From 2c0102e2f65f1d1af5627990d73ec9f05f9c0fa4 Mon Sep 17 00:00:00 2001
From: Tommi Lindfors <tommi.lindfors@bifin.ai>
Date: Mon, 8 Jun 2026 10:48:32 +0200
Subject: [PATCH] ci: add TiiVih auto-approve workflow

Converts a TiiVih comment of exactly 'ok' or 'ok.' (case-insensitive)
into a proper GitHub APPROVED review using a stored PAT secret.

Requires secret: TIIVIH_REVIEW_TOKEN
---
 .github/workflows/tiivih-auto-approve.yml | 46 +++++++++++++++++++++++
 1 file changed, 46 insertions(+)
 create mode 100644 .github/workflows/tiivih-auto-approve.yml

diff --git a/.github/workflows/tiivih-auto-approve.yml b/.github/workflows/tiivih-auto-approve.yml
new file mode 100644
index 0000000..e354081
--- /dev/null
+++ b/.github/workflows/tiivih-auto-approve.yml
@@ -0,0 +1,46 @@
+name: Register TiiVih approval
+
+on:
+  issue_comment:
+    types: [created]
+
+permissions:
+  contents: read
+
+jobs:
+  approve:
+    name: Submit APPROVED review
+    runs-on: ubuntu-latest
+
+    # Only trigger on PR comments (not issue comments) by TiiVih
+    if: >
+      github.event.issue.pull_request != null &&
+      github.event.comment.user.login == 'TiiVih'
+
+    steps:
+      - name: Check comment is exactly "ok" or "ok." (case-insensitive)
+        id: check
+        run: |
+          # Strip whitespace and newlines, lowercase
+          body=$(echo "${{ github.event.comment.body }}" \
+            | tr '[:upper:]' '[:lower:]' \
+            | tr -d '\r\n' \
+            | xargs)
+          if [[ "$body" == "ok" || "$body" == "ok." ]]; then
+            echo "approved=true" >> "$GITHUB_OUTPUT"
+          else
+            echo "approved=false" >> "$GITHUB_OUTPUT"
+          fi
+
+      - name: Submit APPROVED review as TiiVih
+        if: steps.check.outputs.approved == 'true'
+        env:
+          GH_TOKEN: ${{ secrets.TIIVIH_REVIEW_TOKEN }}
+          PR_NUMBER: ${{ github.event.issue.number }}
+          REPO: ${{ github.repository }}
+        run: |
+          HEAD_SHA=$(gh api /repos/$REPO/pulls/$PR_NUMBER --jq '.head.sha')
+          gh api -X POST /repos/$REPO/pulls/$PR_NUMBER/reviews \
+            -f commit_id="$HEAD_SHA" \
+            -f event="APPROVE" \
+            -f body="Approved"