sync-permissions.yml

# ================================
# GitHub Actions: Sync Permissions
# ================================
# Automatically syncs permissions.yaml to Redis on changes

name: Sync Permissions to Redis

on:
  push:
    paths:
      - 'permissions.yaml'
    branches:
      - main
      - master
  
  # Allow manual trigger
  workflow_dispatch:

jobs:
  sync:
    runs-on: ubuntu-latest
    
    steps:
      - name: Checkout repository
        uses: actions/checkout@v4

      - name: Setup Node.js
        uses: actions/setup-node@v4
        with:
          node-version: '20'
          cache: 'npm'

      - name: Install dependencies
        run: npm ci

      - name: Validate permissions.yaml
        run: |
          echo "Validating permissions.yaml..."
          node -e "
            const { validatePermissionsFile } = require('./src/services/syncService');
            const result = validatePermissionsFile();
            if (!result.valid) {
              console.error('Validation failed:', result.errors);
              process.exit(1);
            }
            console.log('Validation passed!');
          "

      - name: Sync to Redis
        run: npm run sync-permissions
        env:
          REDIS_URL: ${{ secrets.REDIS_URL }}

      - name: Notify on success
        if: success()
        run: echo "✅ Permissions synced successfully!"

      - name: Notify on failure
        if: failure()
        run: echo "❌ Permissions sync failed!"