feat(scripts): add interactive release script with GitHub release notes preview

docs/DEPLOY.md

@@ -42,12 +42,11 @@ BeeBuzz uses an on-demand, tag-driven release model. Merging to `main` runs CI t
 ### How to release
 
 ```bash
-git checkout main && git pull origin main
-SHORT_SHA=$(git rev-parse --short HEAD)
-git tag "beebuzz@${SHORT_SHA}"
-git push origin "beebuzz@${SHORT_SHA}"
+./scripts/release.sh
 ```
 
+The script previews the tag and commits since the last release, then prompts for confirmation before creating and pushing the tag.
+
 This triggers three workflows:
 
 1. **`docker.yml`** — runs tests, builds both Docker images, pushes to GHCR, and triggers Dokploy deploy.

scripts/release.sh

@@ -0,0 +1,112 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+# --- Guards --------------------------------------------------------------
+
+BRANCH=$(git branch --show-current)
+if [ "$BRANCH" != "main" ]; then
+  echo "Error: must be on main branch (currently on '$BRANCH')" >&2
+  exit 1
+fi
+
+if ! git diff-index --quiet HEAD --; then
+  echo "Error: working tree has uncommitted changes" >&2
+  exit 1
+fi
+
+# Fetch latest main so preview is accurate
+git fetch origin main
+LOCAL=$(git rev-parse main)
+REMOTE=$(git rev-parse origin/main)
+if [ "$LOCAL" != "$REMOTE" ]; then
+  echo "Error: local main is behind origin/main. Run: git pull origin main" >&2
+  exit 1
+fi
+
+# --- Compute tag ---------------------------------------------------------
+
+SHORT_SHA=$(git rev-parse --short HEAD)
+TAG="beebuzz@${SHORT_SHA}"
+
+if git rev-parse "$TAG" >/dev/null 2>&1; then
+  echo "Error: tag $TAG already exists" >&2
+  exit 1
+fi
+
+# --- Preview -------------------------------------------------------------
+
+PREV=$(git tag --list 'beebuzz@*' --sort=-creatordate | sed -n '1p')
+
+echo ""
+echo "================================"
+echo "  BeeBuzz Server Release Preview"
+echo "================================"
+echo ""
+echo "  Tag:        ${TAG}"
+echo "  Commit:     ${LOCAL}"
+echo "  Subject:    $(git log -1 --pretty=%s)"
+echo "  Author:     $(git log -1 --pretty=%an)"
+echo "  Date:       $(git log -1 --pretty=%ci)"
+echo ""
+
+if [ -n "$PREV" ]; then
+  COUNT=$(git rev-list --count "${PREV}..HEAD")
+  echo "  Since last: ${PREV}"
+  echo "  Commits:    ${COUNT}"
+  echo ""
+  echo "  Changes:"
+  git log --oneline --no-decorate "${PREV}..HEAD" | sed 's/^/    /'
+else
+  echo "  (No previous beebuzz@ tag found)"
+fi
+
+echo ""
+echo "================================"
+echo ""
+
+# --- GitHub Release Notes Preview ----------------------------------------
+
+echo ""
+echo "--------------------------------"
+echo "  GitHub Release Notes Preview"
+echo "--------------------------------"
+echo ""
+
+if ! command -v gh >/dev/null 2>&1; then
+  echo "  Warning: 'gh' CLI not installed. Cannot preview GitHub release notes."
+elif ! gh auth status >/dev/null 2>&1; then
+  echo "  Warning: 'gh' CLI not authenticated."
+  echo "  Run 'gh auth login' to enable GitHub release notes preview."
+else
+  GH_API_ARGS=(-f target_commitish="$LOCAL" -f tag_name="$TAG")
+  if [ -n "$PREV" ]; then
+    GH_API_ARGS+=(-f previous_tag_name="$PREV")
+  fi
+
+  GH_NOTES=$(gh api repos/:owner/:repo/releases/generate-notes "${GH_API_ARGS[@]}" --jq '.body' 2>/dev/null) || GH_NOTES=""
+
+  if [ -n "$GH_NOTES" ]; then
+    echo "$GH_NOTES"
+  else
+    echo "  (Could not fetch generated notes from GitHub API)"
+  fi
+fi
+
+echo ""
+echo "--------------------------------"
+echo ""
+
+# --- Confirmation --------------------------------------------------------
+
+read -r -p "Create and push tag ${TAG}? [y/N] " CONFIRM
+case "$CONFIRM" in
+  [yY]|[yY][eE][sS]) ;;
+  *) echo "Aborted."; exit 0 ;;
+esac
+
+# --- Release -------------------------------------------------------------
+
+git tag "$TAG"
+git push origin "$TAG"
+echo ""
+echo "Released ${TAG}"