@plainconceptsplatform/workflows 0.4.34 → 0.5.1

package/loops/workflows/authorize-bot-work.yml

@@ -1,82 +1,85 @@
-# Human adds implement/refine/direct label → validates permission → bot adds bot-working
-# This ensures the bot is the actor for all agentic workflows.
-#
-# IMPORTANT: Only triggers for HUMAN actors. When the bot transitions refine→implement,
-# it adds bot-working itself, so authorize-bot-work must not fire again.
-name: "Authorize Bot Work"
-
-run-name: "Authorizing: ${{ github.event.issue.title }} (#${{ github.event.issue.number }})"
-
-on:
-  issues:
-    types: [labeled]
-
-permissions:
-  contents: read
-
-jobs:
-  authorize:
-    # Only trigger for implement/refine/direct labels from HUMANS (not bots),
-    # and only if neither another bot run nor human review currently owns the issue.
-    if: >
-      (github.event.label.name == 'implement' ||
-       github.event.label.name == 'refine' ||
-       github.event.label.name == 'direct') &&
-      !contains(github.event.issue.labels.*.name, 'bot-working') &&
-      !contains(github.event.issue.labels.*.name, 'review') &&
-      !endsWith(github.actor, '[bot]')
-    runs-on: RunnerLandingZone
-    timeout-minutes: 5
-    permissions:
-      contents: read
-      issues: write
-    steps:
-      - name: Check actor permission
-        id: check
-        env:
-          GH_TOKEN: ${{ github.token }}
-          ACTOR: ${{ github.actor }}
-        run: |
-          set -euo pipefail
-          
-          permission=$(gh api "repos/$GITHUB_REPOSITORY/collaborators/$ACTOR/permission" \
-            --jq '.permission' 2>/dev/null || echo "none")
-          
-          case "$permission" in
-            admin | maintain | write)
-              echo "authorized=true" >> "$GITHUB_OUTPUT"
-              echo "::notice::$ACTOR has $permission permission - authorized"
-              ;;
-            *)
-              echo "authorized=false" >> "$GITHUB_OUTPUT"
-              echo "::warning::$ACTOR has '$permission' permission - not authorized"
-              ;;
-          esac
-
-      - name: Checkout for App token action
-        if: steps.check.outputs.authorized == 'true'
-        uses: actions/checkout@v4
-        with:
-          persist-credentials: false
-
-      - name: Generate App token
-        if: steps.check.outputs.authorized == 'true'
-        id: app-token
-        uses: actions/create-github-app-token@v1
-        with:
-          app-id: ${{ secrets.BOT_APP_ID }}
-          private-key: ${{ secrets.BOT_PRIVATE_KEY }}
-
-      - name: Bot adds bot-working label
-        if: steps.check.outputs.authorized == 'true'
-        env:
-          GH_TOKEN: ${{ steps.app-token.outputs.token }}
-          ISSUE_NUMBER: ${{ github.event.issue.number }}
-          LABEL: ${{ github.event.label.name }}
-        run: |
-          set -euo pipefail
-          
-          echo "Adding bot-working label to issue #$ISSUE_NUMBER (triggered by $LABEL)"
-          gh issue edit "$ISSUE_NUMBER" --add-label "bot-working"
-          
-          echo "::notice::bot-working label added - bot will now own the $LABEL workflow"
+# Managed by @plainconceptsplatform/workflows. Source: loops/workflows/authorize-bot-work.yml. Update with `workflows update --force`; consumer edits may be overwritten.
+# Human adds implement/refine/direct/feature label → validates permission → bot adds bot-working
+# This ensures the bot is the actor for all agentic workflows.
+#
+# IMPORTANT: Only triggers for HUMAN actors. When the bot transitions refine→implement,
+# it adds bot-working itself, so authorize-bot-work must not fire again.
+name: "Authorize Bot Work"
+
+run-name: "Authorizing: ${{ github.event.issue.title }} (#${{ github.event.issue.number }})"
+
+on:
+  issues:
+    types: [labeled]
+
+permissions:
+  contents: read
+
+jobs:
+  authorize:
+    # Only trigger for work labels from HUMANS (not bots),
+    # and only if neither another bot run nor human review currently owns the issue.
