name: Push Nix Cache
description: Push a Nix store path to the Attic binary cache

# Required env var: ATTIC_TOKEN

inputs:
  store-path:
    description: 'Path to the Nix store symlink or derivation to push (e.g. ./result)'
    required: true

  cache-name:
    description: 'Attic cache name'
    required: false
    default: 'ci'

  attic-endpoint:
    description: 'Attic server endpoint'
    required: false
    default: 'https://cache.toph.so'

runs:
  using: composite
  steps:
    - name: Push to Attic cache
      shell: bash
      env:
        ATTIC_TOKEN: ${{ env.ATTIC_TOKEN }}
      run: |
        # Configure attic client with explicit token (not relying on mounted config)
        mkdir -p ~/.config/attic
        cat > ~/.config/attic/config.toml <<EOF
        [servers.cache]
        endpoint = "${{ inputs.attic-endpoint }}"
        token = "${ATTIC_TOKEN}"
        EOF

        # attic push automatically signs and uploads the entire closure
        attic push "${{ inputs.cache-name }}" "${{ inputs.store-path }}"