@plainconceptsplatform/workflows 0.28.13 → 0.28.14

package/loops/actions/housekeeping/action.yml

@@ -66,6 +66,26 @@ runs:
           const age = (iso) => Date.now() - new Date(iso).getTime();
           const days = (ms) => Math.floor(ms / 86400000);
 
+          // 0. Cancel workflow runs stuck in "pending" for over an hour. The ARC fleet is two
+          // VMs, and when it saturates, jobs sit pending indefinitely — GitHub has no queue-time
+          // timeout. A stuck pending implement or refine run holds a fleet slot that the retry
+          // logic below can never free because the run never reaches a terminal state. This
+          // cancel runs on a GitHub-hosted runner, so it works even when the fleet is full.
+          const stuckCutoff = Date.now() - 3600 * 1000; // 1 hour ago
+          let cancelledRuns = 0;
+          for (const run of await github.paginate(github.rest.actions.listWorkflowRuns, {
+            owner: context.repo.owner, repo: context.repo.repo, workflow_id: 'work-router.yml',
+            status: 'pending', per_page: 50,
+          })) {
+            if (new Date(run.created_at).getTime() > stuckCutoff) continue;
+            await act(`cancelling stuck pending run #${run.id} (queued ${new Date(run.created_at).toISOString()})`, async () => {
+              await github.rest.actions.cancelWorkflowRun({
+                owner: context.repo.owner, repo: context.repo.repo, run_id: run.id,
+              });
+              cancelledRuns += 1;
+            });
+          }
+
           const issues = await github.paginate(github.rest.issues.listForRepo, {
             ...context.repo, state: 'open', per_page: 100,
           });
@@ -74,6 +94,37 @@ runs:
           });
           const names = (issue) => issue.labels.map((l) => (typeof l === 'string' ? l : l.name));
 
+          // 0b. Clean orphaned bot-working labels. When a workflow run is cancelled (above) or
+          // dies without clearing bot-working, the issue sits with bot-working + a work label
+          // forever: no stalled marker, so the retry logic below never touches it. Find issues
+          // with bot-working, check whether the most recent run for the linked operation is
+          // still active, and if not, park the issue for retry.
+          for (const issue of issues) {
+            if (issue.pull_request) continue;
+            const labels = names(issue);
+            if (!labels.includes('bot-working')) continue;
+            // Don't touch issues that already have stalled or review — those are handled below.
+            if (labels.includes('stalled') || labels.includes('review')) continue;
+            const work = WORK_LABELS.find((l) => labels.includes(l));
+            if (!work) continue;
+
+            // An issue with bot-working should have a recent or active workflow run.
+            // If bot-working has been on for longer than the retry window, the run is dead.
+            const waited = age(issue.updated_at);
+            if (waited < retryAfterMs) continue;
+
+            await act(`#${issue.number}: releasing orphaned bot-working (parked ${Math.floor(waited / 3600000)}h with no active run)`, async () => {
+              // Park it for retry: add stalled + review, remove bot-working.
+              // The retry logic below will pick it up on the next sweep.
+              await github.rest.issues.addLabels({
+                ...context.repo, issue_number: issue.number,
+                labels: ['stalled', 'review'],
+              });
+              await github.rest.issues.removeLabel({ ...context.repo, issue_number: issue.number, name: 'bot-working' })
+                .catch((error) => { if (error.status !== 404) throw error; });
+            });
+          }
+
           const needsHuman = [];
           // Gate telemetry. Every disposition the gate has ever posted is already on a pull
           // request, marked, so the rate costs one extra listing rather than a store.
@@ -337,6 +388,7 @@ runs:
           await core.summary
             .addHeading('Housekeeping', 2)
             .addList([
+              `Cancelled stuck pending runs: ${cancelledRuns}`,
               `Retried: ${retried}`,
               `Waiting on a person: ${needsHuman.length}`,
               `Stalled, retrying by itself: ${retrying.length}`,

package/loops/workflows/agent-apply-review.md

@@ -81,6 +81,7 @@ jobs:
   # and gate both the reservation and the agent on it.
   still_open:
     runs-on: agents-arc
+    timeout-minutes: 5
     permissions:
       contents: read
       issues: read
@@ -99,6 +100,7 @@ jobs:
           issue-number: ${{ inputs.issue-number }}
   subject:
     runs-on: agents-arc
+    timeout-minutes: 5
     permissions:
       contents: read
       issues: read
@@ -168,6 +170,7 @@ jobs:
     needs: [subject, still_open]
     if: needs.subject.outputs.found == 'true' && needs.subject.outputs.issue != '' && needs.still_open.outputs.open == 'true'
     runs-on: agents-arc
+    timeout-minutes: 5
     permissions:
       contents: read
       issues: write

