name: Generate Checksums
on:
  push:
    branches:
      - main
  pull_request:
permissions:
  contents: write
jobs:
  checksums:
    runs-on: cn
    steps:
      - name: Checkout repository
        uses: actions/checkout@v4
      - name: Generate checksums
        run: |
          set -e
          git lfs install --local
          # disable credentials by actions/checkout for LFS endpoints
          AUTH=$(git config --local http.${{ github.server_url }}/.extraheader)
          git config --local --unset http.${{ github.server_url }}/.extraheader
          git config --local http.${{ github.server_url }}/${{ github.repository }}.git/info/lfs/objects/batch.extraheader "$AUTH"
          git lfs pull
          IFS=$'\n'
          for file in $(git ls-files | grep "^panel/" | grep -v ".sha256$" | grep -v ".txt$"); do
            filename=$(basename "$file");
            sha256sum -b "$file" | sed "s|$file|$filename|" > "${file}.sha256";
          done
          git add -A
          git commit -m "chore: update checksums" || true
          git push origin ${{ github.ref }}
          unset IFS