@plainconceptsplatform/workflows 0.20.1 → 0.20.3

package/loops/actions/apply-agent-output/action.yml

@@ -1,108 +1,108 @@
-# Managed by @plainconceptsplatform/workflows. Source: loops/actions/apply-agent-output/action.yml. Update with workflows update --force; consumer edits may be overwritten.
-name: Apply agent output
-description: Download the agent artifact and apply its safe outputs in one fixed order, so every worker concludes the same way.
-inputs:
-  token:
-    description: GitHub token the writes are made with.
-    required: true
-  artifact-name:
-    description: >-
-      Name of the agent artifact. Callers pass the activation job's artifact_prefix output
-      followed by "agent"; gh-aw derives that prefix from the workflow's inputs, so it is
-      non-empty for every workflow_call worker and the bare name never resolves.
-    required: true
-  merge-pull-request:
-    description: Apply merge_pull_request items.
-    required: false
-    default: 'false'
-  push-to-branch:
-    description: Apply push_to_pull_request_branch items.
-    required: false
-    default: 'false'
-  close-issues:
-    description: Apply close_issue items.
-    required: false
-    default: 'false'
-  create-issues:
-    description: Apply create_issue items.
-    required: false
-    default: 'false'
-  update-issues:
-    description: Apply update_issue items.
-    required: false
-    default: 'false'
-  apply-labels:
-    description: Apply add_labels and remove_labels items.
-    required: false
-    default: 'true'
-  fallback-issue-number:
-    description: Issue an update_issue item targets when it names none.
-    required: false
-    default: ''
-outputs:
-  item-count:
-    description: Number of items the agent produced.
-    value: ${{ steps.output.outputs.item-count }}
-  first-issue-number:
-    description: Issue number of the first issue created, or empty.
-    value: ${{ steps.create-issues.outputs.first-issue-number }}
-runs:
-  using: composite
-  steps:
-    - name: Download agent output
-      id: output
-      uses: ./.github/actions/download-agent-output
-      with:
-        artifact-name: ${{ inputs.artifact-name }}
-
-    - name: Merge pull request
-      if: inputs.merge-pull-request == 'true' && steps.output.outputs.item-count != '0'
-      uses: ./.github/actions/merge-agent-pr
-      with:
-        output-file: ${{ steps.output.outputs.output-file }}
-        token: ${{ inputs.token }}
-
-    - name: Push to pull request branch
-      if: inputs.push-to-branch == 'true' && steps.output.outputs.item-count != '0'
-      uses: ./.github/actions/push-agent-branch
-      with:
-        output-file: ${{ steps.output.outputs.output-file }}
-        bundle-file: ${{ steps.output.outputs.bundle-file }}
-        token: ${{ inputs.token }}
-
-    - name: Close issues
-      if: inputs.close-issues == 'true' && steps.output.outputs.item-count != '0'
-      uses: ./.github/actions/close-agent-issues
-      with:
-        output-file: ${{ steps.output.outputs.output-file }}
-        token: ${{ inputs.token }}
-
-    - name: Update issues
-      if: inputs.update-issues == 'true' && steps.output.outputs.item-count != '0'
-      uses: ./.github/actions/update-agent-issues
-      with:
-        output-file: ${{ steps.output.outputs.output-file }}
-        token: ${{ inputs.token }}
-        fallback-issue-number: ${{ inputs.fallback-issue-number }}
-
-    - name: Create issues
-      id: create-issues
-      if: inputs.create-issues == 'true' && steps.output.outputs.item-count != '0'
-      uses: ./.github/actions/create-agent-issues
-      with:
-        output-file: ${{ steps.output.outputs.output-file }}
-        token: ${{ inputs.token }}
-
-    - name: Post agent comments
-      if: steps.output.outputs.item-count != '0'
-      uses: ./.github/actions/apply-agent-comments
-      with:
-        output-file: ${{ steps.output.outputs.output-file }}
-        token: ${{ inputs.token }}
-
-    - name: Apply agent label changes
-      if: inputs.apply-labels == 'true' && steps.output.outputs.item-count != '0'
-      uses: ./.github/actions/apply-agent-labels
-      with:
-        output-file: ${{ steps.output.outputs.output-file }}
-        token: ${{ inputs.token }}
+# Managed by @plainconceptsplatform/workflows. Source: loops/actions/apply-agent-output/action.yml. Update with workflows update --force; consumer edits may be overwritten.