package/loops/workflows/agent-implement.md

@@ -110,6 +110,7 @@ jobs:
   # and gate both the reservation and the agent on it.
   still_open:
     runs-on: agents-arc
+    timeout-minutes: 5
     permissions:
       contents: read
       issues: read
@@ -128,6 +129,7 @@ jobs:
           issue-number: ${{ inputs.issue-number }}
   eligibility:
     runs-on: agents-arc
+    timeout-minutes: 5
     permissions:
       issues: read
     outputs:
@@ -175,6 +177,7 @@ jobs:
     needs: [eligibility, still_open]
     if: needs.eligibility.outputs.eligible == 'true' && needs.still_open.outputs.open == 'true'
     runs-on: agents-arc
+    timeout-minutes: 5
     permissions:
       contents: read
       issues: write

package/loops/workflows/agent-merge-gate.md

@@ -141,6 +141,7 @@ on:
 jobs:
   subject:
     runs-on: agents-arc
+    timeout-minutes: 5
     permissions:
       contents: read
       issues: read
@@ -196,6 +197,7 @@ jobs:
     needs: subject
     if: needs.subject.outputs.found == 'true'
     runs-on: agents-arc
+    timeout-minutes: 5
     permissions:
       contents: read
       pull-requests: read
@@ -242,6 +244,7 @@ jobs:
     # there are no protected files instead of skipping it and blocking remediation.
     if: always() && needs.subject.outputs.found == 'true'
     runs-on: agents-arc
+    timeout-minutes: 5
     permissions:
       contents: read
       issues: write
@@ -301,6 +304,7 @@ jobs:
     needs: subject
     if: needs.subject.outputs.found == 'true'
     runs-on: agents-arc
+    timeout-minutes: 5
     permissions:
       contents: read
       issues: write

package/loops/workflows/agent-refine.md

@@ -117,6 +117,7 @@ jobs:
   # and gate both the reservation and the agent on it.
   still_open:
     runs-on: agents-arc
+    timeout-minutes: 5
     permissions:
       contents: read
       issues: read
@@ -267,6 +268,7 @@ jobs:
     needs: [still_open, size_guard, eligibility]
     if: needs.still_open.outputs.open == 'true' && needs.eligibility.outputs.eligible == 'true' && needs.size_guard.outputs.too_big != 'true'
     runs-on: agents-arc
+    timeout-minutes: 5
     permissions:
       contents: read
       issues: write
@@ -692,6 +694,11 @@ safe-outputs:
   # under noise nobody closes.
   report-failure-as-issue: false
   threat-detection: false
+  # Stage the comment so it is only published after validate_output confirms the
+  # refined story is valid. Without staging, the agent's add_comment ("refinement
+  # complete") lands before validation, and a malformed output leaves the issue
+  # with a success comment and an incomplete status simultaneously (Pliny-Bot #383).
+  staged: true
   # The refined story replaces the issue body, which is one call carrying the whole
   # thing. The allowance is three rather than one because a single malformed call the
   # bridge accepts as spent would otherwise end the run with the body unwritten and a

package/loops/workflows/agent-triage.md

@@ -103,6 +103,7 @@ jobs:
   # and gate both the reservation and the agent on it.
   still_open:
     runs-on: agents-arc
+    timeout-minutes: 5
     permissions:
       contents: read
       issues: read
@@ -123,6 +124,7 @@ jobs:
     needs: [still_open]
     if: needs.still_open.outputs.open == 'true'
     runs-on: agents-arc
+    timeout-minutes: 5
     permissions:
       contents: read
       issues: write

package/loops/workflows/agent-visual-verify.md

@@ -53,6 +53,7 @@ on:
 jobs:
   subject:
     runs-on: agents-arc
+    timeout-minutes: 5
     permissions:
       contents: read
       issues: read

package/loops/workflows/work-router.yml

@@ -1204,6 +1204,8 @@ jobs:
       contents: write
       issues: write
       pull-requests: read
+      # actions: write cancels workflow runs stuck pending in the fleet queue.
+      actions: write
     env:
       BOT_APP_ID: ${{ secrets.BOT_APP_ID }}
       BOT_PRIVATE_KEY: ${{ secrets.BOT_PRIVATE_KEY }}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@plainconceptsplatform/workflows",
-  "version": "0.28.13",
+  "version": "0.28.14",
   "description": "Install and update Platform GitHub agentic workflows.",
   "keywords": [
     "github-actions",
@@ -9,12 +9,12 @@
   ],
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/PlainConceptsPlatform/Agentic-Workflows.git"
+    "url": "git+https://github.com/PlainConceptsPlatform/agentic-workflows.git"
   },
   "bugs": {
-    "url": "https://github.com/PlainConceptsPlatform/Agentic-Workflows/issues"
+    "url": "https://github.com/PlainConceptsPlatform/agentic-workflows/issues"
   },
-  "homepage": "https://github.com/PlainConceptsPlatform/Agentic-Workflows#readme",
+  "homepage": "https://github.com/PlainConceptsPlatform/agentic-workflows#readme",
   "license": "UNLICENSED",
   "type": "module",
   "bin": {