name: Template Compliance

on:
  push:
    branches:
      - main
      - master
  pull_request:
  workflow_dispatch:

jobs:
  template-compliance:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Verify Codex baseline files
        shell: bash
        run: |
          test -f opera-cache-cleaner-extension/AGENTS.md
          test -f opera-cache-cleaner-extension/.codex/project.md
          test -f opera-cache-cleaner-extension/SECURITY.md
          test -f opera-cache-cleaner-extension/CHANGELOG.md
          test -f opera-cache-cleaner-extension/docs/security-review.md
          test -f opera-cache-cleaner-extension/docs/release-checklist.md
          test -f .gitea/workflows/build.yml
          test -f .gitea/workflows/security-scan.yml
          test -f .gitea/workflows/repo-cleanup.yml
          test -f .gitea/workflows/release-dry-run.yml

      - name: Check for unresolved template placeholders
        shell: bash
        run: |
          if grep -RInE 'PROJECT[_]NAME|PROJECT[_]DESCRIPTION|REPOSITORY[_]OWNER|REPOSITORY[_]NAME|PACKAGE[_]NAME|ARTIFACT[_]NAME|ARTIFACT[_]OUTPUT[_]DIRECTORY|BUILD[_]COMMAND|TEST[_]COMMAND|LINT[_]COMMAND|AUDIT[_]COMMAND' opera-cache-cleaner-extension --exclude-dir=.git --exclude-dir=dist; then
            echo "Unresolved template placeholders found."
            exit 1
          fi