+name: Apply agent output
+description: Download the agent artifact and apply its safe outputs in one fixed order, so every worker concludes the same way.
+inputs:
+  token:
+    description: GitHub token the writes are made with.
+    required: true
+  artifact-name:
+    description: >-
+      Name of the agent artifact. Callers pass the activation job's artifact_prefix output
+      followed by "agent"; gh-aw derives that prefix from the workflow's inputs, so it is
+      non-empty for every workflow_call worker and the bare name never resolves.
+    required: true
+  merge-pull-request:
+    description: Apply merge_pull_request items.
+    required: false
+    default: 'false'
+  push-to-branch:
+    description: Apply push_to_pull_request_branch items.
+    required: false
+    default: 'false'
+  close-issues:
+    description: Apply close_issue items.
+    required: false
+    default: 'false'
+  create-issues:
+    description: Apply create_issue items.
+    required: false
+    default: 'false'
+  update-issues:
+    description: Apply update_issue items.
+    required: false
+    default: 'false'
+  apply-labels:
+    description: Apply add_labels and remove_labels items.
+    required: false
+    default: 'true'
+  fallback-issue-number:
+    description: Issue an update_issue item targets when it names none.
+    required: false
+    default: ''
+outputs:
+  item-count:
+    description: Number of items the agent produced.
+    value: ${{ steps.output.outputs.item-count }}
+  first-issue-number:
+    description: Issue number of the first issue created, or empty.
+    value: ${{ steps.create-issues.outputs.first-issue-number }}
+runs:
+  using: composite
+  steps:
+    - name: Download agent output
+      id: output
+      uses: ./.github/actions/download-agent-output
+      with:
+        artifact-name: ${{ inputs.artifact-name }}
+
+    - name: Merge pull request
+      if: inputs.merge-pull-request == 'true' && steps.output.outputs.item-count != '0'
+      uses: ./.github/actions/merge-agent-pr
+      with:
+        output-file: ${{ steps.output.outputs.output-file }}
+        token: ${{ inputs.token }}
+
+    - name: Push to pull request branch
+      if: inputs.push-to-branch == 'true' && steps.output.outputs.item-count != '0'
+      uses: ./.github/actions/push-agent-branch
+      with:
+        output-file: ${{ steps.output.outputs.output-file }}
+        bundle-file: ${{ steps.output.outputs.bundle-file }}
+        token: ${{ inputs.token }}
+
+    - name: Close issues
+      if: inputs.close-issues == 'true' && steps.output.outputs.item-count != '0'
+      uses: ./.github/actions/close-agent-issues
+      with:
+        output-file: ${{ steps.output.outputs.output-file }}
+        token: ${{ inputs.token }}
+
+    - name: Update issues
+      if: inputs.update-issues == 'true' && steps.output.outputs.item-count != '0'
+      uses: ./.github/actions/update-agent-issues
+      with:
+        output-file: ${{ steps.output.outputs.output-file }}
+        token: ${{ inputs.token }}
+        fallback-issue-number: ${{ inputs.fallback-issue-number }}
+
+    - name: Create issues
+      id: create-issues
+      if: inputs.create-issues == 'true' && steps.output.outputs.item-count != '0'
+      uses: ./.github/actions/create-agent-issues
+      with:
+        output-file: ${{ steps.output.outputs.output-file }}
+        token: ${{ inputs.token }}
+
+    - name: Post agent comments
+      if: steps.output.outputs.item-count != '0'
+      uses: ./.github/actions/apply-agent-comments
+      with:
+        output-file: ${{ steps.output.outputs.output-file }}
+        token: ${{ inputs.token }}
+
+    - name: Apply agent label changes
+      if: inputs.apply-labels == 'true' && steps.output.outputs.item-count != '0'
+      uses: ./.github/actions/apply-agent-labels
+      with:
+        output-file: ${{ steps.output.outputs.output-file }}
+        token: ${{ inputs.token }}

package/loops/actions/classify-route/action.yml

@@ -1,100 +1,100 @@
-# Managed by @plainconceptsplatform/workflows. Source: loops/actions/classify-route/action.yml. Update with workflows update --force; consumer edits may be overwritten.
-name: Classify route
-description: Classify the triggering event into exactly one route, and resolve the issue a gated pull request closes.
-inputs:
-  token:
-    description: GitHub token with pull-requests read access.
