name: build-and-push

on:
  push:
    branches:
      - main
      - high-performance

jobs:
  detect-changes:
    runs-on: ubuntu-latest
    outputs:
      services: ${{ steps.detect.outputs.services }}
      has_changes: ${{ steps.detect.outputs.has_changes }}
    steps:
      - name: Checkout
        uses: actions/checkout@v4
        with:
          fetch-depth: 0

      - name: Detect changed services
        id: detect
        run: |
          set -euo pipefail

          if git rev-parse --verify HEAD^ >/dev/null 2>&1; then
            CHANGED_FILES=$(git diff --name-only HEAD^ HEAD)
          else
            CHANGED_FILES=$(git ls-files)
          fi

          echo "Changed files:"
          echo "$CHANGED_FILES"

          ALL_SERVICES='["gateway","users","companies","jobs","leads","job-seekers","customers","payments","employees","photographers","makeup-artists","tutors","developers","video-editors","graphic-designers","social-media-managers","fitness-trainers","catering-services","ugc-content-creators","cron"]'

          # Build everything for workflow/docker/shared backend changes.
          if echo "$CHANGED_FILES" | grep -Eq '^(\.gitea/workflows/|Dockerfile|Dockerfile\.|Cargo\.toml|Cargo\.lock|crates/|scripts/)'; then
            echo "services=$ALL_SERVICES" >> "$GITHUB_OUTPUT"
            echo "has_changes=true" >> "$GITHUB_OUTPUT"
            exit 0
          fi

          SERVICES='[]'
          add_service() {
            local svc="$1"
            SERVICES=$(echo "$SERVICES" | jq --arg s "$svc" 'if index($s) then . else . + [$s] end')
          }

          while IFS= read -r f; do
            case "$f" in
              apps/gateway/*) add_service "gateway" ;;
              apps/users/*) add_service "users" ;;
              apps/companies/*) add_service "companies" ;;
              apps/jobs/*) add_service "jobs" ;;
              apps/leads/*) add_service "leads" ;;
              apps/job_seekers/*) add_service "job-seekers" ;;
              apps/customers/*) add_service "customers" ;;
              apps/payments/*) add_service "payments" ;;
              apps/employees/*) add_service "employees" ;;
              apps/photographers/*) add_service "photographers" ;;
              apps/makeup_artists/*) add_service "makeup-artists" ;;
              apps/tutors/*) add_service "tutors" ;;
              apps/developers/*) add_service "developers" ;;
              apps/video_editors/*) add_service "video-editors" ;;
              apps/graphic_designers/*) add_service "graphic-designers" ;;
              apps/social_media_managers/*) add_service "social-media-managers" ;;
              apps/fitness_trainers/*) add_service "fitness-trainers" ;;
              apps/catering_services/*) add_service "catering-services" ;;
              apps/ugc_content_creators/*) add_service "ugc-content-creators" ;;
              apps/cron/*) add_service "cron" ;;
            esac
          done <<< "$CHANGED_FILES"

          if [ "$(echo "$SERVICES" | jq 'length')" -eq 0 ]; then
            echo "services=[]" >> "$GITHUB_OUTPUT"
            echo "has_changes=false" >> "$GITHUB_OUTPUT"
          else
            echo "services=$SERVICES" >> "$GITHUB_OUTPUT"
            echo "has_changes=true" >> "$GITHUB_OUTPUT"
          fi

  build:
    needs: detect-changes
    if: needs.detect-changes.outputs.has_changes == 'true'
    runs-on: ubuntu-latest
    env:
      DOCKER_HOST: unix:///var/run/docker.sock
    strategy:
      fail-fast: false
      matrix:
        service: ${{ fromJson(needs.detect-changes.outputs.services) }}
    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Set up Docker Buildx
        run: |
          docker buildx create --use || true
          docker buildx inspect --bootstrap

      - name: Login to Registry
        env:
          REGISTRY_HOSTPORT: ${{ secrets.REGISTRY_HOSTPORT }}
          REGISTRY_USERNAME: ${{ secrets.REGISTRY_USERNAME }}
          REGISTRY_PASSWORD: ${{ secrets.REGISTRY_PASSWORD }}
        run: |
          set -euo pipefail
          test -n "$REGISTRY_HOSTPORT"
          echo "$REGISTRY_PASSWORD" | docker login "$REGISTRY_HOSTPORT" -u "$REGISTRY_USERNAME" --password-stdin

      - name: Build and push
        env:
          REGISTRY_HOSTPORT: ${{ secrets.REGISTRY_HOSTPORT }}
        run: |
          docker buildx build --push \
            -f Dockerfile.simple \
            --build-arg SERVICE_NAME=${{ matrix.service }} \
            --cache-from type=registry,ref=$REGISTRY_HOSTPORT/nxtgauge-rust-${{ matrix.service }}:buildcache \
            --cache-to type=registry,ref=$REGISTRY_HOSTPORT/nxtgauge-rust-${{ matrix.service }}:buildcache,mode=max \
            -t "$REGISTRY_HOSTPORT/nxtgauge-rust-${{ matrix.service }}:${{ gitea.sha }}" \
            -t "$REGISTRY_HOSTPORT/nxtgauge-rust-${{ matrix.service }}:high-performance-latest" \
            .