# Deploy pipeline: lint, test, build, then Docker image → registry → Portainer webhook.
# Runs on push to main, tag, or manual run.
# See lint-and-build.yaml for PR-only (lint + test + build).
when:
    branch: main
    event: [push, tag, manual]

steps:
    - name: build-and-test
      image: node:20-alpine
      commands:
          - corepack enable && corepack prepare pnpm@10.28.2 --activate
          - pnpm install --frozen-lockfile || pnpm install
          - pnpm run lint
          - pnpm run lint:css
          - pnpm run build
          - pnpm test

    - name: build
      image: docker:latest
      environment:
          REGISTRY_REPO: git.mifi.dev/mifi-ventures/landing
      volumes:
          - /var/run/docker.sock:/var/run/docker.sock
      commands:
          - set -e
          - echo "=== Building Docker image ==="
          - 'echo "Commit SHA: ${CI_COMMIT_SHA:0:8}"'
          - 'echo "Registry repo: $REGISTRY_REPO"'
          - |
              docker build \
                --tag $REGISTRY_REPO:${CI_COMMIT_SHA} \
                --tag $REGISTRY_REPO:latest \
                --label "git.commit=${CI_COMMIT_SHA}" \
                --label "git.branch=${CI_COMMIT_BRANCH}" \
                .
          - echo "✓ Docker image built successfully"
      depends_on:
          - build-and-test

    - name: push
      image: docker:latest
      environment:
          REGISTRY_URL: git.mifi.dev
          REGISTRY_REPO: git.mifi.dev/mifi-ventures/landing
          REGISTRY_USERNAME:
              from_secret: registry_username
          REGISTRY_PASSWORD:
              from_secret: registry_password
      volumes:
          - /var/run/docker.sock:/var/run/docker.sock
      commands:
          - set -e
          - echo "=== Pushing to registry ==="
          - 'echo "Registry: $REGISTRY_URL"'
          - 'echo "Repository: $REGISTRY_REPO"'
          - |
              echo "$REGISTRY_PASSWORD" | docker login "$REGISTRY_URL" \
                -u "$REGISTRY_USERNAME" \
                --password-stdin
          - docker push $REGISTRY_REPO:${CI_COMMIT_SHA}
          - docker push $REGISTRY_REPO:latest
          - echo "✓ Images pushed successfully"
      depends_on:
          - build

    - name: deploy
      image: curlimages/curl:latest
      environment:
          PORTAINER_WEBHOOK_URL:
              from_secret: portainer_webhook_url
      commands:
          - set -e
          - echo "=== Triggering Portainer stack redeploy ==="
          - |
              resp=$(curl -s -w "\n%{http_code}" -X POST "$PORTAINER_WEBHOOK_URL")
              body=$(echo "$resp" | head -n -1)
              code=$(echo "$resp" | tail -n 1)
              if [ "$code" != "200" ] && [ "$code" != "204" ]; then
                echo "Webhook failed (HTTP $code): $body"
                exit 1
              fi
              echo "✓ Portainer redeploy triggered (HTTP $code)"
      depends_on:
          - push