-    required: true
-outputs:
-  route:
-    description: The single route this event selects, or `none`.
-    value: ${{ steps.classify.outputs.route }}
-  issue-number:
-    description: Issue number the route operates on.
-    value: ${{ steps.classify.outputs.issue-number }}
-  pr-number:
-    description: Pull request number the route operates on.
-    value: ${{ steps.classify.outputs.pr-number }}
-  linked-issue:
-    description: Issue the pull request closes. Empty for routes that do not target one.
-    value: ${{ steps.linked-issue.outputs.issue }}
-  ci-conclusion:
-    description: Conclusion reported by the CI run that triggered a merge-gate route.
-    value: ${{ steps.classify.outputs.ci-conclusion }}
-  ci-run-id:
-    description: Workflow run ID of that CI run.
-    value: ${{ steps.classify.outputs.ci-run-id }}
-  merge-gate-attempts:
-    description: Failed merge-gate attempts already made against this CI verdict.
-    value: ${{ steps.classify.outputs.merge-gate-attempts }}
-  implement-attempts:
-    description: Implement runs already made for this issue that died before producing an answer.
-    value: ${{ steps.classify.outputs.implement-attempts }}
-  refine-mode:
-    description: first or rerefine.
-    value: ${{ steps.classify.outputs.refine-mode }}
-  triage-mode:
-    description: first or retriage.
-    value: ${{ steps.classify.outputs.triage-mode }}
-  trigger-kind:
-    description: scheduled or manual.
-    value: ${{ steps.classify.outputs.trigger-kind }}
-runs:
-  using: composite
-  steps:
-    - name: Classify the event
-      id: classify
-      shell: bash
-      env:
-        EVENT: ${{ github.event_name }}
-        ACTION: ${{ github.event.action }}
-        LABEL: ${{ github.event.label.name }}
-        ISSUE_LABELS: ${{ toJSON(github.event.issue.labels.*.name) }}
-        ISSUE_STATE: ${{ github.event.issue.state }}
-        EVENT_ISSUE_NUMBER: ${{ github.event.issue.number }}
-        EVENT_PR_NUMBER: ${{ github.event.pull_request.number }}
-        COMMENT_ON_PR: ${{ github.event.issue.pull_request != '' }}
-        COMMENT_SENDER_TYPE: ${{ github.event.comment.user.type }}
-        ACTOR: ${{ github.actor }}
-        RUN_PR_NUMBER: ${{ github.event.workflow_run.pull_requests[0].number }}
-        RUN_CONCLUSION: ${{ github.event.workflow_run.conclusion }}
-        RUN_ID: ${{ github.event.workflow_run.id }}
-        SCHEDULE: ${{ github.event.schedule }}
-        OPERATION: ${{ github.event.inputs.operation }}
-        INPUT_ISSUE_NUMBER: ${{ github.event.inputs.issue-number }}
-        INPUT_PR_NUMBER: ${{ github.event.inputs.pr-number }}
-        INPUT_MODE: ${{ github.event.inputs.mode }}
-        INPUT_CI_CONCLUSION: ${{ github.event.inputs.ci-conclusion }}
-        INPUT_CI_RUN_ID: ${{ github.event.inputs.ci-run-id }}
-        INPUT_ATTEMPTS_SO_FAR: ${{ github.event.inputs.attempts_so_far }}
-        INPUT_TRIGGER_KIND: ${{ github.event.inputs.trigger-kind }}
-      run: |
-        set -euo pipefail
-
-        bash "${GITHUB_ACTION_PATH}/classify-route.sh" | tee "$RUNNER_TEMP/route.env"
-        cat "$RUNNER_TEMP/route.env" >> "$GITHUB_OUTPUT"
-
-        route="$(sed -n 's/^route=//p' "$RUNNER_TEMP/route.env")"
-        reason="$(sed -n 's/^error=//p' "$RUNNER_TEMP/route.env")"
-
-        if [ "$route" = "none" ] && [ -n "$reason" ]; then
-          echo "::notice::No route for this event: $reason"
-        fi
-
-    - name: Resolve the issue the pull request closes
-      id: linked-issue
-      if: steps.classify.outputs.route == 'merge-gate' || steps.classify.outputs.route == 'apply-review'
-      shell: bash
-      env:
-        GH_TOKEN: ${{ inputs.token }}
-        REPO: ${{ github.repository }}
-        PR_NUMBER: ${{ steps.classify.outputs.pr-number }}
-      run: |
-        set -euo pipefail
-
-        issue="$(gh pr view "$PR_NUMBER" --repo "$REPO" \
-          --json closingIssuesReferences \
-          --jq '.closingIssuesReferences[0].number // empty')"
-
-        echo "issue=${issue}" >> "$GITHUB_OUTPUT"
-        echo "Pull request #${PR_NUMBER} closes issue #${issue:-<none>}"
+# Managed by @plainconceptsplatform/workflows. Source: loops/actions/classify-route/action.yml. Update with workflows update --force; consumer edits may be overwritten.
