name: Build and Push Docker Image

on:
  push:
    branches: [main]
  workflow_dispatch:

jobs:
  build:
    # Runs on the forgerunner host: bundled Docker CLI + mounted /var/run/docker.sock.
    runs-on: host
    steps:
      - name: Checkout
        uses: actions/checkout@v4
        with:
          fetch-depth: 0

      - name: Log in to Gitea Container Registry
        uses: docker/login-action@v3
        with:
          registry: registry.alwisp.com
          username: ${{ secrets.REGISTRY_USER }}
          password: ${{ secrets.REGISTRY_TOKEN }}

      - name: Build and Push
        run: |
          IMAGE="registry.alwisp.com/${{ gitea.repository }}"
          GIT_SHA="$(git rev-parse --short HEAD)"
          COMMIT_COUNT="$(git rev-list --count HEAD)"
          docker build \
            --label org.alwisp.git-sha="${{ gitea.sha }}" \
            --label org.alwisp.version="v2.${COMMIT_COUNT}" \
            --label org.alwisp.repo="${{ gitea.repository }}" \
            -t "${IMAGE}:latest" .
          docker push "${IMAGE}:latest"

      # Dangling-only prune: removes untagged leftovers from previous builds. Never
      # removes the tagged :latest or any image referenced by a running container.
      - name: Prune dangling images on host
        if: always()
        run: docker image prune -f 2>/dev/null || true

      - name: Trigger PORT redeploy
        if: success()
        run: |
          # Repo is 'echo' but the container is 'echo-mcp' — target it explicitly.
          curl -fsS -X POST https://port.alwisp.com/hooks/gitea \
            -H "X-Deploy-Token: ${{ secrets.WEBHOOK_SECRET }}" \
            -H "Content-Type: application/json" \
            -d '{"container":"echo-mcp"}' || echo "PORT redeploy trigger failed (non-fatal)"