name: Sync to Hugging Face hub
on:
  push:
    branches: [deployment]

  workflow_dispatch:

jobs:
  sync-to-hub:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
        with:
          fetch-depth: 0
          lfs: true

      - name: Validate Hugging Face token
        id: hf_auth
        env:
          HF_TOKEN: ${{ secrets.HF_TOKEN }}
        run: |
          if [ -z "$HF_TOKEN" ]; then
            echo "::error::GitHub secret HF_TOKEN is not set."
            echo "Create a Hugging Face token with WRITE access to SolutionChallenge/solution_challenge_backend,"
            echo "then add it at GitHub → Settings → Secrets and variables → Actions → HF_TOKEN."
            exit 1
          fi
          pip install -q "huggingface_hub>=0.23.0"
          python <<'PY'
          import os, sys
          from huggingface_hub import HfApi
          token = os.environ["HF_TOKEN"]
          api = HfApi(token=token)
          try:
              who = api.whoami(cache=True)
          except Exception as exc:
              print(f"::error::HF_TOKEN is invalid or expired: {exc}", file=sys.stderr)
              sys.exit(1)
          username = who.get("name") or who.get("fullname") or ""
          if not username:
              print("::error::Could not resolve Hugging Face username from token.", file=sys.stderr)
              sys.exit(1)
          print(f"Authenticated as Hugging Face user: {username}")
          space_id = "SolutionChallenge/solution_challenge_backend"
          try:
              info = api.space_info(space_id, token=token)
              print(f"Space found: {info.id}")
          except Exception as exc:
              print(
                  f"::error::Token for '{username}' cannot access {space_id}. "
                  "Accept the Solution Challenge org invite, then use a WRITE token from a member with push access.",
                  file=sys.stderr,
              )
              print(f"Hub response: {exc}", file=sys.stderr)
              sys.exit(1)
          github_output = os.environ.get("GITHUB_OUTPUT", "")
          if github_output:
              with open(github_output, "a", encoding="utf-8") as out:
                  out.write(f"username={username}\n")
          PY

      - name: Push to hub
        env:
          HF_TOKEN: ${{ secrets.HF_TOKEN }}
          HF_USER: ${{ steps.hf_auth.outputs.username }}
          HF_SPACE: SolutionChallenge/solution_challenge_backend
        run: |
          git config --global user.name "github-actions"
          git config --global user.email "github-actions@github.com"
          git checkout --orphan hf-deploy
          rm -rf cepheus guest-app scripts firebase.json
          # HF Picklescan blocks .npy — ensure pickle-free .f32emb, then strip .npy
          python3 backend/Face_Recognition/export_hf_embeddings.py || true
          find backend/Face_Recognition -name '*.npy' -delete
          # HF git rejects binary images via regular push — ship .f32emb only
          find backend/Face_Recognition -name '*.jpg' -delete
          find backend/Face_Recognition -name '*.jpeg' -delete
          find backend/Face_Recognition -name '*.png' -delete
          find backend/Face_Recognition -name '*.webp' -delete
          find backend/Face_Recognition/face_database -type d -name 'unknown_*' -exec rm -rf {} + 2>/dev/null || true
          mkdir -p backend/Face_Recognition/faces_db backend/Face_Recognition/temp_faces_db backend/Face_Recognition/face_database
          touch backend/Face_Recognition/face_database/.gitkeep
          find backend -name "*.pt" -delete
          find backend -name "*.mp4" -delete
          # Drop other large/binary artifacts not needed on the Space
          rm -f backend/Face_Recognition/test.jpg backend/Face_Recognition/input.mp4 2>/dev/null || true
          git add -A
          git commit -m "Deploy to Hugging Face"
          ENCODED_TOKEN=$(python3 -c "import os, urllib.parse; print(urllib.parse.quote(os.environ['HF_TOKEN'], safe=''))")
          git push --force "https://SolutionChallenge:${ENCODED_TOKEN}@huggingface.co/spaces/SolutionChallenge/solution_challenge_backend" hf-deploy:main