name: Validate game templates

# Push-only on purpose: this repo is public, and a pull_request trigger would run a fork's
# version of this workflow on our self-hosted runner. PRs from branches in this repo are
# still checked through their push.
on:
  push:
  workflow_dispatch:

env:
  PANEL_WEBHOOK_URL: https://api.gbrhosting.com/api/v1/webhooks/gitea

jobs:
  validate:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout Code
        uses: actions/checkout@v4

      - name: Set up Go
        uses: actions/setup-go@v5
        with:
          go-version-file: go.mod

      - name: Validate
        run: go run ./cmd/gbrgames validate

      # main is the source of truth: send every template to the panel, which upserts them
      # (new games arrive disabled). Unlike the node-agent notify, a failure here fails the run,
      # because the panel would otherwise keep serving the previous templates silently.
      - name: Publish to Control Panel
        if: github.ref == 'refs/heads/main'
        env:
          PANEL_WEBHOOK_SECRET: ${{ secrets.PANEL_WEBHOOK_SECRET }}
        run: |
          if [ -z "$PANEL_WEBHOOK_SECRET" ]; then
            echo "::error::PANEL_WEBHOOK_SECRET is not set; templates were not published"
            exit 1
          fi
          go run ./cmd/gbrgames export -repo "${{ github.repository }}" -commit "${{ github.sha }}" -out payload.json
          curl -sS --fail-with-body --max-time 30 --retry 3 --retry-delay 10 \
            -X POST "${{ env.PANEL_WEBHOOK_URL }}" \
            -H "Content-Type: application/json" \
            -H "X-Gitea-Token: $PANEL_WEBHOOK_SECRET" \
            -H "X-GBR-Event: games_published" \
            --data-binary @payload.json