+name: Classify route
+description: Classify the triggering event into exactly one route, and resolve the issue a gated pull request closes.
+inputs:
+  token:
+    description: GitHub token with pull-requests read access.
+    required: true
+outputs:
+  route:
+    description: The single route this event selects, or `none`.
+    value: ${{ steps.classify.outputs.route }}
+  issue-number:
+    description: Issue number the route operates on.
+    value: ${{ steps.classify.outputs.issue-number }}
+  pr-number:
+    description: Pull request number the route operates on.
+    value: ${{ steps.classify.outputs.pr-number }}
+  linked-issue:
+    description: Issue the pull request closes. Empty for routes that do not target one.
+    value: ${{ steps.linked-issue.outputs.issue }}
+  ci-conclusion:
+    description: Conclusion reported by the CI run that triggered a merge-gate route.
+    value: ${{ steps.classify.outputs.ci-conclusion }}
+  ci-run-id:
+    description: Workflow run ID of that CI run.
+    value: ${{ steps.classify.outputs.ci-run-id }}
+  merge-gate-attempts:
+    description: Failed merge-gate attempts already made against this CI verdict.
+    value: ${{ steps.classify.outputs.merge-gate-attempts }}
+  implement-attempts:
+    description: Implement runs already made for this issue that died before producing an answer.
+    value: ${{ steps.classify.outputs.implement-attempts }}
+  refine-mode:
+    description: first or rerefine.
+    value: ${{ steps.classify.outputs.refine-mode }}
+  triage-mode:
+    description: first or retriage.
+    value: ${{ steps.classify.outputs.triage-mode }}
+  trigger-kind:
+    description: scheduled or manual.
+    value: ${{ steps.classify.outputs.trigger-kind }}
+runs:
+  using: composite
+  steps:
+    - name: Classify the event
+      id: classify
+      shell: bash
+      env:
+        EVENT: ${{ github.event_name }}
+        ACTION: ${{ github.event.action }}
+        LABEL: ${{ github.event.label.name }}
+        ISSUE_LABELS: ${{ toJSON(github.event.issue.labels.*.name) }}
+        ISSUE_STATE: ${{ github.event.issue.state }}
+        EVENT_ISSUE_NUMBER: ${{ github.event.issue.number }}
+        EVENT_PR_NUMBER: ${{ github.event.pull_request.number }}
+        COMMENT_ON_PR: ${{ github.event.issue.pull_request != '' }}
+        COMMENT_SENDER_TYPE: ${{ github.event.comment.user.type }}
+        ACTOR: ${{ github.actor }}
+        RUN_PR_NUMBER: ${{ github.event.workflow_run.pull_requests[0].number }}
+        RUN_CONCLUSION: ${{ github.event.workflow_run.conclusion }}
+        RUN_ID: ${{ github.event.workflow_run.id }}
+        SCHEDULE: ${{ github.event.schedule }}
+        OPERATION: ${{ github.event.inputs.operation }}
+        INPUT_ISSUE_NUMBER: ${{ github.event.inputs.issue-number }}
+        INPUT_PR_NUMBER: ${{ github.event.inputs.pr-number }}
+        INPUT_MODE: ${{ github.event.inputs.mode }}
+        INPUT_CI_CONCLUSION: ${{ github.event.inputs.ci-conclusion }}
+        INPUT_CI_RUN_ID: ${{ github.event.inputs.ci-run-id }}
+        INPUT_ATTEMPTS_SO_FAR: ${{ github.event.inputs.attempts_so_far }}
+        INPUT_TRIGGER_KIND: ${{ github.event.inputs.trigger-kind }}
+      run: |
+        set -euo pipefail
+
+        bash "${GITHUB_ACTION_PATH}/classify-route.sh" | tee "$RUNNER_TEMP/route.env"
+        cat "$RUNNER_TEMP/route.env" >> "$GITHUB_OUTPUT"
+
+        route="$(sed -n 's/^route=//p' "$RUNNER_TEMP/route.env")"
+        reason="$(sed -n 's/^error=//p' "$RUNNER_TEMP/route.env")"
+
+        if [ "$route" = "none" ] && [ -n "$reason" ]; then
+          echo "::notice::No route for this event: $reason"
+        fi
+
+    - name: Resolve the issue the pull request closes
+      id: linked-issue
+      if: steps.classify.outputs.route == 'merge-gate' || steps.classify.outputs.route == 'apply-review'
+      shell: bash
+      env:
+        GH_TOKEN: ${{ inputs.token }}
+        REPO: ${{ github.repository }}