+    if: >
+      (github.event.label.name == 'implement' ||
+       github.event.label.name == 'refine') &&
+      !contains(github.event.issue.labels.*.name, 'bot-working') &&
+      !contains(github.event.issue.labels.*.name, 'review') &&
+      !endsWith(github.actor, '[bot]')
+    runs-on: ubuntu-latest
+    timeout-minutes: 5
+    concurrency:
+      group: authorize-${{ github.event.issue.number }}
+      cancel-in-progress: false
+    permissions:
+      contents: read
+      issues: write
+    steps:
+      - name: Check actor permission
+        id: check
+        env:
+          GH_TOKEN: ${{ github.token }}
+          ACTOR: ${{ github.actor }}
+        run: |
+          set -euo pipefail
+          
+          permission=$(gh api "repos/$GITHUB_REPOSITORY/collaborators/$ACTOR/permission" \
+            --jq '.permission' 2>/dev/null || echo "none")
+          
+          case "$permission" in
+            admin | maintain | write)
+              echo "authorized=true" >> "$GITHUB_OUTPUT"
+              echo "::notice::$ACTOR has $permission permission - authorized"
+              ;;
+            *)
+              echo "authorized=false" >> "$GITHUB_OUTPUT"
+              echo "::warning::$ACTOR has '$permission' permission - not authorized"
+              ;;
+          esac
+
+      - name: Checkout for App token action
+        if: steps.check.outputs.authorized == 'true'
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          persist-credentials: false
+
+      - name: Generate App token
+        if: steps.check.outputs.authorized == 'true'
+        id: app-token
+        uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
+        with:
+          app-id: ${{ secrets.BOT_APP_ID }}
+          private-key: ${{ secrets.BOT_PRIVATE_KEY }}
+
+      - name: Bot adds bot-working label
+        if: steps.check.outputs.authorized == 'true'
+        env:
+          GH_TOKEN: ${{ steps.app-token.outputs.token }}
+          ISSUE_NUMBER: ${{ github.event.issue.number }}
+          LABEL: ${{ github.event.label.name }}
+        run: |
+          set -euo pipefail
+          
+          echo "Adding bot-working label to issue #$ISSUE_NUMBER (triggered by $LABEL)"
+          gh issue edit "$ISSUE_NUMBER" --add-label "bot-working"
+          
+          echo "::notice::bot-working label added - bot will now own the $LABEL workflow"

package/loops/workflows/shared/opencode-ci.md

@@ -1,197 +1,206 @@
----
-# Managed by @plainconceptsplatform/workflows. Source: loops/workflows/shared/opencode-ci.md. Update with `workflows update --force`; consumer edits may be overwritten.
-env:
-  AGENTMEMORY_VERSION: "0.9.28"
-  CODEGRAPH_VERSION: "1.5.0"
-  RTK_VERSION: "0.44.1"
-  RTK_SHA256: "986f29704469b3d1051e2474105c6c75ab8b73651068dcd61612c1fb3938ad95"
-description: |
-  Shared CI setup for Platform agent workflows. Installs pinned tooling and merges
-  opencode.ci.json into opencode.jsonc so the CI agent gets its provider and model config.
-
-  Consumer-specific steps (NuGet, .NET restore, OpenSpec, etc.) should be added after the
-  shared baseline in the consumer copy. The merge step below is package-owned and required
-  for the agent to resolve its provider and its models.
-
-# Consumer repositories should add stack-specific steps (NuGet cache, dotnet restore,
-# OpenSpec, Playwright, etc.) after the shared baseline. The merge step at the end is
-# package-owned and required for the agent to resolve its provider and models. Do not
-# remove it.
-pre-agent-steps:
-  - name: Create agent scratch directory
-    run: mkdir -p .opencode/.tmp
-
-  - name: Start OpenCode server (persistent warm server for faster agent runs)
-    run: |
-      set -euo pipefail
-
-      OPENCODE_PORT=4096
-      mkdir -p /tmp/opencode-data /tmp/gh-aw
-
-      # Check if server is already running
-      if curl -sf "http://127.0.0.1:${OPENCODE_PORT}/health" >/dev/null 2>&1; then
-        echo "OpenCode server already running on port ${OPENCODE_PORT}"
-        exit 0
-      fi
-
-      echo "Starting OpenCode server on port ${OPENCODE_PORT}..."
-      export XDG_DATA_HOME=/tmp/opencode-data
-      nohup opencode serve --port "${OPENCODE_PORT}" --hostname 127.0.0.1 \
-        > /tmp/gh-aw/opencode-server.log 2>&1 &
-
-      SERVER_PID=$!
