codeboarding-sync.yml

name: CodeBoarding sync

on:
  push:
    branches: ['main']
    # Loop guard: don't re-trigger on the files this workflow itself commits.
    # List generated files only: user-authored scope configuration must still trigger
    # regeneration, while a merged sync PR must not trigger a loop.
    paths-ignore:
      - '.codeboarding/*.md'
      - '.codeboarding/analysis.json'
      - '.codeboarding/fingerprint.json'
      - '.codeboarding/static_analysis.pkl'
      - '.codeboarding/static_analysis.sha'
      - '.codeboarding/codeboarding_version.json'
      - '.codeboarding/health/health_report.json'
      - 'docs/development/architecture.md'
  workflow_dispatch:
    inputs:
      force_full:
        description: 'Ignore the committed baseline and rebuild it from scratch (full analysis).'
        type: boolean
        required: false
        default: false

permissions:
  contents: write   # commit the generated baseline + docs to the branch
  id-token: write   # identifies this repo to CodeBoarding's hosted tier, used by the free
                    # tier AND a license, and as the fallback until your own key exists

concurrency:
  # Serialize against itself so a push landing mid-run can't make two commits.
  group: codeboarding-sync
  cancel-in-progress: false

jobs:
  sync:
    runs-on: ubuntu-latest
    timeout-minutes: 60
    steps:
      - uses: CodeBoarding/CodeBoarding-action@v1
        with:
          mode: sync
          force_full: ${{ inputs.force_full || false }}
          target_branch: 'main'
          # Free tier needs no secret; these fall through to the hosted OIDC tier when
          # unset. Add either repo secret (Settings → Secrets and variables → Actions)
          # for more/unmetered usage; no YAML edit required.
          llm_api_key: ${{ secrets.OPENROUTER_API_KEY }}   # BYO LLM provider key (OpenRouter)
          license_key: ${{ secrets.CODEBOARDING_LICENSE }}  # CodeBoarding paid plan