cache-impact.yml

name: Cache impact guard

on:
  pull_request_target:
    branches: [main-v2]
    types: [opened, synchronize, reopened, edited, ready_for_review]
    # The guard only cares about the prompt/tool surfaces listed in
    # scripts/check-cache-impact.sh; PRs confined to clearly unrelated paths
    # can never trip it, so skip the run entirely. Keep the ignore list
    # conservative: when in doubt, run.
    paths-ignore:
      - 'docs/**'
      - 'site/**'
      - 'release-notes/**'
      - 'workers/**'
      - 'benchmarks/**'
      - 'npm/**'
      - '*.md'

permissions:
  contents: read
  pull-requests: read

concurrency:
  group: cache-impact-${{ github.event.pull_request.number }}
  cancel-in-progress: true

jobs:
  cache-impact:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v7
        with:
          ref: ${{ github.event.pull_request.base.sha }}

      - name: Collect PR changed files
        env:
          GH_TOKEN: ${{ github.token }}
          PR_NUMBER: ${{ github.event.pull_request.number }}
          REPOSITORY: ${{ github.repository }}
        run: |
          gh api --paginate "repos/${REPOSITORY}/pulls/${PR_NUMBER}/files" \
            --jq '.[].filename' > "$RUNNER_TEMP/cache-impact-files.txt"

      - name: Check cache-sensitive PR metadata
        env:
          PR_BODY: ${{ github.event.pull_request.body }}
          CACHE_IMPACT_CHANGED_FILES_FILE: ${{ runner.temp }}/cache-impact-files.txt
        run: bash scripts/check-cache-impact.sh