name: Release (GoReleaser)

on:
  push:
    tags:
      - 'v*'

permissions:
  contents: write
  packages: write

jobs:
  goreleaser:
    runs-on: ubuntu-latest
    env:
      # Use the built-in GITHUB_TOKEN by default for GitHub API operations.
      # If you need to provide a PAT with elevated permissions, add a CHARON_TOKEN secret
      # at the repo or organization level and update the env here accordingly.
      GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
    steps:
      - name: Checkout
        uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
        with:
          fetch-depth: 0

      - name: Set up Go
        uses: actions/setup-go@4dc6199c7b1a012772edbd06daecab0f50c9053c # v6
        with:
          go-version: '1.25.4'

      - name: Set up Node.js
        uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6
        with:
          node-version: '24.11.1'

      - name: Build Frontend
        working-directory: frontend
        run: |
          # Inject version into frontend build from tag (if present)
          VERSION=$${GITHUB_REF#refs/tags/}
          echo "VITE_APP_VERSION=$$VERSION" >> $GITHUB_ENV
          npm ci
          npm run build

      - name: Install Cross-Compilation Tools (Zig)
        uses: goto-bus-stop/setup-zig@v2
        with:
          version: 0.13.0

      # GITHUB_TOKEN is set from CHARON_TOKEN or CPMP_TOKEN (fallback), defaulting to GITHUB_TOKEN

      - name: Run GoReleaser
        uses: goreleaser/goreleaser-action@e435ccd777264be153ace6237001ef4d979d3a7a # v6
        with:
          distribution: goreleaser
          version: latest
          args: release --clean
        # CGO settings are handled in .goreleaser.yaml via Zig