name: labeler
on:
  pull_request:

# All three permission grants are load-bearing: reusable-workflow permissions can
# only be downgraded from the caller, so omitting one (e.g. issues:write) either
# fails to create labels or triggers a silent startup_failure. `pull_request`
# (NOT pull_request_target) is correct — the org takes no fork PRs.
permissions:
  contents: read
  pull-requests: write
  issues: write

jobs:
  select-runner:
    # Picks GitHub-hosted while Actions is operational, the org self-hosted
    # runner otherwise. See callable-select-runner.yaml for the policy.
    uses: Sea-Haven-Industries/.github/.github/workflows/callable-select-runner.yaml@REPLACE-ME # vX.Y.Z

  label:
    needs: select-runner
    uses: Sea-Haven-Industries/.github/.github/workflows/callable-labeler.yaml@REPLACE-ME # vX.Y.Z
    with:
      runner: ${{ needs.select-runner.outputs.runner }}