FabledScribe/.forgejo/workflows/ci.yml

# CI runs first; build only proceeds if all checks pass.
#
# Push to dev:  typecheck + lint + test → build :dev + :<sha>
# Push to main: typecheck + lint + test → build :latest + :<sha>
# Tag v*:       typecheck + lint + test → build :latest + :<sha> + :<version>
# Pull request: typecheck + lint + test only (no build)
#
# Required secrets (repo → Settings → Secrets → Actions):
#   REGISTRY_USER   — your Forgejo username
#   REGISTRY_TOKEN  — Forgejo PAT with write:packages scope
name: CI & Build

on:
  push:
    branches: [main, dev]
    tags: ["v*"]
    paths:
      - "src/**"
      - "frontend/**"
      - "tests/**"
      - "pyproject.toml"
      - "alembic/**"
      - "alembic.ini"
      - "Dockerfile"
      - "assets/**"
      - ".forgejo/workflows/ci.yml"
  pull_request:
    paths:
      - "src/**"
      - "frontend/**"
      - "tests/**"
      - "pyproject.toml"
      - ".forgejo/workflows/ci.yml"

env:
  REGISTRY: git.fabledsword.com
  IMAGE: git.fabledsword.com/bvandeusen/fabledassistant

jobs:
  typecheck:
    name: TypeScript typecheck
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v6

      - uses: actions/setup-node@v6
        with:
          node-version: "20"
          cache: "npm"
          cache-dependency-path: frontend/package-lock.json

      - name: Install dependencies
        run: npm ci
        working-directory: frontend

      - name: Type check
        run: npx vue-tsc --noEmit
        working-directory: frontend

  lint:
    name: Python lint
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v6

      - name: Install ruff
        run: pip install ruff

      - name: Lint
        run: ruff check src/

  test:
    name: Python tests
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v6

      # The act runner base image ships Ubuntu 22.04 with Python 3.10.
      # Our package requires 3.12, so install it from the deadsnakes PPA.
      - name: Install Python 3.12
        run: |
          apt-get update -qq
          apt-get install -y -qq software-properties-common
          add-apt-repository -y ppa:deadsnakes/ppa
          apt-get update -qq
          apt-get install -y -qq python3.12 python3.12-dev python3.12-venv python3-pip git
          python3.12 -m ensurepip --upgrade

      - name: Install package with dev deps
        run: python3.12 -m pip install -e ".[dev]"

      - name: Run tests
        run: python3.12 -m pytest tests/ -v

  build:
    name: Build & push image
    needs: [typecheck, lint, test]
    # Only build on branch/tag pushes — not on pull requests
    if: github.event_name == 'push'
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v6

      - name: Generate image tags
        id: tags
        run: |
          TAGS="${{ env.IMAGE }}:${{ github.sha }}"
          if [[ "${{ github.ref }}" == "refs/heads/main" ]]; then
            TAGS="$TAGS,${{ env.IMAGE }}:latest"
          elif [[ "${{ github.ref }}" == "refs/heads/dev" ]]; then
            TAGS="$TAGS,${{ env.IMAGE }}:dev"
          elif [[ "${{ github.ref }}" == refs/tags/* ]]; then
            TAGS="$TAGS,${{ env.IMAGE }}:latest,${{ env.IMAGE }}:${{ github.ref_name }}"
          fi
          echo "value=$TAGS" >> $GITHUB_OUTPUT

      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v4

      - name: Log in to Forgejo registry
        uses: docker/login-action@v4
        with:
          registry: ${{ env.REGISTRY }}
          username: ${{ secrets.REGISTRY_USER }}
          password: ${{ secrets.REGISTRY_TOKEN }}

      - name: Build and push
        uses: docker/build-push-action@v7
        with:
          context: .
          push: true
          tags: ${{ steps.tags.outputs.value }}
          cache-from: type=registry,ref=${{ env.IMAGE }}:cache
          cache-to: type=registry,ref=${{ env.IMAGE }}:cache,mode=max