Commit nightly config backups to GitLab

from urllib.parse import quote
import json
from clickruntime import on_trigger, credentials, http, notify, ai

GITLAB = "https://gitlab.com/api/v4"

def gl_headers():
    return {"PRIVATE-TOKEN": credentials.secret("GITLAB_TOKEN")}

PROJECT = quote("acme/backups", safe="")
SOURCE = "https://api.example.com/v1/configurations"

@on_trigger
def run(event):
    configs = http.get(SOURCE, headers={"Authorization": f"Bearer {credentials.secret('SOURCE_API_KEY')}"}).json()
    actions = []
    for item in configs:
        path, content = f"configs/{item['id']}.json", json.dumps(item, indent=2)
        current = http.get(f"{GITLAB}/projects/{PROJECT}/repository/files/{quote(path, safe='')}/raw",
                           headers=gl_headers(), params={"ref": "main"})
        if current.status_code == 404 or current.text != content:
            actions.append({"action": "create" if current.status_code == 404 else "update", "file_path": path, "content": content})
    if not actions:
        return {"changed": 0}
    http.post(f"{GITLAB}/projects/{PROJECT}/repository/commits", headers=gl_headers(),
              json={"branch": "main", "commit_message": f"Backup: {len(actions)} files changed", "actions": actions}).raise_for_status()
    summary = ai.generate("Summarise these backup changes in two sentences:\n" + "\n".join(f"{a['action']} {a['file_path']}" for a in actions),
                          max_output_tokens=120).text
    notify.email_me(f"Backup committed: {len(actions)} files", summary)
    return {"changed": len(actions)}