name: Repository Cleanup

on:
  schedule:
    - cron: "0 5 * * 1"
  workflow_dispatch:

jobs:
  cleanup-report:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Report generated or sensitive tracked files
        shell: bash
        run: |
          git ls-files | grep -E '(^opera-cache-cleaner-extension/dist/|^opera-cache-cleaner-extension/build/|^opera-cache-cleaner-extension/out/|\.log$|\.tmp$|\.env|\.pem$|\.key$|\.token$)' && {
            echo "Tracked generated or sensitive-looking files found."
            exit 1
          } || true

      - name: Report large tracked files
        shell: bash
        run: |
          large_files="$(git ls-files -z | xargs -0 du -k | awk '$1 > 1024 { print }')"
          if [ -n "$large_files" ]; then
            echo "$large_files"
            echo "Tracked files above 1 MiB should be reviewed."
            exit 1
          fi