@juangcarmona/lighthouse-sdlc 0.7.0 → 0.8.0

package/workflows/lighthouse-sdlc-triage.md

@@ -0,0 +1,41 @@
+---
+# Owned by @juangcarmona/lighthouse-sdlc. Compile with `gh aw compile`; do not edit the lock file.
+name: Lighthouse SDLC triage
+description: Execute only the Lighthouse triage stage and return its declared stage result.
+private: true
+runs-on: [self-hosted, linux, lighthouse-sdlc]
+runs-on-slim: ubuntu-24.04
+strict: true
+env:
+  LIGHTHOUSE_STAGE: triage
+  LIGHTHOUSE_SKILL: src/packages/sdlc/skills/triage/SKILL.md
+on:
+  workflow_call:
+    inputs:
+      route:
+        description: Lighthouse route selected by the host.
+        required: true
+        type: string
+      run-id:
+        description: Stable Lighthouse run identifier.
+        required: true
+        type: string
+      input:
+        description: Compact JSON input for this stage.
+        required: false
+        type: string
+        default: '{}'
+      previous-stage:
+        description: Previous stage artifact name; empty for triage.
+        required: false
+        type: string
+        default: ''
+imports:
+  - shared/lighthouse-sdlc-stage.md
+---
+
+# Lighthouse SDLC triage worker
+
+Execute only `triage` by following `${{ env.LIGHTHOUSE_SKILL }}` and the package contracts in `src/packages/sdlc/routes.json`, `src/packages/sdlc/stages.json` and `src/packages/sdlc/schemas/stage-result.schema.json`. Read ProductShape and ArcShape context when the host provides citations, and preserve those citations in evidence.
+
+Do not invoke `refine` or any later stage. Do not invent route names, labels, gates, statuses or evidence fields. Assess the work item, route, owner and evidence as the skill requires. Write one valid result to `/tmp/gh-aw/agent/stage-result.json` with `stage: triage`, `gate: triaged`, the triage record in `output`, and separate `evidence`, `missingEvidence`, `unavailableChecks` and `pendingReview` arrays. Stop at the triaged gate, then call `noop` exactly once.

package/workflows/shared/lighthouse-sdlc-stage.md

@@ -0,0 +1,81 @@
+---
+# Owned by @juangcarmona/lighthouse-sdlc. Shared stage mechanics for the local gh-aw workers.
+description: Shared runner, input, evidence and stage-result mechanics for Lighthouse SDLC workers.
+engine: copilot
+permissions: read-all
+checkout:
+  fetch-depth: 0
+tools:
+  bash: [cat, find, git, node, npm, npx, rg]
+  edit:
+  github:
+    toolsets: [repos, issues, pull_requests]
+safe-outputs:
+  report-failure-as-issue: false
+  create-issue: false
+  noop:
+    max: 1
+    report-as-issue: false
+steps:
+  - name: Materialize the host input
+    shell: bash
+    env:
+      STAGE_INPUT: ${{ inputs.input }}
+    run: |
+      set -euo pipefail
+      mkdir -p /tmp/gh-aw/agent
+      printf '%s\n' "${STAGE_INPUT:-{}}" > /tmp/gh-aw/agent/input.json
+  - name: Load the previous stage result
+    if: inputs.previous-stage != ''
+    uses: actions/download-artifact@v8
+    with:
+      name: lighthouse-sdlc-${{ inputs.run-id }}-${{ inputs.previous-stage }}
+      path: /tmp/gh-aw/agent/previous
+post-steps:
+  - name: Preserve the stage result
+    if: always()
+    shell: bash
+    run: |
+      set -euo pipefail
+      mkdir -p "$GITHUB_WORKSPACE/.lighthouse/gh-aw"
+      result=/tmp/gh-aw/agent/stage-result.json
+      if [ -f "$result" ]; then
+        cp "$result" "$GITHUB_WORKSPACE/.lighthouse/gh-aw/stage-result.json"
+      else
+        echo "::error::The worker did not produce /tmp/gh-aw/agent/stage-result.json"
+        exit 1
+      fi
+  - name: Validate the stage result and declared gate
+    if: always()
+    shell: bash
+    env:
+      EXPECTED_STAGE: ${{ env.LIGHTHOUSE_STAGE }}
+      RESULT_FILE: /tmp/gh-aw/agent/stage-result.json
+    run: |
+      set -euo pipefail
+      node src/packages/sdlc/src/sdlc.mjs stage-result --input "$RESULT_FILE" --format json
+      EXPECTED_STAGE="$EXPECTED_STAGE" RESULT_FILE="$RESULT_FILE" node --input-type=module <<'NODE'
+      import { readFileSync } from 'node:fs';
+
+      const stage = process.env.EXPECTED_STAGE;
+      const result = JSON.parse(readFileSync(process.env.RESULT_FILE, 'utf8'));
+      const contract = JSON.parse(readFileSync('src/packages/sdlc/stages.json', 'utf8'));
+      const expected = contract.stages.find((item) => item.id === stage);
+      if (!expected || result.stage !== stage || result.gate !== expected.gate) {
+        console.error(`stage-result does not match stages.json for ${stage}`);
+        process.exit(1);
+      }
+      NODE
+  - name: Upload stage evidence
+    if: always()
+    uses: actions/upload-artifact@v7
+    with:
+      name: lighthouse-sdlc-${{ inputs.run-id }}-${{ env.LIGHTHOUSE_STAGE }}
+      path: ${{ github.workspace }}/.lighthouse/gh-aw/stage-result.json
+      if-no-files-found: warn
+      retention-days: 14
+---
+
+# Lighthouse SDLC worker mechanics
+
+The host input is in `/tmp/gh-aw/agent/input.json`. If this worker has a previous stage, its validated result is in `/tmp/gh-aw/agent/previous/stage-result.json`.