on:
  push:
  workflow_dispatch:

permissions:
  contents: write

jobs:
  sync:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout Repository
        uses: actions/checkout@v4

      - name: Setup Node
        uses: actions/setup-node@v4
        with:
          node-version: 20

      - name: Install Dependencies
        run: npm install -g wrangler

      - name: Sync Cloudflare Bindings
        env:
          CLOUDFLARE_API_TOKEN: ${{ secrets.CLOUDFLARE_API_TOKEN }}
        run: |
          AID=$(curl -sX GET "https://api.cloudflare.com/client/v4/accounts" -H "Authorization: Bearer $CLOUDFLARE_API_TOKEN" -H "Content-Type:application/json" | jq -r '.result[0].id')
          if [ -z "$AID" ] || [ "$AID" == "null" ]; then echo "::error::Failed to retrieve Cloudflare Account ID." >&2; exit 1; fi

          wrangler d1 list --json --account-id $AID | jq -c '.[]' | while read -r db; do
            id=$(jq -r .uuid <<< "$db"); name=$(jq -r .name <<< "$db")
            if ! grep -q "$id" wrangler.toml; then
              printf '\n[[d1_databases]]\nbinding = "%s"\ndatabase_name = "%s"\ndatabase_id = "%s"\n' "$(echo "$name"|tr '[:lower:]-' '[:upper:]_')" "$name" "$id" >> wrangler.toml
            fi
          done

          wrangler kv:namespace list --json --account-id $AID | jq -c '.[]' | while read -r kv; do
            id=$(jq -r .id <<< "$kv"); title=$(jq -r .title <<< "$kv")
            if ! grep -q "$id" wrangler.toml; then
              printf '\n[[kv_namespaces]]\nbinding = "%s"\nid = "%s"\n' "$(echo "$title"|tr '[:lower:]-' '[:upper:]_')" "$id" >> wrangler.toml
            fi
          done

      - name: Commit and Push Changes
        uses: stefanzweifel/git-auto-commit-action@v5
        with:
          commit_message: "chore: Sync Cloudflare D1 & KV bindings"
          file_pattern: wrangler.toml