wip: tighten up check-label logic

Signed-off-by: Nick Hale <[email protected]>

Author: njhale

.github/workflows/smoke.yaml

@@ -23,28 +23,41 @@ jobs:
       - name: Check if PR author is a member of the organization or has the run-smoke label
         id: check
         run: |
-          if [ "${{ github.event_name }}" == "push" ]; then
-            echo "run_smoke_tests=true" >> $GITHUB_OUTPUT
-            exit 0
-          fi
+          case "${{ github.event_name }}" in
+            push)
+              # Run smoke tests for push to base repo
+              echo "run_smoke_tests=true" >> $GITHUB_OUTPUT
+              exit 0
+              ;;
+            workflow_dispatch)
+              # Run smoke tests for manual runs against base branch
+              echo "run_smoke_tests=true" >> $GITHUB_OUTPUT
+              exit 0
+              ;;
+            pull_request_target)
+              ORG="gptscript-ai"
+              AUTHOR="${{ github.event.pull_request.user.login }}"
 
-          ORG="gptscript-ai"
-          USERNAME="${{ github.event.pull_request.user.login }}"
-          RESPONSE=$(curl -s -H "Authorization: token ${{ secrets.GITHUB_TOKEN }}" \
-            "https://api.github.com/orgs/$ORG/members/$USERNAME")
+              # Check for org membership
+              MEMBERSHIP_RESPONSE_CODE=$(curl -s -o /dev/null -w "%{http_code}" -H "Authorization: token ${{ secrets.GITHUB_TOKEN }}" \
+                "https://api.github.com/orgs/$ORG/members/$AUTHOR")
 
-          if [ "$RESPONSE" != "{}" ]; then
-            echo "run_smoke_tests=true" >> $GITHUB_OUTPUT
-            exit 0
-          fi
+              if [ "$MEMBERSHIP_RESPONSE_CODE" -eq 204 ]; then
+                echo "run_smoke_tests=true" >> $GITHUB_OUTPUT
+                exit 0
+              fi
 
-          LABELS=$(curl -s -H "Authorization: token ${{ secrets.GITHUB_TOKEN }}" \
-            "https://api.github.com/repos/${{ github.repository_owner }}/${{ github.event.repository.name }}/issues/${{ github.event.pull_request.number }}/labels" | jq -r '.[].name')
+              # Check for "run-smoke" label
+              LABELS=$(curl -s -H "Authorization: token ${{ secrets.GITHUB_TOKEN }}" \
+                "https://api.github.com/repos/${{ github.repository_owner }}/${{ github.event.repository.name }}/issues/${{ github.event.pull_request.number }}/labels" | jq -r '.[].name')
+              if echo "$LABELS" | grep -q "run-smoke"; then
+                # Run smoke tests for PR with the "run-smoke" label
+                echo "run_smoke_tests=true" >> $GITHUB_OUTPUT
+                exit 0
+              fi
 
-          if echo "$LABELS" | grep -q "run-smoke"; then
-            echo "run_smoke_tests=true" >> $GITHUB_OUTPUT
-            exit 0
-          fi
+              ;;
+          esac
 
           echo "run_smoke_tests=false" >> $GITHUB_OUTPUT