# ═══════════════════════════════════════════════
# 🔺 Sovereign: TCS-0002∞ | Root: SYS-GLW-0001
# 📜 Copyright: 国作登字-2026-A-00037559
# ═══════════════════════════════════════════════
name: "🦅 铸渊·天眼 · 全局俯瞰 + 自动诊断 + 修复驱动"

on:
  schedule:
    - cron: '0 22 * * *'    # UTC 22:00 = 北京 06:00
  workflow_dispatch:

permissions:
  contents: write
  issues: write
  actions: read

jobs:
  skyeye:
    runs-on: ubuntu-latest
    timeout-minutes: 30

    steps:
      - uses: actions/checkout@v4
        with:
          fetch-depth: 0

      - uses: actions/setup-node@v4
        with:
          node-version: '20'

      - name: "🧠 Phase 1 · 唤醒核心大脑"
        id: brain
        run: |
          echo "[GH-WF-RUN-SKYEYE] 🦅 天眼启动 · $(date -u +%Y-%m-%dT%H:%M:%SZ)"
          BRAIN_OK=true
          for f in memory.json routing-map.json dev-status.json; do
            if [ -f ".github/persona-brain/$f" ]; then
              python3 -c "import json; json.load(open('.github/persona-brain/$f'))" 2>/dev/null \
                && echo "✅ $f 完整" || { echo "❌ $f 损坏"; BRAIN_OK=false; }
            else
              echo "❌ $f 缺失"; BRAIN_OK=false
            fi
          done
          echo "🌊 加载光湖存在级安全协议..."
          if [ -f ".github/persona-brain/security-protocol.json" ]; then
            PROTOCOL_LEVEL=$(cat .github/persona-brain/security-protocol.json | python3 -c "import sys,json; print(json.load(sys.stdin)['level'])")
            echo "✅ 安全协议已加载 · 等级: ${PROTOCOL_LEVEL}"
          else
            echo "❌ 安全协议缺失！创建工单！"
          fi
          echo "brain_ok=$BRAIN_OK" >> $GITHUB_OUTPUT

      - name: "📦 安装依赖"
        run: npm install --omit=dev --ignore-scripts 2>/dev/null || true

      - name: "📡 Phase 1.6 · 拉取 Agent 集群公告板"
        env:
          NOTION_TOKEN: ${{ secrets.NOTION_API_TOKEN }}
          AGENT_BULLETIN_BOARD_PAGE_ID: ${{ secrets.AGENT_BULLETIN_BOARD_PAGE_ID }}
        run: |
          echo "[BRIDGE-BULLETIN-READ] 🔄 拉取 Agent 集群公告板"
          mkdir -p /tmp/skyeye
          node scripts/skyeye/bulletin-board.js > /tmp/skyeye/bulletin-board.json || echo "{}" > /tmp/skyeye/bulletin-board.json

      - name: "🦅 Phase 2 · 全局扫描"
        id: scan
        env:
          NOTION_TOKEN: ${{ secrets.NOTION_API_TOKEN }}
          DEPLOY_HOST: ${{ secrets.DEPLOY_HOST }}
          DEPLOY_USER: ${{ secrets.DEPLOY_USER }}
          DEPLOY_KEY: ${{ secrets.DEPLOY_KEY }}
          SMTP_USER: ${{ secrets.SMTP_USER }}
          SMTP_PASS: ${{ secrets.SMTP_PASS }}
          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        run: |
          mkdir -p /tmp/skyeye
          node scripts/skyeye/scan-workflows.js > /tmp/skyeye/workflow-health.json
          gh run list --limit 50 --json name,status,conclusion,createdAt,updatedAt \
            > /tmp/skyeye/recent-runs.json || { echo "⚠️ gh run list 失败，使用空列表" && echo "[]" > /tmp/skyeye/recent-runs.json; }
          FAILED_COUNT=$(cat /tmp/skyeye/recent-runs.json | \
            python3 -c "import sys,json; runs=json.load(sys.stdin); print(sum(1 for r in runs if r.get('conclusion')=='failure'))" 2>/dev/null || echo "0")
          echo "failed_count=$FAILED_COUNT" >> $GITHUB_OUTPUT
          node scripts/skyeye/scan-structure.js > /tmp/skyeye/structure-health.json
          node scripts/skyeye/scan-brain-health.js > /tmp/skyeye/brain-health.json
          node scripts/skyeye/scan-external-bridges.js > /tmp/skyeye/bridge-health.json
          node scripts/skyeye/scan-security-protocol.js > /tmp/skyeye/security-health.json
          node scripts/commander-dashboard.js > /dev/null 2>&1 || true
          node scripts/skyeye/scan-bulletin-sfp.js > /tmp/skyeye/sfp-health.json
          node scripts/skyeye/scan-soldier-health.js > /tmp/skyeye/soldier-health.json

      - name: "🔬 Phase 3 · 诊断"
        id: diagnose
        run: |
          node scripts/skyeye/diagnose.js > /tmp/skyeye/diagnosis.json
          ISSUES_COUNT=$(cat /tmp/skyeye/diagnosis.json | python3 -c "import sys,json; d=json.load(sys.stdin); print(d.get('total_issues', 0))" 2>/dev/null || echo "0")
          AUTO_FIXABLE=$(cat /tmp/skyeye/diagnosis.json | python3 -c "import sys,json; d=json.load(sys.stdin); print(d.get('auto_fixable', 0))" 2>/dev/null || echo "0")
          NEEDS_HUMAN=$(cat /tmp/skyeye/diagnosis.json | python3 -c "import sys,json; d=json.load(sys.stdin); print(d.get('needs_human', 0))" 2>/dev/null || echo "0")
          echo "issues_count=$ISSUES_COUNT" >> $GITHUB_OUTPUT
          echo "auto_fixable=$AUTO_FIXABLE" >> $GITHUB_OUTPUT
          echo "needs_human=$NEEDS_HUMAN" >> $GITHUB_OUTPUT

