#!/bin/bash
set -eu
printf '%s\n' '--- workflow files ---'
sed -n '1,130p' .github/workflows/ci.yml
printf '%s\n' '--- release workflow ---'
sed -n '1,125p' .github/workflows/release.yml
printf '%s\n' '--- checkout and git-write references ---'
rg -n -C 3 'actions/checkout|persist-credentials|git push|git commit|git tag|gh release|release' .github/workflows

#!/bin/bash
set -eu
python3 - <<'PY'
from pathlib import Path
import re

files = [Path(".github/workflows/ci.yml"), Path(".github/workflows/release.yml")]
text = {p: p.read_text() for p in files}

for path, body in text.items():
    lines = body.splitlines()
    print(f"--- {path} ---")
    workflow_permissions = []
    for i, line in enumerate(lines):
        if re.match(r"^permissions:", line):
            workflow_permissions = lines[i:i+4]
            break
    print("workflow_permissions:", " | ".join(x.strip() for x in workflow_permissions))

    for i, line in enumerate(lines):
        if re.match(r"^\s+- uses: actions/checkout@", line):
            indent = len(line) - len(line.lstrip())
            job = "unknown"
            for j in range(i - 1, -1, -1):
                m = re.match(r"^  ([A-Za-z0-9_-]+):\s*$", lines[j])
                if m and m.group(1) not in {"steps", "strategy", "matrix", "include"}:
                    job = m.group(1)
                    break
            inputs = []
            for candidate in lines[i+1:]:
                candidate_indent = len(candidate) - len(candidate.lstrip())
                if candidate.strip() and candidate_indent <= indent:
                    break
                if "persist-credentials:" in candidate:
                    inputs.append(candidate.strip())
            print(f"checkout line {i+1}, job={job}, persist_inputs={inputs or ['(default)']}")
            end = len(lines)
            for j in range(i+1, len(lines)):
                if re.match(r"^  [A-Za-z0-9_-]+:\s*$", lines[j]):
                    end = j
                    break
            job_block = lines[i:end]
            writes = [x.strip() for x in job_block if re.search(r"\bgit\s+(push|commit|tag)\b", x)]
            print("  explicit_git_write_commands:", writes or ["(none)"])
PY

# Read the full release.yml workflow to understand job permissions and context
cat -n .github/workflows/release.yml

# Check if there's documentation or defaults for jdx/mise-action caching
# First, let's see if there's an action.yml in the repository for this
fd -e yml -e yaml | head -20