-      echo "Server PID: ${SERVER_PID}"
-
-      # Wait for server to be ready (max 30 seconds)
-      for i in $(seq 1 30); do
-        if curl -sf "http://127.0.0.1:${OPENCODE_PORT}/health" >/dev/null 2>&1; then
-          echo "OpenCode server is ready on port ${OPENCODE_PORT}"
-          exit 0
-        fi
-        sleep 1
-      done
-
-      # Server didn't start in time - continue without it (agent will cold-start)
-      echo "::warning::OpenCode server did not start in 30s, agent will run without warm server"
-      kill "${SERVER_PID}" 2>/dev/null || true
-
-  - name: Install ripgrep
-    run: |
-      set -euo pipefail
-
-      if command -v rg > /dev/null 2>&1; then
-        echo "ripgrep already installed: $(rg --version | head -1)"
-        exit 0
-      fi
-
-      sudo apt-get update
-      sudo apt-get install --yes ripgrep
-      rg --version
-
-  - name: Activate the pnpm version package.json pins
-    run: |
-      set -euo pipefail
-      corepack enable
-      corepack prepare --activate
-      pnpm --version
-
-  - name: Cache the pnpm store
-    uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
-    with:
-      path: ~/.local/share/pnpm/store
-      key: pnpm-store-${{ runner.os }}-${{ hashFiles('pnpm-lock.yaml') }}
-      restore-keys: pnpm-store-${{ runner.os }}-
-
-  - name: Install RTK
-    run: |
-      set -euo pipefail
-
-      if command -v rtk > /dev/null 2>&1 && rtk --version 2>/dev/null | grep -q "${RTK_VERSION}"; then
-        echo "RTK ${RTK_VERSION} already installed"
-        exit 0
-      fi
-
-      tarball="$RUNNER_TEMP/rtk.tar.gz"
-      curl -fsSL -o "$tarball" \
-        "https://github.com/rtk-ai/rtk/releases/download/v${RTK_VERSION}/rtk-x86_64-unknown-linux-musl.tar.gz"
-      echo "${RTK_SHA256}  $tarball" | sha256sum --check --strict
-
-      tar -xzf "$tarball" -C "$RUNNER_TEMP"
-      sudo install -m 0755 "$RUNNER_TEMP/rtk" /usr/local/bin/rtk
-
-      rtk --version
-      rtk init -g --opencode --auto-patch
-
-  - name: Install agentmemory
-    run: |
-      set -euo pipefail
-
-      if command -v agentmemory > /dev/null 2>&1 && agentmemory --version 2>/dev/null | grep -q "${AGENTMEMORY_VERSION}"; then
-        echo "agentmemory ${AGENTMEMORY_VERSION} already installed"
-        exit 0
-      fi
-
-      npm install -g "@agentmemory/agentmemory@${AGENTMEMORY_VERSION}"
-      agentmemory --version
-
-  - name: Install codegraph and index the repository
-    continue-on-error: true
-    run: |
-      set -euo pipefail
-
-      if command -v codegraph > /dev/null 2>&1 && codegraph --version 2>/dev/null | grep -q "${CODEGRAPH_VERSION}"; then
-        echo "codegraph ${CODEGRAPH_VERSION} already installed"
-      else
-        npm install -g "@colbymchenry/codegraph@${CODEGRAPH_VERSION}"
-      fi
-
-      codegraph init
-
-  - name: Install OpenSpec CLI
-    run: |
-      set -euo pipefail
-
-      if command -v openspec > /dev/null 2>&1 && openspec --version 2>/dev/null | grep -q "1.8.0"; then
-        echo "openspec 1.8.0 already installed"
-        exit 0
-      fi
-
-      npm install -g "@fission-ai/openspec@1.8.0"
-      openspec --version
-
-  # NOTE: playwright-cli and SQL Server startup steps have been removed from the
-  # shared CI baseline. Visual evidence capture now runs in a separate "Visual
-  # evidence" workflow that executes on the raw runner (not inside the awf
-  # sandbox), where Docker and headless Chromium are available. The agent's
-  # /ops-evidence skill writes a capturePlan in evidence.json when blocked;
-  # the Visual Evidence workflow reads and executes it. If you need playwright-cli
-  # or SQL Server inside the agent sandbox for other reasons, add them as
-  # consumer-specific steps after the shared baseline.
