name: Local Build and Deploy

on:
  push:
    branches:
      - main

concurrency:
  group: atom-nexst-production
  cancel-in-progress: false

jobs:
  deploy:
    runs-on: shell
    timeout-minutes: 20

    steps:
      - name: Run Deploy Scripts Locally
        shell: bash
        run: |
          set -Eeuo pipefail

          APP_DIR="/var/www/atom-nexst"
          SERVICE_NAME="atom-nexst.service"
          REPOSITORY="/docker/gitea/gitea/git/repositories/remco/epicnext-cms.git"
          LOCK_FILE="/tmp/atom-nexst-deploy.lock"
          HEALTH_URL="http://127.0.0.1:3000/api/health"

          echo "--- EPIC WEB CONTROL: Starting Deploy ---"

          exec 9>"$LOCK_FILE"

          if ! flock -n 9; then
            echo "ERROR: Another deployment is already running."
            exit 1
          fi

          if [ ! -d "$APP_DIR/.git" ]; then
            echo "ERROR: $APP_DIR is not a Git repository."
            exit 1
          fi

          cd "$APP_DIR"

          git remote set-url origin "$REPOSITORY"
          git fetch origin main --prune
          git reset --hard origin/main

          test -f package.json
          test -f pnpm-lock.yaml

          corepack enable
          corepack prepare pnpm@10.33.4 --activate

          sudo chown -R www-data:www-data "$APP_DIR"

          sudo -u www-data env HOME=/var/www \
            pnpm install --frozen-lockfile

          sudo -u www-data env HOME=/var/www \
            pnpm prisma:generate

          sudo -u www-data env HOME=/var/www \
            pnpm typecheck

          sudo -u www-data env HOME=/var/www \
            pnpm test

          sudo -u www-data env HOME=/var/www \
            pnpm build

          sudo -u www-data env HOME=/var/www \
            pnpm db:migrate

          sudo systemctl restart "$SERVICE_NAME"

          if ! sudo systemctl is-active --quiet "$SERVICE_NAME"; then
            echo "ERROR: $SERVICE_NAME failed to start."
            sudo journalctl -u "$SERVICE_NAME" -n 100 --no-pager
            exit 1
          fi

          for attempt in $(seq 1 15); do
            if curl \
              --fail \
              --silent \
              --show-error \
              --max-time 5 \
              "$HEALTH_URL" >/dev/null; then
              echo "--- Deployment successfully completed ---"
              exit 0
            fi

            echo "Waiting for application startup ($attempt/15)..."
            sleep 2
          done

          echo "ERROR: Application health check failed."
          sudo journalctl -u "$SERVICE_NAME" -n 100 --no-pager
          exit 1