fix: Dockerfile build mem-cli binary + CI builds image on PRs

- rust:1.81 → rust:1-bookworm (track latest stable)
- cargo build --release → cargo build --release -p mem-cli
- Docker build runs on PRs (verify before merge)
- Push only on main/workflow_dispatch

.gitea/workflows/build.yaml

@@ -2,37 +2,19 @@ name: CI
 
 on:
   push:
-    branches:
-      - main
+    branches: [main]
   pull_request:
-    branches:
-      - main
+    branches: [main]
+  workflow_dispatch:
 
 env:
   REGISTRY: forgejo.riotpiao.com
   IMAGE: forgejo.riotpiao.com/rock/poimen-memory
+  DOCKER_HOST: tcp://localhost:2375
 
 jobs:
-  test:
-    name: Test
-    runs-on: rust
-    steps:
-      - name: Install Node.js for actions runtime
-        run: apt-get update && apt-get install -y nodejs
-
-      - name: Checkout code
-        uses: actions/checkout@v4
-
-      - name: Cargo test
-        run: cargo test -p mem-ingest --lib 2>&1 | tail -50 || true
-
-      - name: Cargo check
-        run: cargo check -p mem-ingest 2>&1 | tail -20 || true
-
-  build-push:
-    name: Build & Push Image
-    needs: test
-    if: github.event_name == 'push' && github.ref == 'refs/heads/main'
+  ci:
+    name: CI
     runs-on: rust
     steps:
       - name: Install Node.js and Docker
@@ -43,13 +25,25 @@ jobs:
       - name: Checkout code
         uses: actions/checkout@v4
 
+      - name: Cargo test
+        run: cargo test -p mem-ingest --lib 2>&1 | tail -50 || true
+
+      - name: Cargo check
+        run: cargo check -p mem-ingest 2>&1 | tail -20 || true
+
       - name: Get short SHA
         id: sha
+        run: echo "short_sha=$(git rev-parse --short HEAD)" >> $GITHUB_OUTPUT
+
+      - name: Build Docker image
         run: |
-          SHORT_SHA=$(git rev-parse --short HEAD)
-          echo "short_sha=${SHORT_SHA}" >> $GITHUB_OUTPUT
+          docker build --no-cache \
+            -t "${IMAGE}:${{ steps.sha.outputs.short_sha }}" \
+            -t "${IMAGE}:latest" \
+            -f Dockerfile .
 
       - name: Registry login
+        if: github.event_name == 'push' || github.event_name == 'workflow_dispatch'
         run: |
           echo "${REGISTRY_TOKEN}" | docker login "${REGISTRY}" \
             --username "${REGISTRY_USER}" --password-stdin
@@ -57,19 +51,13 @@ jobs:
           REGISTRY_USER: ${{ secrets.FORGEJO_REGISTRY_USER }}
           REGISTRY_TOKEN: ${{ secrets.FORGEJO_REGISTRY_TOKEN }}
 
-      - name: Build Docker image
-        run: |
-          docker build --no-cache \
-            -t "${IMAGE}:${{ steps.sha.outputs.short_sha }}" \
-            -t "${IMAGE}:latest" \
-            -f Dockerfile \
-            .
-
       - name: Push Docker image
+        if: github.event_name == 'push' || github.event_name == 'workflow_dispatch'
         run: |
           docker push "${IMAGE}:${{ steps.sha.outputs.short_sha }}"
           docker push "${IMAGE}:latest"
-          echo "✓ Image pushed: ${IMAGE}:${{ steps.sha.outputs.short_sha }}"
+          echo "✓ Pushed: ${IMAGE}:${{ steps.sha.outputs.short_sha }}"
 
       - name: Prune unused images
+        if: github.event_name == 'push' || github.event_name == 'workflow_dispatch'
         run: docker image prune -a --force 2>&1 | tail -3 || true

Dockerfile

@@ -1,15 +1,15 @@
 # Multi-stage build for Poimen Memory Service (Rust)
 
 # Stage 1: Builder
-FROM rust:1.81-bookworm as builder
+FROM rust:1-bookworm as builder
 
 WORKDIR /build
 
 # Copy source
 COPY . .
 
-# Build in release mode
-RUN cargo build --release
+# Build the mem binary
+RUN cargo build --release -p mem-cli
 
 # Stage 2: Runtime
 FROM debian:bookworm-slim