name: Deploy

on:
  push:
    branches: [main]

jobs:
  deploy:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4

      - uses: actions/setup-go@v5
        with:
          go-version-file: backend/go.mod
          cache-dependency-path: backend/go.sum

      - name: Go tests
        working-directory: backend
        run: go test ./...

      - uses: subosito/flutter-action@v2
        with:
          cache: true

      - name: Flutter tests
        working-directory: client
        run: flutter test

      - name: Build backend (linux/amd64)
        working-directory: backend
        run: GOOS=linux GOARCH=amd64 CGO_ENABLED=0 go build -o jiu-server .

      - name: Build Flutter Web
        working-directory: client
        run: flutter build web --release --dart-define=BASE_URL=https://jiu.51yanmei.com --dart-define=PUBLIC_URL=https://jiu.51yanmei.com

      - name: Setup SSH
        run: |
          mkdir -p ~/.ssh
          echo "${{ secrets.EC2_SSH_KEY }}" > ~/.ssh/ec2.pem
          chmod 600 ~/.ssh/ec2.pem
          ssh-keyscan -H ${{ secrets.EC2_HOST }} >> ~/.ssh/known_hosts

      - name: Deploy to EC2
        env:
          EC2_HOST: ${{ secrets.EC2_HOST }}
          EC2_USER: ${{ secrets.EC2_USER }}
        run: |
          scp -i ~/.ssh/ec2.pem backend/jiu-server ${EC2_USER}@${EC2_HOST}:/tmp/jiu-server
          rsync -avz --delete -e "ssh -i ~/.ssh/ec2.pem" \
            client/build/web/ ${EC2_USER}@${EC2_HOST}:/tmp/jiu-web-new/
          ssh -i ~/.ssh/ec2.pem ${EC2_USER}@${EC2_HOST} << 'ENDSSH'
            sudo systemctl stop jiu
            cp /tmp/jiu-server /opt/jiu/backend/jiu-server
            chmod +x /opt/jiu/backend/jiu-server
            sudo systemctl start jiu
            for i in $(seq 1 30); do
              curl -sf http://localhost:8080/health && break
              sleep 2
            done
            rm -rf /opt/jiu/web-old
            mv /opt/jiu/web /opt/jiu/web-old 2>/dev/null || true
            mv /tmp/jiu-web-new /opt/jiu/web
            sudo nginx -s reload
          ENDSSH

      - name: Cleanup SSH key
        if: always()
        run: rm -f ~/.ssh/ec2.pem