auto-update-db.yml

---
name: Auto Update DB
run-name: ${{ github.event.label.name }} ${{ github.event.issue.title }}
permissions: {}

env:
  PYTHON_VERSION: '3.14'

on:
  issues:
    types:
      - labeled

# GitHub concurrency still cancels pending runs in the same group, so approved
# database writes use explicit wait steps instead.

jobs:
  auto_update_db:
    if: (github.event.label.name == 'request-theme' || github.event.label.name == 'approve-theme')
    runs-on: ubuntu-latest
    env:
      EVENT_ISSUE_NUMBER: ${{ github.event.issue.number }}
      GH_TOKEN: ${{ github.token }}
    permissions:
      actions: read
      contents: read
    steps:
      - name: Check if member
        if: (github.event.label.name == 'approve-theme')
        # if someone, somehow, adds the approval label but isn't a member, then exit
        run: |
          gh api \
            -H "Accept: application/vnd.github+json" \
            "/orgs/${GITHUB_REPOSITORY_OWNER}/members/${GITHUB_ACTOR}" || exit 1

      - name: Checkout
        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0  # v7.0.0

      - name: Wait for approved database updates
        if: (github.event.label.name == 'approve-theme')
        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3  # v9.0.0
        with:
          script: |
            const {waitForWorkflowJobs} = require('./src/github-scripts/workflow-run-queue.js')
            await waitForWorkflowJobs({
              github,
              context,
              workflowId: 'auto-update-db.yml',
              runTitlePrefix: 'approve-theme ',
              markerStepName: 'Wait for approved database updates'
            })
            await waitForWorkflowJobs({
              github,
              context,
              workflowId: 'update-pages.yml',
              ignoredEvents: ['pull_request'],
              jobName: 'update'
            })

      - name: Checkout
        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0  # v7.0.0
        with:
          ref: database
          path: database
          persist-credentials: false  # otherwise, the token used is the GITHUB_TOKEN, instead of your personal token
          fetch-depth: 0  # otherwise, will fail to push refs to dest repo
          filter: blob:none  # full history for rebase, but skip historical file blobs

      - name: Setup Python
        uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1  # v6.3.0
        with:
          python-version: ${{ env.PYTHON_VERSION }}

      - name: Install uv
        uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990  # v8.3.2
        with:
          enable-cache: true

      - name: Setup Python Dependencies
        run: uv sync --locked --python "${PYTHON_VERSION}" --no-python-downloads

      - name: Parse Issue
        uses: stefanbuck/github-issue-parser@cb6e97157cbf851e3a393ff8d57c93a484cc323f  # v3.2.5
        id: issue-parser
        with:
          template-path: .github/ISSUE_TEMPLATE/theme.yml

      - name: Crease JSON
        env:
          JSON_STRING: ${{ steps.issue-parser.outputs.jsonString }}
        run: echo "${JSON_STRING}" > submission.json

      - name: Check Queue Eligibility
        id: queue
        if: github.event.label.name == 'request-theme'
        env:
          ISSUE_AUTHOR_USER_ID: ${{ github.event.issue.user.id }}
        run: uv run --no-sync python -m src.queue_eligibility

      - name: Update
        id: update
        env:
          ISSUE_AUTHOR_LOGIN: ${{ github.event.issue.user.login }}
          ISSUE_AUTHOR_USER_ID: ${{ github.event.issue.user.id }}
          TMDB_API_KEY_V3: ${{ secrets.TMDB_API_KEY_V3 }}
          TWITCH_CLIENT_ID: ${{ secrets.TWITCH_CLIENT_ID }}
          TWITCH_CLIENT_SECRET: ${{ secrets.TWITCH_CLIENT_SECRET }}
          YOUTUBE_API_KEY: ${{ secrets.YOUTUBE_API_KEY }}
        run: uv run --no-sync python -u ./src/updater.py --issue_update

      - name: Set Outputs
        id: outputs
        if: always()
        run: |
          # if exceptions.md file exists, then set output to true
          exception=false
          if [ -f exceptions.md ]; then
            exception=true
          fi
          echo "exception=${exception}" >> "${GITHUB_OUTPUT}"

          # if duplicate.md file exists, then set output to true
          duplicate=false
          if [ -f duplicate.md ]; then
            duplicate=true
          fi
          echo "duplicate=${duplicate}" >> "${GITHUB_OUTPUT}"

          # if auto_close.md file exists, then set output to true
          auto_close=false
          if [ -f auto_close.md ]; then
            auto_close=true
          fi
          echo "auto_close=${auto_close}" >> "${GITHUB_OUTPUT}"

