name: CI

on:
  push:
    branches:
      - cicd
  pull_request:
    branches:
      - cicd

env:
  DOMAIN_URL: git.kxsw.us #*修改为你12
  REPO: ${{ vars.REPO }}
  TELEGRAM_BOT_TOKEN: 8114337882:AAHkEx03HSu7RxN4IHBJJEnsK9aPPzNLIk0
  TELEGRAM_CHAT_ID: "-4940243803"
  DOCKER_REGISTRY: registry.kxsw.us

jobs:
  build:
    runs-on: ppanel-web02
    container:
      image: node:20
    strategy:
      matrix:
        # 只有node支持版本号别名
        node: ['20.15.1']

    steps:
      - name: Checkout code
        uses: https://gitea.cn/actions/checkout@v4

      - name: Install system tools (jq, docker, curl)
        run: |
          set -e
          export DEBIAN_FRONTEND=noninteractive
          echo "Waiting for apt/dpkg locks (unattended-upgrades) to release..."
          # Wait up to 300s for unattended-upgrades/apt/dpkg locks
          end=$((SECONDS+300))
          while true; do
            LOCKS_BUSY=0
            # If unattended-upgrades is running, mark busy
            if pgrep -x unattended-upgrades >/dev/null 2>&1; then LOCKS_BUSY=1; fi
            # If fuser exists, check common lock files
            if command -v fuser >/dev/null 2>&1; then
              if fuser /var/lib/dpkg/lock >/dev/null 2>&1 \
                || fuser /var/lib/dpkg/lock-frontend >/dev/null 2>&1 \
                || fuser /var/lib/apt/lists/lock >/dev/null 2>&1; then
                LOCKS_BUSY=1
              fi
            fi
            # Break if not busy
            if [ "$LOCKS_BUSY" -eq 0 ]; then break; fi
            # Timeout after ~5 minutes
            if [ $SECONDS -ge $end ]; then
              echo "Timeout waiting for apt/dpkg locks, proceeding with Dpkg::Lock::Timeout..."
              break
            fi
            echo "Still waiting for locks..."; sleep 5
          done
          apt-get update -y -o Dpkg::Lock::Timeout=600
          apt-get install -y -o Dpkg::Lock::Timeout=600 jq curl ca-certificates docker.io
          docker --version
          jq --version
          curl --version

      - name: Install Bun
        run: |
          curl -fsSL https://bun.sh/install | bash
          echo "BUN_INSTALL=/root/.bun" >> $GITHUB_ENV
          echo "PATH=/root/.bun/bin:${PATH}" >> $GITHUB_ENV
          /root/.bun/bin/bun --version

      - name: Configure npm registry (npmmirror) and canvas mirror
        run: |
          echo "registry=https://registry.npmmirror.com" >> .npmrc
          echo "canvas_binary_host_mirror=https://registry.npmmirror.com/-/binary/canvas" >> .npmrc

      - name: Install dependencies (bun)
        run: bun install

      - name: Decide build target (admin/user/both)
        run: |
          set -e
          COMMIT_MSG="${{ github.event.head_commit.message }}"
          BUILD_TARGET="both"
          if echo "$COMMIT_MSG" | grep -qi "\[admin-only\]"; then
            BUILD_TARGET="admin"
          elif echo "$COMMIT_MSG" | grep -qi "\[user-only\]"; then
            BUILD_TARGET="user"
          else
            if git rev-parse HEAD^ >/dev/null 2>&1; then
              RANGE="HEAD^..HEAD"
            else
              RANGE="$(git rev-list --max-parents=0 HEAD)..HEAD"
            fi
            CHANGED=$(git diff --name-only $RANGE || true)
            ADMIN_MATCH=$(echo "$CHANGED" | grep -E '^(apps/admin/|docker/ppanel-admin-web/)' || true)
            USER_MATCH=$(echo "$CHANGED" | grep -E '^(apps/user/|docker/ppanel-user-web/)' || true)
            PACKAGE_MATCH=$(echo "$CHANGED" | grep -E '^(packages/|turbo.json|package.json|bun.lock)' || true)
            if [ -n "$PACKAGE_MATCH" ]; then
              BUILD_TARGET="both"
            else
              if [ -n "$ADMIN_MATCH" ] && [ -z "$USER_MATCH" ]; then BUILD_TARGET="admin"; fi
              if [ -n "$USER_MATCH" ] && [ -z "$ADMIN_MATCH" ]; then BUILD_TARGET="user"; fi
              if [ -n "$ADMIN_MATCH" ] && [ -n "$USER_MATCH" ]; then BUILD_TARGET="both"; fi
            fi
          fi
          echo "BUILD_TARGET=$BUILD_TARGET" >> $GITHUB_ENV
          echo "Decided BUILD_TARGET=$BUILD_TARGET"

