("--quiet") ;;
    verbose) args+=("--verbose") ;;
    *)
      echo "::error::Invalid log_level '$INPUT_LOG_LEVEL'. Must be: quiet or verbose"
      exit 1
      ;;
  esac
fi

echo "Running: $BIN_PATH $COMMAND ${args[*]}"

output=$("$BIN_PATH" "$COMMAND" --json "${args[@]}")

# Print the raw JSON so it appears in workflow logs
echo "$output"

# Validate output is valid JSON before parsing
if ! jq -e . >/dev/null 2>&1 <<<"$output"; then
  echo "::error::Linear Release CLI did not return valid JSON"
  exit 1
fi

# Keep API values inside their output block, even when they contain directives.
emit_output() {
  local field="$1" value delimiter
  # A sentinel preserves trailing newlines through command substitution.
  value=$(jq -j --arg field "$field" '.release[$field] // empty' <<<"$output" && printf '.')
  value="${value%.}"
  while :; do
    delimiter="eof-$(od -An -N16 -tx1 /dev/urandom | tr -d ' \n')"
    [[ "$value" == *"$delimiter"* ]] || break
  done
  printf 'release-%s<<%s\n%s\n%s\n' "$field" "$delimiter" "$value" "$delimiter" >> "$GITHUB_OUTPUT"
}

for field in id name version url; do
  emit_output "$field"
done