Back up exports to GitHub each night

import base64, json
from clickruntime import on_trigger, credentials, http, notify

def gh(method, path, **kw):
    resp = http.request(method, f"https://api.github.com{path}", headers={
        "Authorization": f"Bearer {credentials.connection('github', 'work')}", "Accept": "application/vnd.github+json"}, **kw)
    return resp.raise_for_status() or (resp.json() if resp.content else None)

REPO, EXPORT_URL = "acme/backups", "https://tools.acme.example/api/export"

@on_trigger
def run(event):
    items = http.get(EXPORT_URL, headers={"Authorization": f"Bearer {credentials.secret('EXPORT_TOKEN')}"}).json()
    changed = []
    for item in items:
        path = f"exports/{item['id']}.json"
        content = json.dumps(item, indent=2, sort_keys=True) + "\n"
        try:
            current = gh("GET", f"/repos/{REPO}/contents/{path}")
        except Exception:
            current = None
        if current and base64.b64decode(current["content"]).decode() == content:
            continue
        gh("PUT", f"/repos/{REPO}/contents/{path}", json={"message": f"Backup {item.get('name', path)}",
           "content": base64.b64encode(content.encode()).decode(), **({"sha": current["sha"]} if current else {})})
        changed.append(item.get("name", path))
    if changed:
        notify.slack(f"Nightly backup: {len(changed)} changed\n" + "\n".join(f"• {c}" for c in changed), channel="#eng")
    return {"items": len(items), "changed": len(changed)}