name: audit

on:
  push:
  workflow_dispatch:

jobs:
  audit:
    runs-on: debian

    steps:
      - name: Nuclear fix - absolute path control
        run: |
          echo "=== AUDIT NUCLEAR FIX ==="
          echo "Current PWD: $(pwd)"
          echo "Forcing absolute workspace path..."
          
          # Clean and create absolute workspace
          rm -rf /opt/gitea-runner/workspace
          mkdir -p /opt/gitea-runner/workspace
          cd /opt/gitea-runner/workspace
          
          echo "Workspace PWD: $(pwd)"
          echo "Cloning repository..."
          git clone https://gitea.bubuit.net/oib/aitbc.git repo
          
          cd repo
          echo "Repo PWD: $(pwd)"
          echo "Files in repo:"
          ls -la
          
          echo "=== PROJECT TYPE CHECK ==="
          if [ -f "package.json" ]; then
            echo "✅ Node.js project detected!"
            echo "Package.json content:"
            cat package.json
            echo "=== NPM INSTALL ==="
            npm install --legacy-peer-deps
            echo "✅ Running npm audit..."
            npm audit || true
          elif [ -f "pyproject.toml" ]; then
            echo "✅ Python project detected!"
            echo "PyProject.toml content:"
            head -10 pyproject.toml
            echo "=== PYTHON DEPENDENCIES ==="
            if command -v poetry >/dev/null 2>&1; then
              echo "Poetry found, installing dependencies..."
              poetry install
            else
              echo "Installing poetry..."
              pip install poetry
              poetry install
            fi
            echo "✅ Python dependencies installed!"
          else
            echo "❌ No supported project type found!"
            echo "Looking for package.json or pyproject.toml..."
            find . -name "package.json" -o -name "pyproject.toml" 2>/dev/null || echo "No project files found"
            exit 1
          fi