Merge remote-tracking branch 'upstream/main' into upstream-0.17.1

Author: sarahmcmorgan

.github/workflows/ci_mode_command.yml

@@ -0,0 +1,130 @@
+name: CI Mode Command
+
+on:
+  issue_comment:
+    types: [created]
+
+permissions:
+  actions: write
+  contents: read
+  issues: write
+  pull-requests: write
+
+jobs:
+  set_ci_mode:
+    if: ${{ github.event.issue.pull_request && startsWith(github.event.comment.body, '/ci ') }}
+    runs-on: ubuntu-latest
+    steps:
+      - name: Parse command and authorize
+        id: parse
+        uses: actions/github-script@v7
+        with:
+          github-token: ${{ secrets.GITHUB_TOKEN }}
+          script: |
+            const body = (context.payload.comment.body || "").trim();
+            const match = body.match(/^\/ci\s+(small|medium|large)\s*$/i);
+            if (!match) {
+              core.setOutput("valid", "false");
+              core.setOutput("allowed", "false");
+              core.setOutput("reason", "invalid");
+              core.setOutput("message", "Invalid command. Use `/ci small`, `/ci medium`, or `/ci large`.");
+              return;
+            }
+
+            const mode = match[1].toLowerCase();
+            const assoc = (context.payload.comment.author_association || "").toUpperCase();
+            const isRepoCollaborator = ["OWNER", "MEMBER", "COLLABORATOR"].includes(assoc);
+            const isMaintainer = ["OWNER", "MEMBER"].includes(assoc);
+
+            if (!isRepoCollaborator) {
+              core.setOutput("valid", "true");
+              core.setOutput("allowed", "false");
+              core.setOutput("reason", "permission");
+              core.setOutput("message", "You are not authorized to set CI mode on this repository.");
+              core.setOutput("mode", mode);
+              return;
+            }
+
+            if (mode === "large" && !isMaintainer) {
+              core.setOutput("valid", "true");
+              core.setOutput("allowed", "false");
+              core.setOutput("reason", "large-restricted");
+              core.setOutput("message", "Only repository maintainers can run `/ci large`.");
+              core.setOutput("mode", mode);
+              return;
+            }
+
+            core.setOutput("valid", "true");
+            core.setOutput("allowed", "true");
+            core.setOutput("mode", mode);
+
+      - name: Respond to invalid or unauthorized command
+        if: ${{ steps.parse.outputs.allowed != 'true' }}
+        uses: actions/github-script@v7
+        with:
+          github-token: ${{ secrets.GITHUB_TOKEN }}
+          script: |
+            const message = ${{ toJSON(steps.parse.outputs.message) }};
+            await github.rest.issues.createComment({
+              owner: context.repo.owner,
+              repo: context.repo.repo,
+              issue_number: context.issue.number,
+              body: message
+            });
+
+      - name: Set CI mode label and dispatch CI
+        if: ${{ steps.parse.outputs.allowed == 'true' }}
+        uses: actions/github-script@v7
+        with:
+          github-token: ${{ secrets.GITHUB_TOKEN }}
+          script: |
+            const mode = `${{ steps.parse.outputs.mode }}`;
+            const desired = `ci:${mode}`;
+            const { owner, repo } = context.repo;
+            const issue_number = context.issue.number;
+            const repoFullName = `${owner}/${repo}`.toLowerCase();
+
+            const { data: pr } = await github.rest.pulls.get({
+              owner,
+              repo,
+              pull_number: issue_number
+            });
+
+            const { data: existing } = await github.rest.issues.listLabelsOnIssue({
+              owner,
+              repo,
+              issue_number
+            });
+
+            const keep = existing
+              .map((l) => l.name)
+              .filter((name) => !/^ci:(small|medium|large)$/.test(name));
+            keep.push(desired);
+
+            await github.rest.issues.setLabels({
+              owner,
+              repo,
+              issue_number,
+              labels: keep
+            });
+
+            const headRepoFullName = (pr.head.repo?.full_name || "").toLowerCase();
+            const dispatchRef = headRepoFullName === repoFullName ? pr.head.ref : "main";
+
+            await github.rest.actions.createWorkflowDispatch({
+              owner,
+              repo,
+              workflow_id: "dbt_ci_modes.yml",
+              ref: dispatchRef,
+              inputs: {
+                pr_number: String(issue_number),
+                mode
+              }
+            });
+
+            await github.rest.issues.createComment({
+              owner,
+              repo,
+              issue_number,
+              body: `CI mode set to \`${mode}\` via \`${desired}\`. Triggered Tuva CI now (ref: \`${dispatchRef}\`).`
+            });