+        PR_NUMBER: ${{ steps.classify.outputs.pr-number }}
+      run: |
+        set -euo pipefail
+
+        issue="$(gh pr view "$PR_NUMBER" --repo "$REPO" \
+          --json closingIssuesReferences \
+          --jq '.closingIssuesReferences[0].number // empty')"
+
+        echo "issue=${issue}" >> "$GITHUB_OUTPUT"
+        echo "Pull request #${PR_NUMBER} closes issue #${issue:-<none>}"

package/loops/actions/cleanup-artifacts/action.yml

@@ -1,91 +1,91 @@
-# Managed by @plainconceptsplatform/workflows. Source: loops/actions/cleanup-artifacts/action.yml. Update with workflows update --force; consumer edits may be overwritten.
-name: Clean up artifacts
-description: Delete workflow artifacts older than the configured retention period.
-inputs:
-  token:
-    description: GitHub token with actions write access.
-    required: true
-  artifact-retention-days:
-    description: Retention period in days. Invalid or empty values use 3.
-    required: false
-    default: ''
-runs:
-  using: composite
-  steps:
-    - name: Delete expired artifacts
-      uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
-      env:
-        ARTIFACT_RETENTION_DAYS: ${{ inputs.artifact-retention-days }}
-      with:
-        github-token: ${{ inputs.token }}
-        script: |
-          const parsedDays = Number.parseInt(process.env.ARTIFACT_RETENTION_DAYS, 10);
-          const days = Number.isInteger(parsedDays) && parsedDays > 0 ? parsedDays : 3;
-          const cutoff = new Date(Date.now() - days * 24 * 60 * 60 * 1000);
-
-          core.info(`Retention: ${days} days (cutoff ${cutoff.toISOString()})`);
-
-          const artifacts = await github.paginate(github.rest.actions.listArtifactsForRepo, {
-            ...context.repo,
-            per_page: 100,
-          });
-
-          const expired = artifacts.filter((artifact) => new Date(artifact.created_at) < cutoff);
-
-          let deleted = 0;
-          const failed = [];
-
-          for (const artifact of expired) {
-            // GitHub answers a delete with a 5xx now and then. Three tries, because the
-            // alternative is a red daily run over one artifact that tomorrow's run would
-            // have removed anyway.
-            let lastError;
-            for (let attempt = 1; attempt <= 3; attempt += 1) {
-              try {
-                await github.rest.actions.deleteArtifact({
-                  ...context.repo,
-                  artifact_id: artifact.id,
-                });
-
-                core.info(`Deleted ${artifact.name} (created ${artifact.created_at})`);
-                deleted += 1;
-                lastError = undefined;
-                break;
-              } catch (error) {
-                lastError = error;
-                if (attempt < 3) await new Promise((wait) => setTimeout(wait, attempt * 2000));
-              }
-            }
-
-            if (lastError) {
-              core.warning(
-                `Could not delete ${artifact.name} (${artifact.id}) after 3 tries: ${lastError.message}`,
-              );
-              failed.push({ name: artifact.name, status: lastError.status });
-            }
-          }
-
-          await core.summary
-            .addHeading('Artifact cleanup', 2)
-            .addList([
-              `Retention: ${days} days (cutoff ${cutoff.toISOString()})`,
-              `Deleted: ${deleted}`,
-              `Failed to delete: ${failed.length}`,
-              `Within retention: ${artifacts.length - expired.length}`,
-            ])
-            .write();
-
-          // Deleting nothing at all while expired artifacts exist is a permission or
-          // configuration problem, and has to be loud. One stubborn artifact among many is
-          // the API having a bad minute: tomorrow's run picks it up, and failing here only
-          // teaches people to ignore a red cleanup. A 4xx is never transient, so it fails
-          // whatever else succeeded.