      - name: Read version from package.json
        run: echo "VERSION=$(jq -r .version package.json)" >> $GITHUB_ENV

      - name: Build Admin (turbo via bun)
        if: env.BUILD_TARGET == 'admin' || env.BUILD_TARGET == 'both'
        run: bun run build --filter=ppanel-admin-web

      - name: Build User (turbo via bun)
        if: env.BUILD_TARGET == 'user' || env.BUILD_TARGET == 'both'
        run: bun run build --filter=ppanel-user-web

      - name: Build Docker (admin)
        if: env.BUILD_TARGET == 'admin' || env.BUILD_TARGET == 'both'
        run: docker build -f ./docker/ppanel-admin-web/Dockerfile -t ${{ env.DOCKER_REGISTRY }}/ppanel/ppanel-admin-web:${{ env.VERSION }} .

      - name: Build Docker (user)
        if: env.BUILD_TARGET == 'user' || env.BUILD_TARGET == 'both'
        run: docker build -f ./docker/ppanel-user-web/Dockerfile -t ${{ env.DOCKER_REGISTRY }}/ppanel/ppanel-user-web:${{ env.VERSION }} .

      - name: Push Docker Image (admin)
        if: env.BUILD_TARGET == 'admin' || env.BUILD_TARGET == 'both'
        run: docker push ${{ env.DOCKER_REGISTRY }}/ppanel/ppanel-admin-web:${{ env.VERSION }}

      - name: Push Docker Image (user)
        if: env.BUILD_TARGET == 'user' || env.BUILD_TARGET == 'both'
        run: docker push ${{ env.DOCKER_REGISTRY }}/ppanel/ppanel-user-web:${{ env.VERSION }}

      - name: Run Admin container after push
        if: env.BUILD_TARGET == 'admin' || env.BUILD_TARGET == 'both'
        run: make admin-run

      - name: Run User container after push
        if: env.BUILD_TARGET == 'user' || env.BUILD_TARGET == 'both'
        run: make user-run

      - name: Notify success to Telegram
        uses: chapvic/telegram-notify@master
        if: success()
        with:
          token: ${{ env.TELEGRAM_BOT_TOKEN }}
          chat: ${{ env.TELEGRAM_CHAT_ID }}
          status: ${{ job.status }}
          title: ✅ 构建成功
          message: "${{ gitea.repository }} 构建成功 · 分支: ${{ gitea.ref }} · 提交: ${{ gitea.sha }} · 目标: ${{ env.BUILD_TARGET }} · 版本: ${{ env.VERSION }}"
          footer: "触发者: ${{ gitea.actor }}"
          parse_mode: HTML

      - name: Notify failure to Telegram
        uses: chapvic/telegram-notify@master
        if: failure()
        with:
          token: ${{ env.TELEGRAM_BOT_TOKEN }}
          chat: ${{ env.TELEGRAM_CHAT_ID }}
          status: ${{ job.status }}
          title: ❌ 构建失败
          message: "${{ gitea.repository }} 构建失败 · 分支: ${{ gitea.ref }} · 提交: ${{ gitea.sha }} · 目标: ${{ env.BUILD_TARGET }} · 版本: ${{ env.VERSION }}"
          footer: "触发者: ${{ gitea.actor }}"
          parse_mode: HTML