      - name: "🔄 Phase 3.5 · ASOP 自优化审批"
        run: |
          echo "[GH-ASOP-APPROVE] 🔄 ASOP 审批引擎启动..."
          node scripts/skyeye/asop-reviewer.js > /tmp/skyeye/asop-review.json || echo "{}" > /tmp/skyeye/asop-review.json

      - name: "🔧 Phase 4 · 修复Agent"
        if: steps.diagnose.outputs.auto_fixable != '0'
        env:
          NOTION_TOKEN: ${{ secrets.NOTION_API_TOKEN }}
          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        run: |
          node scripts/skyeye/repair-agent.js
          git config user.name "zhuyuan-bot"
          git config user.email "zhuyuan@guanghulab.com"
          git add -A
          if ! git diff --cached --quiet; then
            git commit -m "🦅 天眼·修复Agent · $(date +%Y-%m-%d) · 自动修复${{ steps.diagnose.outputs.auto_fixable }}个问题"
            git push
          fi

      - name: "🔄 Phase 5 · 重新触发失败的 Workflow"
        if: steps.scan.outputs.failed_count != '0'
        env:
          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        run: |
          FAILED_WORKFLOWS=$(cat /tmp/skyeye/recent-runs.json | \
            python3 -c "
          import sys, json
          runs = json.load(sys.stdin)
          failed = set()
          for r in runs:
              if r.get('conclusion') == 'failure':
                  failed.add(r['name'])
          for w in failed:
              print(w)
          " 2>/dev/null || true)
          echo "需要重新触发的 Workflow:"
          echo "$FAILED_WORKFLOWS"
          # 记录到报告，具体重触发逻辑由各 workflow 自带的 workflow_dispatch 支持

      - name: "🔧 Phase 5.5 · ASOP 执行已批准优化"
        run: |
          echo "[GH-ASOP-EXECUTE] 🔧 ASOP 执行器启动..."
          node scripts/skyeye/asop-executor.js > /tmp/skyeye/asop-execute.json || echo "{}" > /tmp/skyeye/asop-execute.json

      - name: "🔍 Phase 5.7 · ASOP 验证优化效果"
        run: |
          echo "[GH-ASOP-EXECUTE] 🔍 ASOP 验证器启动..."
          node scripts/skyeye/asop-verifier.js > /tmp/skyeye/asop-verify.json || echo "{}" > /tmp/skyeye/asop-verify.json

      - name: "📋 Phase 6 · 全局健康报告"
        run: |
          node scripts/skyeye/report-generator.js
          mkdir -p data/skyeye-reports
          DATE=$(date +%Y-%m-%d)
          cp /tmp/skyeye/full-report.json "data/skyeye-reports/skyeye-${DATE}.json"
          git config user.name "zhuyuan-bot"
          git config user.email "zhuyuan@guanghulab.com"
          git add data/skyeye-reports/ .github/persona-brain/memory.json data/asop-requests/
          if ! git diff --cached --quiet; then
            git commit -m "🦅 天眼报告 · $(date +%Y-%m-%d) · 问题:${{ steps.diagnose.outputs.issues_count }} 自动修复:${{ steps.diagnose.outputs.auto_fixable }}"
            git push
          fi

      - name: "📡 Phase 7 · 同步到 Notion"
        if: always()
        env:
          NOTION_TOKEN: ${{ secrets.NOTION_API_TOKEN }}
          NOTION_SYSLOG_DB_ID: ${{ secrets.NOTION_SYSLOG_DB_ID }}
          SKYEYE_PERSONA_DB_ID: ${{ secrets.SKYEYE_PERSONA_DB_ID }}
        run: |
          node scripts/skyeye/sync-to-notion.js || echo "⚠️ Notion同步失败（不阻断）"
          # 人格体注册表全量同步（双端同步：Notion → 本地配置）
          node scripts/skyeye/persona-lookup.js --sync || echo "⚠️ 人格体注册表同步失败（不阻断）"
          git config user.name "zhuyuan-bot"
          git config user.email "zhuyuan@guanghulab.com"
          git add .github/persona-brain/gate-guard-config.json
          if ! git diff --cached --quiet; then
            git commit -m "🦅 天眼·人格体注册表同步 · $(date +%Y-%m-%d)"
            git push || true
          fi

      - name: "📧 通知妈妈（仅有严重问题时）"
        if: steps.diagnose.outputs.needs_human != '0'
        env:
          SMTP_USER: ${{ secrets.SMTP_USER }}
          SMTP_PASS: ${{ secrets.SMTP_PASS }}
        run: |
          echo "📧 发现 ${{ steps.diagnose.outputs.needs_human }} 个需要妈妈处理的问题"
          echo "工单已记录在天眼报告中 · data/skyeye-reports/"
          # 邮件通知逻辑预留（需要 SMTP 配置完整后启用）
          if [ -n "$SMTP_USER" ] && [ -n "$SMTP_PASS" ]; then
            echo "SMTP 凭证已配置，可发送邮件通知"
          else
            echo "⚠️ SMTP 凭证未配置，跳过邮件通知"
          fi