name: Temporary CPA OIDC issue trigger

on:
  issues:
    types:
      - edited

permissions:
  contents: write

jobs:
  apply-upgrade:
    if: github.event.issue.number == 7
    runs-on: ubuntu-latest
    steps:
      - name: Checkout main
        uses: actions/checkout@v4
        with:
          ref: main
          fetch-depth: 0

      - name: Apply CPA OIDC upgrade
        run: python tools/apply_cpa_oidc_upgrade.py

      - name: Commit upgrade and clean temporary files
        shell: bash
        run: |
          rm -f tools/apply_cpa_oidc_upgrade.py
          rm -f .github/workflows/temp-cpa-oidc-issue-trigger.yml
          git config user.name "github-actions[bot]"
          git config user.email "41898282+github-actions[bot]@users.noreply.github.com"
          git add grok_register_ttk.py config.example.json README.md .gitignore cpa_export.py cpa_xai .github/workflows/temp-cpa-oidc-issue-trigger.yml tools/apply_cpa_oidc_upgrade.py
          git commit -m "feat(auth): add optional CPA OIDC export after SSO registration"
          git push origin HEAD:main