feat: re-profile 40 emulators, harden CI workflows

profile emulators pd777 through tic80, add frozen snapshots
(puae2021, snes9x2002/2005/2010, stella2014/2023).

CI: replace github-script with gh CLI, add test execution,
job-level permissions, propagate changed output, pin jsonschema.

.github/workflows/build.yml

@@ -11,9 +11,7 @@ on:
         type: boolean
         default: false
 
-permissions:
-  contents: write
-  pages: write
+permissions: {}
 
 concurrency:
   group: build
@@ -22,6 +20,11 @@ concurrency:
 jobs:
   regenerate:
     runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      pages: write
+    outputs:
+      changed: ${{ steps.commit.outputs.changed }}
     steps:
       - uses: actions/checkout@v6
 
@@ -57,6 +60,9 @@ jobs:
           python scripts/generate_readme.py --db database.json --platforms-dir platforms
           python scripts/generate_site.py
 
+      - name: Run tests
+        run: python -m unittest tests.test_e2e -v
+
       - name: Deploy site to GitHub Pages
         if: github.ref == 'refs/heads/main'
         run: mkdocs gh-deploy --force --clean
@@ -74,8 +80,10 @@ jobs:
 
   release:
     needs: regenerate
-    if: needs.regenerate.result == 'success' || github.event.inputs.force_release == 'true'
+    if: (needs.regenerate.outputs.changed == 'true' || github.event.inputs.force_release == 'true')
     runs-on: ubuntu-latest
+    permissions:
+      contents: write
     steps:
       - name: Rate limit
         if: github.event.inputs.force_release != 'true'
@@ -105,6 +113,10 @@ jobs:
         with:
           python-version: "3.12"
 
+      - name: Install dependencies
+        if: steps.rate.outputs.skip != 'true'
+        run: pip install pyyaml
+
       - name: Refresh data directories
         if: steps.rate.outputs.skip != 'true'
         run: python scripts/refresh_data_dirs.py
@@ -113,7 +125,6 @@ jobs:
       - name: Build packs
         if: steps.rate.outputs.skip != 'true'
         run: |
-          pip install pyyaml
           python scripts/generate_db.py --bios-dir bios --output database.json
           python scripts/generate_pack.py --all --output-dir dist/
 

.github/workflows/validate.yml

@@ -31,8 +31,11 @@ jobs:
 
       - name: Get changed BIOS files
         id: changed
+        env:
+          BASE_SHA: ${{ github.event.pull_request.base.sha }}
+          HEAD_SHA: ${{ github.event.pull_request.head.sha }}
         run: |
-          files=$(git diff --name-only ${{ github.event.pull_request.base.sha }}...${{ github.event.pull_request.head.sha }} | grep '^bios/' || true)
+          files=$(git diff --name-only "$BASE_SHA"..."$HEAD_SHA" | grep '^bios/' || true)
           echo "files=$files" >> "$GITHUB_OUTPUT"
           echo "$files" > /tmp/changed_files.txt
 
@@ -46,17 +49,11 @@ jobs:
           fi
 
       - name: Post validation report
-        uses: actions/github-script@v8
-        with:
-          script: |
-            const fs = require('fs');
-            const report = fs.readFileSync('/tmp/report.md', 'utf8');
-            await github.rest.issues.createComment({
-              owner: context.repo.owner,
-              repo: context.repo.repo,
-              issue_number: context.issue.number,
-              body: report
-            });
+        if: always()
+        run: |
+          gh pr comment "${{ github.event.pull_request.number }}" --body-file /tmp/report.md
+        env:
+          GH_TOKEN: ${{ github.token }}
 
   validate-configs:
     runs-on: ubuntu-latest
@@ -68,7 +65,7 @@ jobs:
           python-version: "3.12"
 
       - name: Install dependencies
-        run: pip install pyyaml jsonschema
+        run: pip install pyyaml jsonschema==4.23.0
 
       - name: Validate platform configs
         run: |
@@ -88,15 +85,30 @@ jobs:
                   config = yaml.safe_load(f)
               try:
                   validate(config, schema)
-                  print(f'✅ {yml_file.name}')
+                  print(f'OK {yml_file.name}')
               except ValidationError as e:
                   errors.append(f'{yml_file.name}: {e.message}')
-                  print(f'❌ {yml_file.name}: {e.message}')
+                  print(f'FAIL {yml_file.name}: {e.message}')
 
           if errors:
               sys.exit(1)
           "
 
+  run-tests:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v6
+
+      - uses: actions/setup-python@v6
+        with:
+          python-version: "3.12"
+
+      - name: Install dependencies
+        run: pip install pyyaml
+
+      - name: Run test suite
+        run: python -m unittest tests.test_e2e -v
+
   label-pr:
     runs-on: ubuntu-latest
     permissions:
@@ -107,43 +119,25 @@ jobs:
           fetch-depth: 0
 
       - name: Auto-label PR
-        uses: actions/github-script@v8
-        with:
-          script: |
-            const { data: files } = await github.rest.pulls.listFiles({
-              owner: context.repo.owner,
-              repo: context.repo.repo,
-              pull_number: context.issue.number,
-            });
+        run: |
+          labels=""
+          files=$(gh pr diff "${{ github.event.pull_request.number }}" --name-only)
 
-            const labels = new Set();
+          if echo "$files" | grep -q '^bios/'; then
+            labels="$labels bios"
+            for sys in $(echo "$files" | grep '^bios/' | cut -d/ -f2 | sort -u); do
+              labels="$labels system:$(echo "$sys" | tr '[:upper:]' '[:lower:]')"
+            done
+          fi
+          if echo "$files" | grep -q '^platforms/'; then
+            labels="$labels platform-config"
+          fi
+          if echo "$files" | grep -q '^scripts/'; then
+            labels="$labels automation"
+          fi
 
-            for (const file of files) {
-              if (file.filename.startsWith('bios/')) {
-                labels.add('bios');
-                // Extract system from path
-                const parts = file.filename.split('/');
-                if (parts.length >= 3) {
-                  labels.add(`system:${parts[1].toLowerCase()}`);
-                }
-              }
-              if (file.filename.startsWith('platforms/')) {
-                labels.add('platform-config');
-              }
-              if (file.filename.startsWith('scripts/')) {
-                labels.add('automation');
-              }
-            }
-
-            if (labels.size > 0) {
-              try {
-                await github.rest.issues.addLabels({
-                  owner: context.repo.owner,
-                  repo: context.repo.repo,
-                  issue_number: context.issue.number,
-                  labels: [...labels],
-                });
-              } catch (e) {
-                console.log('Could not add labels:', e.message);
-              }
-            }
+          for label in $labels; do
+            gh pr edit "${{ github.event.pull_request.number }}" --add-label "$label" 2>/dev/null || true
+          done
+        env:
+          GH_TOKEN: ${{ github.token }}