-
-  - name: Cache NuGet packages
-    uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
-    with:
-      path: ~/.nuget/packages
-      key: nuget-${{ runner.os }}-${{ hashFiles('**/*.slnx', '**/Directory.Packages.props') }}
-      restore-keys: nuget-${{ runner.os }}-
-
-  - name: Install workspace dependencies
-    run: pnpm install --frozen-lockfile
-
-  - name: Merge the CI-only OpenCode provider into opencode.jsonc
-    run: |
-      set -euo pipefail
-
-      CONFIG=opencode.jsonc
-      FRAGMENT=opencode.ci.json
-
-      [ -f "$FRAGMENT" ] || { echo "::error::$FRAGMENT is missing from the checkout"; exit 1; }
-
-      # Pure JSON on purpose, not JSONC: jq cannot parse `//` comments, and a naive
-      # comment-stripper would corrupt the `http://` inside the provider's api URL.
-      jq -e . "$FRAGMENT" > /dev/null \
-        || { echo "::error::$FRAGMENT is not valid JSON. Comments are not allowed in it."; exit 1; }
-
-      # Despite the .jsonc name, this file is committed in this repository and is read by
-      # jq below, so it must contain no comments. A single `//` line fails the merge with
-      # "Invalid numeric literal", which names neither the file nor the reason.
-      if [ -f "$CONFIG" ] && ! jq -e . "$CONFIG" > /dev/null 2>&1; then
-        echo "::error::$CONFIG is tracked and must be comment-free JSON: jq cannot parse it."
-        exit 1
-      fi
-
-      # opencode.jsonc is untracked in most repositories, so it usually does not exist here.
-      # Create it from the fragment when absent, merge when a checkout did provide one.
-      if [ -f "$CONFIG" ]; then
-        merged=$(jq -s '.[0] * .[1]' "$CONFIG" "$FRAGMENT")
-      else
-        merged=$(jq -S . "$FRAGMENT")
-      fi
-      printf '%s\n' "$merged" > "$CONFIG"
-
-      # gh-aw's own "Write OpenCode Config" step runs next and merges its base config with
-      # `$existing * $base`. Base wins on conflicting keys, but it defines neither `model`
-      # nor this provider, so both survive and `awf-proxy` is added alongside.
-      echo "Wrote $CONFIG from $FRAGMENT:"
-      jq -r '"  model: \(.model // "unset")", "  plugins: \(.plugin // [] | join(", "))", "  providers: \(.provider // {} | keys | join(", "))"' "$CONFIG"
----
+---
+# Managed by @plainconceptsplatform/workflows. Source: loops/workflows/shared/opencode-ci.md. Update with `workflows update --force`; consumer edits may be overwritten.
+env:
+  AGENTMEMORY_VERSION: "0.9.28"
+  CODEGRAPH_VERSION: "1.6.0"
+  RTK_VERSION: "0.44.1"
+  RTK_SHA256: "986f29704469b3d1051e2474105c6c75ab8b73651068dcd61612c1fb3938ad95"
+description: |
+  Shared CI setup for Platform agent workflows. Installs pinned tooling and merges
+  opencode.ci.json into opencode.jsonc so the CI agent gets its provider and model config.
+
+  Consumer-specific steps (NuGet, .NET restore, OpenSpec, etc.) should be added after the
+  shared baseline in the consumer copy. The merge step below is package-owned and required
+  for the agent to resolve its provider and its models.
+
+# Consumer repositories should add stack-specific steps (NuGet cache, dotnet restore,
+# OpenSpec, Playwright, etc.) after the shared baseline. The merge step at the end is
+# package-owned and required for the agent to resolve its provider and models. Do not
+# remove it.
+pre-agent-steps:
+  - name: Create agent scratch directory
+    run: mkdir -p .opencode/.tmp
+
+  - name: Install the Docker Compose plugin
+    # The ARC runner image ships the docker CLI without the compose plugin, and awf drives its
+    # sandbox with `docker compose up`. User-space install; no root required.
+    run: |
+      set -euo pipefail
+      if docker compose version >/dev/null 2>&1; then
+        echo "compose already present"; exit 0
+      fi
+      mkdir -p "$HOME/.docker/cli-plugins"
+      curl -sSfL "https://github.com/docker/compose/releases/download/v2.39.2/docker-compose-linux-x86_64"         -o "$HOME/.docker/cli-plugins/docker-compose"
+      chmod +x "$HOME/.docker/cli-plugins/docker-compose"
+      docker compose version
+
+  - name: Install ripgrep
+    run: |
+      set -euo pipefail
+
+      if command -v rg > /dev/null 2>&1; then
+        echo "ripgrep already installed: $(rg --version | head -1)"
+        exit 0
+      fi
+
+      # ARC runner pods have no root, so ripgrep comes from its release tarball into a
+      # user-writable prefix instead of apt.
