name: Publish wiki

# Shared through scoped delivery: it runs in every repository of an
# organization, but writes only where the repository has opted in with
# wiki/.publish (ADR-0004). TOKEN_FOR_GITEA_WIKI is read from the organization
# secrets; there is no fallback to the read-only sync token. The script is a
# file of TirSystem/github-action (tools/publish_wiki.py), fetched with a
# second checkout so that it is readable, lintable and tested as a file
# (MIL-004 task 6).
on:
  push:
    branches: [ main ]
    paths:
      - "wiki/**"
  workflow_dispatch:

concurrency:
  group: publish-wiki
  cancel-in-progress: false

jobs:
  publish-wiki:
    permissions:
      contents: read
    runs-on: ubuntu-latest
    timeout-minutes: 10
    steps:
      - name: Check out the repository
        uses: actions/checkout@v4.2.2

      - name: Fetch the shared script
        uses: actions/checkout@v4.2.2
        with:
          repository: TirSystem/github-action
          ref: v1
          path: shared-scripts

      - name: Publish the pages to the wiki
        env:
          GITEA_API_URL: ${{ gitea.api_url }}
          SOURCE_REPOSITORY: ${{ gitea.repository }}
          WIKI_CREDENTIALS: ${{ secrets.TOKEN_FOR_GITEA_WIKI }}
        run: python3 shared-scripts/tools/publish_wiki.py