# THROWAWAY workflow for weblib-ci#11 reproduction. Not merged, will be
# deleted along with the debug/issue-11-repro branch once the mechanism is
# established.
#
# Runs the (also throwaway-instrumented) sync_blocked_label.py directly, with
# the token Gitea Actions gives *this* repo -- scoped to weblib-ci only, same
# as every other repo's reconciler is scoped to itself. That is the exact
# condition weblib-ci#11 is about: can a token that cannot see weblib-archive
# or cfbypass still resolve a cross-repo blocker's state.
name: debug issue 11 repro

on:
  workflow_dispatch:

jobs:
  debug:
    runs-on: nix
    steps:
      - uses: actions/checkout@v4
      - name: probe cross-repo dependency resolution
        env:
          GITEA_TOKEN: ${{ secrets.GITEA_TOKEN }}
          GITEA_HOST: ${{ github.server_url }}
        run: |
          nix shell nixpkgs#python3 --command python3 sync_blocked_label.py \
            --repo weblib/weblib-archive --dry-run