name: 构建并发布 Docker 镜像

on:
  push:
    branches: [main]
    tags: ['v*.*.*'] # 打 tag 时也触发
  workflow_dispatch:

permissions:
  contents: read
  packages: write

jobs:
  build-and-push:
    runs-on: ubuntu-latest
    steps:
      - name: 检出代码
        uses: actions/checkout@v4
        with:
          fetch-depth: 0

      # 设置 Node.js 环境
      - name: 设置 Node.js
        uses: actions/setup-node@v4
        with:
          node-version: '20'

      # 设置 pnpm
      - name: 设置 pnpm
        uses: pnpm/action-setup@v4
        with:
          version: latest

      # 缓存 pnpm 依赖
      - name: 缓存 pnpm 依赖
        uses: actions/cache@v4
        with:
          path: ~/.pnpm-store
          key: ${{ runner.os }}-pnpm-${{ hashFiles('**/pnpm-lock.yaml') }}
          restore-keys: |
            ${{ runner.os }}-pnpm-

      # 安装依赖
      - name: 安装依赖
        run: pnpm install

      # 构建项目
      - name: 构建项目
        run: pnpm run build

      # 准备 CI 构建环境
      - name: 准备 CI 构建环境
        run: |
          # 使用 CI 专用的 dockerignore
          cp .dockerignore.ci .dockerignore

      # QEMU 用于支持多架构构建（必须）
      - name: 设置 QEMU
        uses: docker/setup-qemu-action@v3

      # Buildx 是目前官方唯一推荐的多架构构建方式
      - name: 设置 Docker Buildx
        uses: docker/setup-buildx-action@v3

      # 登录 GHCR（始终执行）
      - name: 登录 GitHub Container Registry
        uses: docker/login-action@v3
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      # 登录 Docker Hub（只在用户名存在时执行）
      - name: 登录 Docker Hub
        if: vars.DOCKERHUB_USERNAME != '' # 只检查 vars，忽略 secrets
        uses: docker/login-action@v3
        with:
          username: ${{ vars.DOCKERHUB_USERNAME }}
          password: ${{ secrets.DOCKERHUB_TOKEN }}

      # 构建并推送多架构镜像（使用构建产物）
      - name: 构建并推送多架构镜像
        uses: docker/build-push-action@v6
        with:
          context: .
          file: ./Dockerfile.ci
          platforms: linux/amd64,linux/arm64
          push: true
          tags: |
            ghcr.io/${{ github.repository_owner }}/ogame-vue-ts:latest
            ghcr.io/${{ github.repository_owner }}/ogame-vue-ts:${{ github.sha }}
            ${{ vars.DOCKERHUB_USERNAME != '' && format('docker.io/{0}/ogame-vue-ts:latest', vars.DOCKERHUB_USERNAME) || '' }}
            ${{ vars.DOCKERHUB_USERNAME != '' && format('docker.io/{0}/ogame-vue-ts:{1}', vars.DOCKERHUB_USERNAME, github.sha) || '' }}
          cache-from: type=gha
          cache-to: type=gha,mode=max
          outputs: type=image,name=target,annotation-index.org.opencontainers.image.description=OGame Vue Ts