+      mkdir -p "$HOME/.local/bin"
+      curl -sSfL https://github.com/BurntSushi/ripgrep/releases/download/14.1.1/ripgrep-14.1.1-x86_64-unknown-linux-musl.tar.gz         | tar -xz --strip-components=1 -C "$HOME/.local/bin" --wildcards "*/rg"
+      echo "$HOME/.local/bin" >> "$GITHUB_PATH"
+      rg --version
+
+  - name: Activate the pnpm version package.json pins
+    run: |
+      set -euo pipefail
+      corepack enable
+      corepack prepare --activate
+      pnpm --version
+
+  - name: Cache the pnpm store
+    uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
+    with:
+      path: ~/.local/share/pnpm/store
+      key: pnpm-store-${{ runner.os }}-${{ hashFiles('pnpm-lock.yaml') }}
+      restore-keys: pnpm-store-${{ runner.os }}-
+
+  - name: Install RTK
+    run: |
+      set -euo pipefail
+
+      if command -v rtk > /dev/null 2>&1 && rtk --version 2>/dev/null | grep -q "${RTK_VERSION}"; then
+        echo "RTK ${RTK_VERSION} already installed"
+        exit 0
+      fi
+
+      tarball="$RUNNER_TEMP/rtk.tar.gz"
+      curl -fsSL -o "$tarball" \
+        "https://github.com/rtk-ai/rtk/releases/download/v${RTK_VERSION}/rtk-x86_64-unknown-linux-musl.tar.gz"
+      echo "${RTK_SHA256}  $tarball" | sha256sum --check --strict
+
+      tar -xzf "$tarball" -C "$RUNNER_TEMP"
+      mkdir -p "$HOME/.local/bin"
+      install -m 0755 "$RUNNER_TEMP/rtk" "$HOME/.local/bin/rtk"
+      echo "$HOME/.local/bin" >> "$GITHUB_PATH"
+
+      rtk --version
+      rtk init -g --opencode --auto-patch
+
+  - name: Install agentmemory
+    run: |
+      set -euo pipefail
+
+      if command -v agentmemory > /dev/null 2>&1 && agentmemory --version 2>/dev/null | grep -q "${AGENTMEMORY_VERSION}"; then
+        echo "agentmemory ${AGENTMEMORY_VERSION} already installed"
+        exit 0
+      fi
+
+      npm install -g "@agentmemory/agentmemory@${AGENTMEMORY_VERSION}"
+      agentmemory --version
+
+  - name: Restore the CodeGraph index
+    # Ephemeral ARC runners start empty, so without this every run rebuilds the whole graph.
+    # actions/cache is repository-scoped by design, which keeps consumers isolated, and
+    # each run saves an immutable snapshot under its own key at job end (the action's built-in
+    # post step), so two concurrent runs never write the same entry: the newest snapshot simply
+    # wins the next restore. The index lives in .codegraph inside the checkout plus a small
+    # registry in ~/.codegraph.
+    uses: actions/cache@v4
+    with:
+      path: |
+        .codegraph
+        ~/.codegraph
+      key: codegraph-${{ github.repository_id }}-${{ github.run_id }}
+      restore-keys: |
+        codegraph-${{ github.repository_id }}-
+
+  - name: Install codegraph and index the repository
+    continue-on-error: true
+    run: |
+      set -euo pipefail
+
+      if command -v codegraph > /dev/null 2>&1 && codegraph --version 2>/dev/null | grep -q "${CODEGRAPH_VERSION}"; then
+        echo "codegraph ${CODEGRAPH_VERSION} already installed"
+      else
+        npm install -g "@colbymchenry/codegraph@${CODEGRAPH_VERSION}"
+      fi
+
+      codegraph init
+
+  - name: Install OpenSpec CLI
+    run: |
+      set -euo pipefail
+
+      if command -v openspec > /dev/null 2>&1 && openspec --version 2>/dev/null | grep -q "1.8.0"; then
+        echo "openspec 1.8.0 already installed"
+        exit 0
+      fi
+
+      npm install -g "@fission-ai/openspec@1.8.0"
+      openspec --version
+
+  # NOTE: playwright-cli and SQL Server startup steps are not part of the shared CI
+  # baseline. The agent path captures no visual evidence: it cannot reach a browser
+  # from inside the awf sandbox, and a screenshot with no baseline to compare against
+  # gated nothing. Run /ops-evidence locally when a change warrants screenshots. If
+  # you need playwright-cli or SQL Server inside the agent sandbox for other reasons,
+  # add them as consumer-specific steps after the shared baseline.