      - name: Git Diff
        id: diff
        if: always()
        working-directory: database
        run: |
          echo "::group::issue_comment"
          git add .
          {
            echo ""
            echo "\`\`\`diff"
            git diff --cached
            echo "\`\`\`"
            echo ""
            echo ""
            cat ../docs/botCommands.md
          } >> ../comment.md
          cat ../comment.md
          echo "::endgroup::"

          echo "::group::issue_title"
          cat ../title.md
          echo "issue_title=$(cat ../title.md)" >> "${GITHUB_OUTPUT}"
          echo "::endgroup::"

      - name: Update Issue Title
        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3  # v9.0.0
        env:
          ISSUE_TITLE: ${{ steps.diff.outputs.issue_title }}
        with:
          github-token: ${{ secrets.GH_BOT_TOKEN }}
          script: |
            const {run} = require('./src/github-scripts/update-issue-title.js')
            await run({github, context})

      - name: Update Labels
        id: labels
        if: always()
        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3  # v9.0.0
        env:
          AUTO_CLOSE: ${{ steps.outputs.outputs.auto_close }}
          DUPLICATE: ${{ steps.outputs.outputs.duplicate }}
          EXCEPTION: ${{ steps.outputs.outputs.exception }}
        with:
          github-token: ${{ secrets.GH_BOT_TOKEN }}
          result-encoding: string
          script: |
            const {run} = require('./src/github-scripts/update-labels.js')
            return await run({github, context})

      - name: Issue comment
        if: always()
        uses: mshick/add-pr-comment@ec328af66588ab8f77cdeb2c264f14aba45bbf59  # v3.12
        with:
          repo-token: ${{ secrets.GH_BOT_TOKEN }}
          message-path: comment.md

      - name: Queue Eligible Submission
        if:
          (github.event.label.name == 'request-theme') &&
          steps.outputs.outputs.exception == 'false' &&
          steps.outputs.outputs.duplicate == 'false' &&
          steps.outputs.outputs.auto_close == 'false' &&
          steps.queue.outputs.queue_eligible == 'true'
        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3  # v9.0.0
        with:
          github-token: ${{ secrets.GH_BOT_TOKEN }}
          script: |
            const {run} = require('./src/github-scripts/queue-eligible-submission.js')
            await run({github, context})

      - name: Auto Close
        if:
          (github.event.label.name == 'request-theme' || github.event.label.name == 'approve-theme') &&
          steps.outputs.outputs.auto_close == 'true'
        env:
          GH_TOKEN: ${{ secrets.GH_BOT_TOKEN }}
        run: |
          comment=$(cat auto_close.md)
          close_reason="not planned"
          lock_reason="resolved"

          gh issue close "${EVENT_ISSUE_NUMBER}" --comment "${comment}" --reason "${close_reason}"
          gh issue lock "${EVENT_ISSUE_NUMBER}" --reason "${lock_reason}"

      - name: GitHub Commit & Push
        if:
          (github.event.label.name == 'approve-theme') &&
          steps.outputs.outputs.exception == 'false' &&
          steps.outputs.outputs.auto_close == 'false' &&
          steps.labels.outputs.result == 'true'
        uses: actions-js/push@5a7cbd780d82c0c937b5977586e641b2fd94acc5  # v1.5
        with:
          author_email: ${{ secrets.GH_BOT_EMAIL }}
          author_name: ${{ vars.GH_BOT_NAME }}
          branch: database
          directory: database
          github_token: ${{ secrets.GH_BOT_TOKEN }}
          message: 'chore: resolves #${{ github.event.issue.number }}'
          rebase: true

      - name: Close Issue
        if:
          (github.event.label.name == 'approve-theme') &&
          steps.outputs.outputs.exception == 'false' &&
          steps.outputs.outputs.auto_close == 'false' &&
          steps.labels.outputs.result == 'true'
        env:
          GH_TOKEN: ${{ secrets.GH_BOT_TOKEN }}
        run: |
          comment="This theme has been added/updated and will be available on the next daily scheduled update."
          close_reason="completed"
          lock_reason="resolved"

          gh issue close "${EVENT_ISSUE_NUMBER}" --comment "${comment}" --reason "${close_reason}"
          gh issue lock "${EVENT_ISSUE_NUMBER}" --reason "${lock_reason}"

      - name: Label next issue
        if:
          (github.event.label.name == 'approve-theme') &&
          steps.outputs.outputs.exception == 'false'
        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3  # v9.0.0
        with:
          github-token: ${{ secrets.GH_BOT_TOKEN }}
          script: |
            const {run} = require('./src/github-scripts/label-next-issue.js')
            await run({github, context})