name: CI

on:
  push:
    tags:
      - 'v*'
  pull_request:

jobs:
  audit-test-build:
    runs-on: docker
    container: oven/bun:1
    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Install dependencies
        run: bun install --frozen-lockfile

      - name: Audit dependencies
        run: bun audit

      - name: Run unit tests
        run: bun run test:unit run

      - name: Build
        run: bun run build

      - name: Upload dist
        uses: actions/upload-artifact@v4
        with:
          name: dist
          path: dist

  publish:
    needs: audit-test-build
    if: startsWith(github.ref, 'refs/tags/v')
    runs-on: docker
    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Download dist
        uses: actions/download-artifact@v4
        with:
          name: dist
          path: dist

      - name: Log in to registry
        uses: docker/login-action@v3
        with:
          registry: git.mcpeakdev.com
          username: ${{ github.actor }}
          password: ${{ secrets.REGISTRY_TOKEN }}

      - name: Extract image tag
        id: meta
        run: echo "tag=${GITHUB_REF_NAME#v}" >> "$GITHUB_OUTPUT"

      - name: Build and push
        uses: docker/build-push-action@v6
        with:
          context: .
          push: true
          tags: |
            git.mcpeakdev.com/mcpeakml/portfolio:${{ steps.meta.outputs.tag }}
            git.mcpeakdev.com/mcpeakml/portfolio:latest