name: CI

on:
  push:
    branches: [main]
  pull_request:
    branches: [main]

concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

permissions:
  contents: read

jobs:
  build-native:
    name: Build Native
    runs-on: ubuntu-latest
    container:
      image: maven:3.9.6-eclipse-temurin-21
      options: --memory=8g
    steps:
      - name: Install git, node, gcc, and basic tools
        run: |
          apt-get update
          apt-get install -y git curl ca-certificates build-essential zlib1g-dev openssh-client
          curl -fsSL https://deb.nodesource.com/setup_22.x | bash -
          apt-get install -y nodejs
          rm -rf /var/lib/apt/lists/*
          git --version
          node --version
          gcc --version

      - name: Checkout
        uses: actions/checkout@v4

      - name: Cache Maven repository
        uses: actions/cache@v4
        with:
          path: ~/.m2/repository
          key: ${{ runner.os }}-maven-${{ hashFiles('**/pom.xml') }}
          restore-keys: ${{ runner.os }}-maven-

      - name: Set up GraalVM
        uses: graalvm/setup-graalvm@v1
        with:
          distribution: 'graalvm'
          java-version: '21'
          components: 'native-image'

      - name: Cache Node + npm
        uses: actions/cache@v4
        with:
          path: |
            target/node
            src/frontend/node_modules
          key: ${{ runner.os }}-node-${{ hashFiles('src/frontend/package-lock.json') }}
          restore-keys: ${{ runner.os }}-node-

      - name: Build (Native)
        run: mvn package -Pnative -B -DskipTests -Dquarkus.native.native-image-xmx=4g -Dquarkus.native.binary-type=STATIC

      - name: Verify native binary
        run: ls -la target/shot-crafter-calculator-1.0.0-runner

      - name: Deploy to LXC
        if: github.event_name == 'push' && github.ref == 'refs/heads/main'
        run: |
          set -e
          mkdir -p ~/.ssh
          echo "${{ secrets.DEPLOY_SSH_KEY }}" > ~/.ssh/deploy_key
          chmod 0600 ~/.ssh/deploy_key
          ssh-keyscan -H localhost >> ~/.ssh/known_hosts
          ssh -i ~/.ssh/deploy_key deployer@localhost \
            "mkdir -p /opt/shot-crafter-calculator/deploy"
          scp -i ~/.ssh/deploy_key \
            target/shot-crafter-calculator-1.0.0-runner \
            deployer@localhost:/opt/shot-crafter-calculator/deploy/application
          ssh -i ~/.ssh/deploy_key deployer@localhost \
            "sudo /usr/local/bin/deploy-shot-crafter-calculator.sh"