name: deploy-update

on:
  push:
    branches:
      - production
  workflow_dispatch:

concurrency:
  group: deploy-update-${{ github.ref_name }}
  cancel-in-progress: false

permissions:
  contents: read

jobs:
  deploy:
    if: github.repository == 'anomalyco/opencode' && github.ref_name == 'production'
    runs-on: blacksmith-4vcpu-ubuntu-2404
    environment: production
    steps:
      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0

      - uses: ./.github/actions/setup-bun

      - name: Typecheck
        working-directory: services/update
        run: bun run typecheck:tsc

      - name: Deploy
        working-directory: services/update
        run: bun run deploy
        env:
          CLOUDFLARE_API_TOKEN: ${{ secrets.CLOUDFLARE_API_TOKEN }}