name: Enforce PR Issue State Logic
on:
  workflow_call:
    inputs:
      pr_number:
        description: Pull request number to evaluate
        required: true
        type: string
      requester:
        description: Login of the user whose action triggered enforcement, if any
        required: false
        default: ""
        type: string
    secrets:
      OZ_MGMT_GHA_APP_ID:
        required: true
      OZ_MGMT_GHA_PRIVATE_KEY:
        required: true
      OSS_WARP_API_KEY:
        required: true
    outputs:
      allow_review:
        description: Whether downstream PR hooks may continue after enforcement.
        value: ${{ jobs.enforce_issue_state.outputs.allow_review }}
jobs:
  enforce_issue_state:
    name: Enforce PR issue state
    permissions:
      contents: read
      issues: write
      pull-requests: write
    uses: warpdotdev/oz-for-oss/.github/workflows/enforce-pr-issue-state.yml@main
    with:
      pr_number: ${{ inputs.pr_number }}
      requester: ${{ inputs.requester }}
    secrets:
      OZ_MGMT_GHA_APP_ID: ${{ secrets.OZ_MGMT_GHA_APP_ID }}
      OZ_MGMT_GHA_PRIVATE_KEY: ${{ secrets.OZ_MGMT_GHA_PRIVATE_KEY }}
      WARP_API_KEY: ${{ secrets.OSS_WARP_API_KEY }}