name: Gate queue digest
description: Sorts contributor PRs waiting on the issue-link gate into a job summary
on:
  schedule:
    - cron: "0 13,21 * * *" # 1 PM and 9 PM UTC
  workflow_dispatch:
  pull_request:
    paths:
      - ".github/workflows/gate-digest.yml"
      - "scripts/gate_digest.py"

permissions:
  contents: read
  issues: read
  pull-requests: read

jobs:
  digest:
    # Fork PRs can't read the Jev key.
    if: github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository
    runs-on: ubuntu-latest
    timeout-minutes: 15
    steps:
      - name: Checkout repository
        uses: actions/checkout@v7

      - name: Install uv
        uses: astral-sh/setup-uv@v10.1.0

      - name: Write the digest
        # An explicit bash shell runs with pipefail, so a failing script fails the step.
        shell: bash
        run: uv run scripts/gate_digest.py | tee -a "$GITHUB_STEP_SUMMARY"
        env:
          GH_TOKEN: ${{ github.token }}
          TYPESAFE_API_KEY: ${{ secrets.TYPESAFE_API_KEY }}