-          const names = failed.map((entry) => entry.name).join(', ');
-          const structural = failed.some((entry) => entry.status && entry.status < 500);
-          if (failed.length > 0 && (deleted === 0 || structural)) {
-            core.setFailed(`${failed.length} artifact(s) could not be deleted: ${names}`);
-          } else if (failed.length > 0) {
-            core.warning(
-              `${failed.length} artifact(s) survived this run and will be retried tomorrow: ${names}`,
-            );
-          }
+# Managed by @plainconceptsplatform/workflows. Source: loops/actions/cleanup-artifacts/action.yml. Update with workflows update --force; consumer edits may be overwritten.
+name: Clean up artifacts
+description: Delete workflow artifacts older than the configured retention period.
+inputs:
+  token:
+    description: GitHub token with actions write access.
+    required: true
+  artifact-retention-days:
+    description: Retention period in days. Invalid or empty values use 3.
+    required: false
+    default: ''
+runs:
+  using: composite
+  steps:
+    - name: Delete expired artifacts
+      uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
+      env:
+        ARTIFACT_RETENTION_DAYS: ${{ inputs.artifact-retention-days }}
+      with:
+        github-token: ${{ inputs.token }}
+        script: |
+          const parsedDays = Number.parseInt(process.env.ARTIFACT_RETENTION_DAYS, 10);
+          const days = Number.isInteger(parsedDays) && parsedDays > 0 ? parsedDays : 3;
+          const cutoff = new Date(Date.now() - days * 24 * 60 * 60 * 1000);
+
+          core.info(`Retention: ${days} days (cutoff ${cutoff.toISOString()})`);
+
+          const artifacts = await github.paginate(github.rest.actions.listArtifactsForRepo, {
+            ...context.repo,
+            per_page: 100,
+          });
+
+          const expired = artifacts.filter((artifact) => new Date(artifact.created_at) < cutoff);
+
+          let deleted = 0;
+          const failed = [];
+
+          for (const artifact of expired) {
+            // GitHub answers a delete with a 5xx now and then. Three tries, because the
+            // alternative is a red daily run over one artifact that tomorrow's run would
+            // have removed anyway.
+            let lastError;
+            for (let attempt = 1; attempt <= 3; attempt += 1) {
+              try {
+                await github.rest.actions.deleteArtifact({
+                  ...context.repo,
+                  artifact_id: artifact.id,
+                });
+
+                core.info(`Deleted ${artifact.name} (created ${artifact.created_at})`);
+                deleted += 1;
+                lastError = undefined;
+                break;
+              } catch (error) {
+                lastError = error;
+                if (attempt < 3) await new Promise((wait) => setTimeout(wait, attempt * 2000));
+              }
+            }
+
+            if (lastError) {
+              core.warning(
+                `Could not delete ${artifact.name} (${artifact.id}) after 3 tries: ${lastError.message}`,
+              );
+              failed.push({ name: artifact.name, status: lastError.status });
+            }
+          }
+
+          await core.summary
+            .addHeading('Artifact cleanup', 2)
+            .addList([
+              `Retention: ${days} days (cutoff ${cutoff.toISOString()})`,
+              `Deleted: ${deleted}`,
+              `Failed to delete: ${failed.length}`,
+              `Within retention: ${artifacts.length - expired.length}`,
+            ])
+            .write();
+
+          // Deleting nothing at all while expired artifacts exist is a permission or
+          // configuration problem, and has to be loud. One stubborn artifact among many is
+          // the API having a bad minute: tomorrow's run picks it up, and failing here only
+          // teaches people to ignore a red cleanup. A 4xx is never transient, so it fails
+          // whatever else succeeded.
+          const names = failed.map((entry) => entry.name).join(', ');
+          const structural = failed.some((entry) => entry.status && entry.status < 500);
+          if (failed.length > 0 && (deleted === 0 || structural)) {
+            core.setFailed(`${failed.length} artifact(s) could not be deleted: ${names}`);
+          } else if (failed.length > 0) {
+            core.warning(
+              `${failed.length} artifact(s) survived this run and will be retried tomorrow: ${names}`,
+            );
+          }