+
+  - name: Setup .NET
+    # Ephemeral VMs carry no SDK; the old host had it baked in, and GitHub-hosted images made
+    # the dependency invisible. setup-dotnet caches per run from the MS CDN.
+    uses: actions/setup-dotnet@v5
+    with:
+      dotnet-version: 10.0.x
+    env:
+      # the default /usr/share/dotnet needs root; the tool cache belongs to the runner user
+      DOTNET_INSTALL_DIR: ${{ runner.tool_cache }}/dotnet
+
+  - name: Cache NuGet packages
+    uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
+    with:
+      path: ~/.nuget/packages
+      key: nuget-${{ runner.os }}-${{ hashFiles('**/*.slnx', '**/Directory.Packages.props') }}
+      restore-keys: nuget-${{ runner.os }}-
+
+  - name: Install workspace dependencies
+    run: pnpm install --frozen-lockfile
+
+  - name: Merge the CI-only OpenCode provider into opencode.jsonc
+    run: |
+      set -euo pipefail
+
+      CONFIG=opencode.jsonc
+      FRAGMENT=opencode.ci.json
+
+      [ -f "$FRAGMENT" ] || { echo "::error::$FRAGMENT is missing from the checkout"; exit 1; }
+
+      # Pure JSON on purpose, not JSONC: jq cannot parse `//` comments, and a naive
+      # comment-stripper would corrupt the `http://` inside the provider's api URL.
+      jq -e . "$FRAGMENT" > /dev/null \
+        || { echo "::error::$FRAGMENT is not valid JSON. Comments are not allowed in it."; exit 1; }
+
+      # Despite the .jsonc name, this file is committed in this repository and is read by
+      # jq below, so it must contain no comments. A single `//` line fails the merge with
+      # "Invalid numeric literal", which names neither the file nor the reason.
+      if [ -f "$CONFIG" ] && ! jq -e . "$CONFIG" > /dev/null 2>&1; then
+        echo "::error::$CONFIG is tracked and must be comment-free JSON: jq cannot parse it."
+        exit 1
+      fi
+
+      # opencode.jsonc is untracked in most repositories, so it usually does not exist here.
+      # Create it from the fragment when absent, merge when a checkout did provide one.
+      if [ -f "$CONFIG" ]; then
+        merged=$(jq -s '.[0] * .[1]' "$CONFIG" "$FRAGMENT")
+      else
+        merged=$(jq -S . "$FRAGMENT")
+      fi
+
+      printf '%s\n' "$merged" > "$CONFIG"
+
+      # gh-aw's own "Write OpenCode Config" step runs next and merges its base config with
+      # `$existing * $base`. Base wins on conflicting keys, but it defines neither `model`
+      # nor this provider, so both survive and `awf-proxy` is added alongside.
+      echo "Wrote $CONFIG from $FRAGMENT:"
+      jq -r '"  model: \(.model // "unset")", "  plugins: \(.plugin // [] | join(", "))", "  providers: \(.provider // {} | keys | join(", "))"' "$CONFIG"
+---

package/loops/workflows/shared/platform-defaults.md

@@ -1,16 +1,19 @@
----
-# Managed by @plainconceptsplatform/workflows. Source: loops/workflows/shared/platform-defaults.md. Update with `workflows update --force`; consumer edits may be overwritten.
-description: Shared network and safe-output defaults for catalog agent workflows.
-
-network:
-  allowed:
-    - defaults
-    - forge.plainconcepts.com
-    - node
-    - github
-    - dotnet
-    - fonts
-
-safe-outputs:
-  threat-detection: false
----
+---
+# Managed by @plainconceptsplatform/workflows. Source: loops/workflows/shared/platform-defaults.md. Update with `workflows update --force`; consumer edits may be overwritten.
+description: Shared network and safe-output defaults for catalog agent workflows.
+
+network:
+  allowed:
+    - defaults
+    - forge.plainconcepts.com
+    - node
+    - github
+    - dotnet
+    - fonts
+    - login.microsoftonline.com
+    # centralised AgentMemory (App Service); the MCP shim needs it through the egress proxy
+    - agentmemory-pro-01.azurewebsites.net
+
+safe-outputs:
+  threat-detection: false
+---