feat: GFIC candidate check

Signed-off-by: exploreriii <133720349+exploreriii@users.noreply.github.com>

Author: exploreriii

.github/scripts/bots/reject-good-first-issue-candidates.js

@@ -0,0 +1,62 @@
+const { gfiCandidateNotReady } =
+    require('../lib/comments/good-first-issue-candidate-reject');
+
+const GFI_CANDIDATE_LABEL = 'Good First Issue Candidate';
+
+const BROWSE_URLS = {
+    gfi:
+        'https://github.com/hiero-ledger/hiero-sdk-python/issues' +
+        '?q=is%3Aissue+state%3Aopen+label%3A"Good+First+Issue"+no%3Aassignee',
+};
+
+function requestsAssignment(body) {
+    return typeof body === 'string' && /(^|\s)\/assign(\s|$)/i.test(body);
+}
+
+function isGfiCandidate(issue) {
+    return (issue.labels ?? []).some(
+        l => l.name?.toLowerCase() === GFI_CANDIDATE_LABEL.toLowerCase()
+    );
+}
+
+module.exports = async ({ github, context }) => {
+    const { issue, comment } = context.payload;
+    const { owner, repo } = context.repo;
+
+    if (!issue || !comment) return;
+    if (comment.user?.type === 'Bot') return;
+    if (!requestsAssignment(comment.body)) return;
+    if (!isGfiCandidate(issue)) return;
+
+    // Prevent duplicate comments
+    const comments = await github.paginate(
+        github.rest.issues.listComments,
+        {
+            owner,
+            repo,
+            issue_number: issue.number,
+            per_page: 100,
+        }
+    );
+
+    const alreadyPosted = comments.some(c =>
+        c.body?.includes('<!-- gfi-candidate-not-ready -->')
+    );
+
+    if (alreadyPosted) return;
+
+    await github.rest.issues.createComment({
+        owner,
+        repo,
+        issue_number: issue.number,
+        body: gfiCandidateNotReady({
+            username: comment.user.login,
+            browseGfiUrl: BROWSE_URLS.gfi,
+        }),
+    });
+
+    console.log('[gfi-candidate-guard] Redirected user to available GFIs', {
+        issue: issue.number,
+        username: comment.user.login,
+    });
+};

.github/scripts/lib/comments/good-first-issue-candidate-reject.js

@@ -0,0 +1,19 @@
+const gfiCandidateNotReady = ({ username, browseGfiUrl }) => {
+    return `
+<!-- gfi-candidate-not-ready -->
+
+🚫 **This issue is not ready to be assigned yet**
+
+@${username}, this issue is currently marked as a **Good First Issue Candidate**.
+
+It is waiting for a maintainer to review and confirm that it is suitable as a **Good First Issue**.
+
+### ✅ What you can do now
+You can browse and pick from available **Good First Issues** that are ready to be assigned:
+👉 ${browseGfiUrl}
+
+Thank you for your interest and patience 🙏
+`.trim();
+};
+
+module.exports = { gfiCandidateNotReady };

.github/workflows/bot-good-first-issue-candidate-checker.yml

@@ -0,0 +1,29 @@
+name: Enforce Good First Issue Candidate Guard
+
+on:
+    issues:
+        types:
+            - assigned
+
+permissions:
+    issues: write
+    contents: read
+
+jobs:
+    enforce-GFIC:
+        runs-on: ubuntu-latest
+
+        concurrency:
+            group: GFIC-assign-${{ github.event.issue.number }}
+            cancel-in-progress: false
+
+        steps:
+            - name: Checkout repository
+              uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+
+            - name: Enforce GFIC guard
+              uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd #v8.0.0
+              with:
+                  script: |
+                      const script = require('./.github/scripts/bots/bot-good-first-issue-candidate-checker.js');
+                      await script({ github, context });