@plainconceptsplatform/workflows 0.24.2 → 0.26.0

package/loops/actions/classify-route/classify-route.sh

@@ -230,6 +230,14 @@ classify_route() {
             error="operation 'merge-gate' needs a positive pr-number, got '${INPUT_PR_NUMBER:-}'"
           fi
           ;;
+        visual-verify)
+          if is_issue_number "${INPUT_PR_NUMBER:-}"; then
+            route="visual-verify"
+            pr_number="${INPUT_PR_NUMBER}"
+          else
+            error="operation 'visual-verify' needs a positive pr-number, got '${INPUT_PR_NUMBER:-}'"
+          fi
+          ;;
         audit)
           route="${OPERATION}"
           trigger_kind="${INPUT_TRIGGER_KIND:-manual}"

package/loops/actions/identify-gate-subject/action.yml

@@ -68,11 +68,6 @@ runs:
 
         [ "$(jq -r '.state' <<<"$pr")" = "OPEN" ] || none "PR #$PR_NUMBER is not open"
 
-        # Use GitHub's bot flag because App login formats differ across APIs.
-        if [ "$(jq -r '.author.is_bot' <<<"$pr")" != "true" ]; then
-          none "PR #$PR_NUMBER was authored by $(jq -r '.author.login' <<<"$pr"), a human."
-        fi
-
         issue="$LINKED_ISSUE"
 
         if [ -z "$issue" ]; then

package/loops/workflows/work-router.yml

@@ -67,6 +67,9 @@ run-name: >-
   && inputs.operation == 'merge-gate'
   && format('Working (Merge Gate): PR #{0}', inputs.pr-number)
   || github.event_name == 'workflow_dispatch'
+  && inputs.operation == 'visual-verify'
+  && format('Working (Visual Verify): PR #{0}', inputs.pr-number)
+  || github.event_name == 'workflow_dispatch'
   && inputs.operation == 'batch'
   && format('Working (Batch): #{0}', inputs.issue-number)
   || github.event_name == 'workflow_dispatch'
@@ -175,6 +178,7 @@ on:
           - triage
           - apply-review
           - merge-gate
+          - visual-verify
           - audit
           - audit-close
           - cleanup-artifacts
@@ -598,6 +602,19 @@ jobs:
       BOT_PRIVATE_KEY: ${{ secrets.BOT_PRIVATE_KEY }}
       AGENTMEMORY_SECRET: ${{ secrets.AGENTMEMORY_SECRET }}
 
+  call-visual-verify:
+    needs: classify
+    if: needs.classify.outputs.route == 'visual-verify'
+    uses: ./.github/workflows/agent-visual-verify.lock.yml
+    permissions: write-all
+    with:
+      pr-number: ${{ needs.classify.outputs.pr-number }}
+      linked-issue: ${{ needs.classify.outputs.linked-issue }}
+    secrets:
+      OPENAI_API_KEY: ${{ secrets.FORGE_API_KEY }}
+      CODEX_API_KEY: ${{ secrets.FORGE_API_KEY }}
+      COPILOT_GITHUB_TOKEN: ${{ secrets.FORGE_API_KEY }}
+
   call-audit:
     needs: classify
     if: needs.classify.outputs.route == 'audit'
@@ -667,10 +684,10 @@ jobs:
   # pull_request_target. Two entry points:
   #   opened / reopened / synchronize → check the pull request that changed. Gated to this
   #     repository's own branches so a fork PR never starts this App-token job.
-  #   closed & merged                 → the target branch moved, so re-check every open bot
+  #   closed & merged                 → the target branch moved, so re-check every open
   #     pull request that may have just become conflicted (the "main changed after another PR
   #     merged" case). A merge into the default branch is an inherently trusted internal event.
-  # It dispatches only for bot-authored, open, non-draft pull requests whose head is this
+  # It dispatches only for open, non-draft pull requests whose head is this
   # repository AND whose CI has already concluded (dispatching while CI is still pending would
   # make the gate read a 'pending' verdict and prematurely ask for human review; that PR is
   # covered by the CI-completion route instead). The gate's subject job re-validates ownership
@@ -715,8 +732,8 @@ jobs:
         run: |
           set -euo pipefail
 
-          # Dispatch the Merge Gate for one pull request when it is a red-CI open, non-draft,
-          # bot-authored pull request on this repository whose CI has concluded — the
+          # Dispatch the Merge Gate for one pull request when it is a red-CI open, non-draft
+          # pull request on this repository whose CI has concluded — the
           # conflict case is one arm of that, because a conflicting PR never gets a fresh
           # CI run of its own; a merge conflict with red or concluded CI is the same
           # "needs the gate" signal. A green non-conflicting PR is left for the merge belt
@@ -760,7 +777,6 @@ jobs:
             [ -n "$meta" ] || return 0
             if [ "$(jq -r '.state' <<<"$meta")" != "open" ] \
               || [ "$(jq -r '.draft' <<<"$meta")" != "false" ] \
-              || [ "$(jq -r '.bot'   <<<"$meta")" != "Bot" ] \
               || [ "$(jq -r '.head'  <<<"$meta")" != "$REPO" ]; then
               return 0
             fi

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@plainconceptsplatform/workflows",
-  "version": "0.24.2",
+  "version": "0.26.0",
   "description": "Install and update Platform GitHub agentic workflows.",
   "keywords": [
     "github-actions",