name: Runner Self-Maintenance

on:
  schedule:
    - cron: "0 */6 * * *"
  workflow_dispatch:

jobs:
  health-check:
    runs-on: docker
    container:
      image: alpine:3.20
    steps:
      - name: Install tools
        run: apk add --no-cache curl docker-cli grep

      - name: Check Gitea health
        id: gitea
        run: |
          if curl -sf http://gitea:3000/api/healthz | grep -q '"status":"pass"'; then
            echo "result=ok|Gitea 健康检查通过" >> $GITHUB_OUTPUT
          else
            echo "result=fail|Gitea 健康检查失败" >> $GITHUB_OUTPUT
            exit 1
          fi

      - name: Check Verdaccio health
        id: verdaccio
        run: |
          if curl -sf http://verdaccio:4873/-/ping >/dev/null 2>&1; then
            echo "result=ok|Verdaccio 正常" >> $GITHUB_OUTPUT
          else
            echo "result=fail|Verdaccio 不可达" >> $GITHUB_OUTPUT
            exit 1
          fi

      - name: Check runner registration
        id: runner
        run: |
          RESP=$(curl -sf -u "${{ secrets.CI_USER }}:${{ secrets.CI_PASSWORD }}" \
            "http://gitea:3000/api/v1/admin/actions/runners")
          ONLINE=$(echo "$RESP" | grep -c '"status":"online"' || true)
          if [ "${ONLINE:-0}" -ge 1 ]; then
            NAME=$(echo "$RESP" | grep -o '"name":"[^"]*"' | head -1 | cut -d'"' -f4)
            echo "result=ok|Runner ${NAME} 在线 (${ONLINE} 个)" >> $GITHUB_OUTPUT
          else
            echo "result=fail|无在线 Runner" >> $GITHUB_OUTPUT
            exit 1
          fi

      - name: Cleanup stale action containers
        id: cleanup
        run: |
          REMOVED=0
          for cid in $(docker ps -a --filter "label=org.opencontainers.image.source=gitea/act_runner" -q 2>/dev/null || true); do
            STATE=$(docker inspect -f '{{.State.Status}}' "$cid" 2>/dev/null || echo unknown)
            if [ "$STATE" = "exited" ]; then
              docker rm "$cid" >/dev/null 2>&1 && REMOVED=$((REMOVED+1)) || true
            fi
          done
          echo "result=ok|清理 ${REMOVED} 个已退出的 job 容器" >> $GITHUB_OUTPUT
        continue-on-error: true

      - name: Notify DingTalk on failure
        if: failure()
        run: |
          curl -s -X POST "https://oapi.dingtalk.com/robot/send?access_token=${{ secrets.DINGDING_TOKEN }}" \
            -H "Content-Type: application/json" \
            -d '{"msgtype":"markdown","markdown":{"title":"❌ Gitea Runner 自主维护告警 chen-fnos","text":"## ❌ Gitea Runner 自主维护告警 chen-fnos\n\n- Gitea: ${{ steps.gitea.outputs.result }}\n- Verdaccio: ${{ steps.verdaccio.outputs.result }}\n- Runner: ${{ steps.runner.outputs.result }}\n- 清理: ${{ steps.cleanup.outputs.result }}\n\n请检查 gitea-runner 容器状态"}}'