GitHub Actions Integration

name: Docs Lint

on:
  pull_request:
    paths:
      - "**.md"
      - "**.mdx"

permissions:
  contents: read
  pull-requests: write

jobs:
  lint-docs:
    runs-on: ubuntu-latest
    env:
      TECHWRIT_API_KEY: ${{ secrets.TECHWRIT_API_KEY }}
      MODE: ${{ vars.TECHWRIT_MODE || 'style-check' }}
      DOC_TYPE: ${{ vars.TECHWRIT_DOC_TYPE || '' }}
      AUDIENCE: ${{ vars.TECHWRIT_AUDIENCE || '' }}
      FAIL_ON_CRITICAL: ${{ vars.TECHWRIT_FAIL_ON_CRITICAL || 'false' }}
    steps:
      - name: Checkout
        uses: actions/checkout@v4
        with:
          fetch-depth: 0

      - name: Get changed doc files
        id: changed
        run: |
          FILES=$(git diff --name-only origin/${{ github.base_ref }}...HEAD \
            -- '*.md' '*.mdx' || true)
          echo "files<<EOF" >> "$GITHUB_OUTPUT"
          echo "$FILES" >> "$GITHUB_OUTPUT"
          echo "EOF" >> "$GITHUB_OUTPUT"
          echo "count=$(echo "$FILES" | grep -c '[^[:space:]]' || true)" >> "$GITHUB_OUTPUT"

      - name: Lint docs
        if: steps.changed.outputs.count != '0'
        env:
          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        run: |
          COMMENT_BODY="## TechWrit AI — Doc Review"$'\n\n'
          FOUND_CRITICAL=false
          FILE_COUNT=0

          while IFS= read -r FILE; do
            [ -z "$FILE" ] && continue
            [ ! -f "$FILE" ] && continue
            FILE_COUNT=$((FILE_COUNT + 1))

            INPUT=$(cat "$FILE")

            # Build JSON payload safely with jq
            PAYLOAD=$(jq -n \
              --arg mode "$MODE" \
              --arg input "$INPUT" \
              --arg docType "$DOC_TYPE" \
              --arg audience "$AUDIENCE" \
              '{mode: $mode, input: $input}
               + (if $docType != "" then {docType: $docType} else {} end)
               + (if $audience != "" then {audience: $audience} else {} end)')

            # Call API with retry on 429
            HTTP_CODE=""
            for ATTEMPT in 1 2 3; do
              HTTP_CODE=$(curl -s -o /tmp/twai_response.json -w "%{http_code}" \
                -X POST https://techwrit.ai/api/v1/analyze \
                -H "X-Authorization: Bearer $TECHWRIT_API_KEY" \
                -H "Content-Type: application/json" \
                -d "$PAYLOAD")

              if [ "$HTTP_CODE" = "429" ] && [ "$ATTEMPT" -lt 3 ]; then
                echo "Rate limited on $FILE, waiting 30s (attempt $ATTEMPT/3)..."
                sleep 30
              else
                break
              fi
            done

            if [ "$HTTP_CODE" = "200" ]; then
              RESULT=$(jq -r '.content' /tmp/twai_response.json)

              if echo "$RESULT" | grep -qi "critical"; then
                FOUND_CRITICAL=true
              fi

              COMMENT_BODY+="<details>"$'\n'
              COMMENT_BODY+="<summary><strong>$FILE</strong></summary>"$'\n\n'
              COMMENT_BODY+="$RESULT"$'\n\n'
              COMMENT_BODY+="</details>"$'\n\n'

            elif [ "$HTTP_CODE" = "429" ]; then
              COMMENT_BODY+="<details>"$'\n'
              COMMENT_BODY+="<summary><strong>$FILE</strong> — skipped (rate limit)</summary>"$'\n\n'
              COMMENT_BODY+="Monthly quota reached. Upgrade at [techwrit.ai/pricing](https://techwrit.ai/pricing)."$'\n\n'
              COMMENT_BODY+="</details>"$'\n\n'

            elif [ "$HTTP_CODE" = "403" ]; then
              echo "::error::TechWrit AI API requires a Pro or Team subscription. Upgrade at https://techwrit.ai/pricing"
              exit 1

            elif [ "$HTTP_CODE" = "401" ]; then
              echo "::error::Invalid TECHWRIT_API_KEY. Check your repository secret at Settings > Secrets and variables > Actions."
              exit 1

            else
              ERROR=$(jq -r '.error.message // "Unknown error"' /tmp/twai_response.json 2>/dev/null || echo "HTTP $HTTP_CODE")
              COMMENT_BODY+="<details>"$'\n'
              COMMENT_BODY+="<summary><strong>$FILE</strong> — error ($HTTP_CODE)</summary>"$'\n\n'
              COMMENT_BODY+="$ERROR"$'\n\n'
              COMMENT_BODY+="</details>"$'\n\n'
            fi

            # Brief pause between files
            sleep 2

          done <<< "${{ steps.changed.outputs.files }}"

          COMMENT_BODY+="---"$'\n'
          COMMENT_BODY+="_Powered by [TechWrit AI](https://techwrit.ai) | Mode: ${MODE}_"

          # Find existing bot comment (if any) and update it, otherwise post new
          PR_NUMBER=${{ github.event.pull_request.number }}
          EXISTING=$(gh api "/repos/${{ github.repository }}/issues/${PR_NUMBER}/comments" \
            --jq '.[] | select(.body | startswith("## TechWrit AI")) | .id' \
            2>/dev/null | head -1)

          if [ -n "$EXISTING" ]; then
            gh api --method PATCH \
              "/repos/${{ github.repository }}/issues/comments/${EXISTING}" \
              -f body="$COMMENT_BODY"
          else
            gh pr comment "$PR_NUMBER" --body "$COMMENT_BODY"
          fi

          # Fail if critical issues found and fail mode is on
          if [ "$FAIL_ON_CRITICAL" = "true" ] && [ "$FOUND_CRITICAL" = "true" ]; then
            echo "::error::Critical documentation issues found. See the PR comment for details."
            exit 1
          fi

on:
  pull_request:
    paths:
      - "docs/**.md"
      - "content/**.mdx"