name: Deploy Foundry Core
on:
  push:
    branches: [main]
    paths:
      - 'cmd/**'
      - 'internal/**'
      - 'go.mod'
      - 'go.sum'
      - 'deploy/**'
      - '.gitea/workflows/deploy.yml'

concurrency:
  group: foundry-core-main-deploy
  cancel-in-progress: false

jobs:
  deploy:
    if: gitea.ref == 'refs/heads/main' && gitea.event_name == 'push'
    runs-on: ces-control
    timeout-minutes: 15
    steps:
      - uses: actions/checkout@v4
      - uses: actions/setup-go@v5
        with:
          go-version-file: go.mod
          cache: false
      - name: Verify and build
        run: |
          set -eu
          test -z "$(gofmt -l cmd internal)"
          go test -mod=readonly ./...
          CGO_ENABLED=0 go build -mod=readonly -o bin/foundry ./cmd/foundry
      - name: Deploy and verify OAuth entry
        env:
          GOOGLE_CLIENT_ID: ${{ secrets.GOOGLE_CLIENT_ID }}
          GOOGLE_CLIENT_SECRET: ${{ secrets.GOOGLE_CLIENT_SECRET }}
          FOUNDRY_PROJECTS: ${{ vars.FOUNDRY_PROJECTS }}
        run: bash deploy/release.sh bin/foundry