name: ci

on:
    push:
        tags:
            - "v*"
    pull_request:

jobs:
    build-ui:
        runs-on: self-hosted
        container: git.mcpeakdev.com/mcpeakdev/bun-ci:latest
        steps:
            - name: Checkout
              uses: actions/checkout@v4

            - name: Install dependencies
              run: bun install

            - name: Audit dependencies
              run: bun audit || true

            - name: Type check
              run: bun run type-check

            - name: Build
              run: bun run build-only

            - name: Upload Artifact
              uses: https://code.forgejo.org/forgejo/upload-artifact@v4
              with:
                name: build-output.zip
                path: dist/

    publish:
        needs: [build-ui]
        if: startsWith(github.ref, 'refs/tags/v')
        runs-on: self-hosted
        container: git.mcpeakdev.com/mcpeakdev/docker-pub:latest
        steps:
            - name: Checkout
              uses: actions/checkout@v4

            - name: Set up Docker Buildx
              uses: docker/setup-buildx-action@v3

            - name: Log in to registry
              uses: docker/login-action@v3
              with:
                  registry: git.mcpeakdev.com
                  username: ${{ github.actor }}
                  password: ${{ secrets.BUN_AUTH_TOKEN }}

            - name: Extract image tag
              id: meta
              run: echo "tag=${GITHUB_REF_NAME#v}" >> "$GITHUB_OUTPUT"

            - name: Download Artifact
              uses: https://code.forgejo.org/forgejo/download-artifact@v4
              with:
                name: build-output.zip
                path: dist

            - name: Build and push
              uses: docker/build-push-action@v6
              with:
                  context: .
                  file: Dockerfile
                  push: true
                  tags: |
                      git.mcpeakdev.com/mcpeakdev/portfolio:${{ steps.meta.outputs.tag }}
                      git.mcpeakdev.com/mcpeakdev/portfolio:latest
                  cache-from: type=registry,ref=git.mcpeakdev.com/mcpeakdev/portfolio:latest
                  cache-to: type=inline