name: Label Policy Sanity

on:
    pull_request:
        paths:
            - ".github/workflows/labeler.yml"
            - ".github/workflows/auto-response.yml"
    push:
        paths:
            - ".github/workflows/labeler.yml"
            - ".github/workflows/auto-response.yml"

concurrency:
    group: label-policy-sanity-${{ github.event.pull_request.number || github.sha }}
    cancel-in-progress: true

permissions:
    contents: read

jobs:
    contributor-tier-consistency:
        runs-on: blacksmith-2vcpu-ubuntu-2404
        timeout-minutes: 10
        steps:
            - name: Checkout
              uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4

            - name: Verify contributor-tier parity across workflows
              shell: bash
              run: |
                  set -euo pipefail
                  python3 - <<'PY'
                  import re
                  from pathlib import Path

                  files = [
                    Path('.github/workflows/labeler.yml'),
                    Path('.github/workflows/auto-response.yml'),
                  ]

                  parsed = {}
                  for path in files:
                    text = path.read_text(encoding='utf-8')
                    rules = re.findall(r'\{ label: "([^"]+ contributor)", minMergedPRs: (\d+) \}', text)
                    color_match = re.search(r'const contributorTierColor = "([0-9A-Fa-f]{6})"', text)
                    if not color_match:
                      raise SystemExit(f'failed to parse contributorTierColor in {path}')
                    parsed[str(path)] = {
                      'rules': rules,
                      'color': color_match.group(1).upper(),
                    }

                  baseline = parsed[str(files[0])]
                  for path in files[1:]:
                    entry = parsed[str(path)]
                    if entry != baseline:
                      raise SystemExit(
                        'contributor-tier mismatch between workflows: '
                        f'{files[0]}={baseline} vs {path}={entry}'
                      )

                  print('contributor tier rules/color are consistent across label workflows')
                  PY