name: Codex Template Compliance

on:
  push:
    branches: [main]
  pull_request:
  workflow_dispatch:

jobs:
  compliance:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Required files
        run: |
          test -f AGENTS.md
          test -f .codex/project.md
          test -f README.md
          test -f SECURITY.md
          test -f CHANGELOG.md
          test -f docs/release-checklist.md
          test -f docs/security-review.md
          test -f docs/agent-handoff.md

      - name: Placeholder scan
        run: |
          if rg "PROJECT_NAME|PROJECT_DESCRIPTION|REPOSITORY_OWNER|REPOSITORY_NAME|PACKAGE_NAME|ARTIFACT_NAME|ARTIFACT_OUTPUT_DIRECTORY|AUTHOR_NAME|PROJECT_STACK|DOWNLOAD_URL|CI_URL|RELEASES_URL|BUILD_COMMAND|TEST_COMMAND|LINT_COMMAND|AUDIT_COMMAND|README_COMMAND|INSTALL_COMMAND|DEV_COMMAND|PACKAGE_MANAGER|PROJECT_VERSION|COMMIT_OR_VERSION" .; then
            echo "Unresolved Codex kit placeholder found"
            exit 1
          fi

      - name: Lightweight diff hygiene
        run: git diff --check