# Periodic patch-list check; fetch details + version-linked data only when new.
# Repo secrets: CLOUDFLARE_EMAIL, CLOUDFLARE_API_KEY,
# OSS_ACCESS_KEY_ID, OSS_ACCESS_KEY_SECRET
# (STRATZ not required for this tier)

name: web-patch

on:
  schedule:
    # Every 6 hours UTC
    - cron: "0 */6 * * *"
  workflow_dispatch:

jobs:
  refresh:
    runs-on: self-hosted
    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Install deps
        run: |
          set -e
          PYTHON=python3
          command -v python3 >/dev/null || PYTHON=python
          command -v node >/dev/null || { echo "node/npx required for wrangler deploy"; exit 1; }
          "$PYTHON" -m pip install -q -r web/requirements.txt

      - name: Refresh patch tier
        env:
          CLOUDFLARE_EMAIL: ${{ secrets.CLOUDFLARE_EMAIL }}
          CLOUDFLARE_API_KEY: ${{ secrets.CLOUDFLARE_API_KEY }}
          OSS_ACCESS_KEY_ID: ${{ secrets.OSS_ACCESS_KEY_ID }}
          OSS_ACCESS_KEY_SECRET: ${{ secrets.OSS_ACCESS_KEY_SECRET }}
        run: |
          set -e
          PYTHON=python3
          command -v python3 >/dev/null || PYTHON=python
          "$PYTHON" web/refresh_web.py --tier patch