@plainconceptsplatform/workflows 0.6.1 → 0.16.2

package/loops/workflows/agent-release.md

@@ -1,258 +1,244 @@
----
-# Managed by @plainconceptsplatform/workflows. Source: loops/workflows/agent-release.md. Update with `workflows update --force`; consumer edits may be overwritten.
-env:
-  GIT_AUTHOR_NAME: "github-actions[bot]"
-  GIT_AUTHOR_EMAIL: "github-actions[bot]@users.noreply.github.com"
-  GIT_COMMITTER_NAME: "github-actions[bot]"
-  GIT_COMMITTER_EMAIL: "github-actions[bot]@users.noreply.github.com"
-description: |
-  Generates release notes from the commit log and creates a tagged GitHub Release.
-  The agent writes human-readable release notes; every other step (version bump,
-  commit, tag, push, release creation) is deterministic.
-
-  Router-only worker: triggered exclusively via workflow_call from work-router.yml.
-  Contract input: version-bump(patch|minor|major|auto).
-
-name: "Agent: Release"
-
-imports:
-  - github/gh-aw/.github/workflows/shared/opencode.md@v0.87.5
-  - shared/platform-defaults.md
-  - shared/opencode-ci.md
-
-on:
-  workflow_call:
-    inputs:
-      version-bump:
-        description: "Version bump strategy: patch, minor, major, or auto"
-        required: false
-        type: string
-        default: "auto"
-
-runs-on: agents-arc
-runs-on-slim: agents-arc
-
-secrets:
-  OPENAI_API_KEY: ${{ secrets.OPENAI_API_KEY }}
-
-engine:
-  id: opencode
-  version: "1.2.14"
-  env:
-    OPENAI_BASE_URL: https://forge.plainconcepts.com/v1
-
-model: openai/glm-5-3
-
-max-turns: 100
-max-turn-cache-misses: 3000
-max-ai-credits: 2000
-
-permissions: read-all
-
-checkout:
-  fetch: ["*"]
-  fetch-depth: 0
-
-steps:
-  - name: Prepare release context
-    env:
-      GH_TOKEN: ${{ github.token }}
-      REPO: ${{ github.repository }}
-    run: |
-      set -euo pipefail
-      mkdir -p /tmp/gh-aw/agent
-
-      last_tag=$(git describe --tags --abbrev=0 2>/dev/null || echo "")
-      if [ -n "$last_tag" ]; then
-        git log --oneline --no-decorate "${last_tag}..HEAD" > /tmp/gh-aw/agent/git-log.txt
-      else
-        git log --oneline --no-decorate -50 > /tmp/gh-aw/agent/git-log.txt
-      fi
-
-      version=$(node -p "require('./package.json').version" 2>/dev/null || echo "0.0.0")
-      echo "$version" > /tmp/gh-aw/agent/current-version.txt
-
-      echo "Last tag: ${last_tag:-none}"
-      echo "Current version: $version"
-
-safe-outputs:
-  report-failure-as-issue: false
-  threat-detection: false
-  noop:
-    max: 1
-
-timeout-minutes: 30
-
-jobs:
-  conclude:
-    needs: [activation, agent, safe_outputs]
-    if: >
-      always() &&
-      needs.agent.result == 'success' &&
-      needs.safe_outputs.result == 'success'
-    runs-on: agents-arc
-    permissions:
-      contents: write
-    steps:
-      - name: Download agent output artifact
-        id: download-agent-output
-        continue-on-error: true
-        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
-        with:
-          pattern: "{${{ needs.activation.outputs.artifact_prefix }}agent,${{ needs.activation.outputs.artifact_prefix }}agent-output-fallback}"
-          merge-multiple: true
-          path: /tmp/gh-aw/
-      - name: Checkout repository
-        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
-        with:
-          token: ${{ github.token }}
-          fetch-depth: 0
-      - name: Read release notes and determine version
-        id: release
-        env:
-          VERSION_BUMP: ${{ inputs.version-bump }}
-        run: |
-          set -euo pipefail
-
-          notes="/tmp/gh-aw/agent/release-notes.md"
-          if [ ! -f "$notes" ]; then
-            echo "::error::Agent did not write release-notes.md"
-            exit 1
-          fi
-
-          current=$(node -p "require('./package.json').version" 2>/dev/null || echo "0.0.0")
-          echo "current_version=$current" >> "$GITHUB_OUTPUT"
-
-          # Determine the version bump
-          bump="$VERSION_BUMP"
-          if [ "$bump" = "auto" ]; then
-            if grep -qiE 'BREAKING CHANGE' "$notes" || grep -qE '\w+\(!:' /tmp/gh-aw/agent/git-log.txt; then
-              bump="major"
-            elif grep -qE '^feat(\(.+\))?:' /tmp/gh-aw/agent/git-log.txt; then
-              bump="minor"
-            else
-              bump="patch"
-            fi
-          fi
-
-          # Semver bump
-          IFS='.' read -r major minor patch <<< "$current"
-          case "$bump" in
-            major) major=$((major + 1)); minor=0; patch=0 ;;
-            minor) minor=$((minor + 1)); patch=0 ;;
-            patch) patch=$((patch + 1)) ;;
-            *) echo "::error::Unknown version-bump: $bump"; exit 1 ;;
-          esac
-          new_version="${major}.${minor}.${patch}"
-          echo "new_version=$new_version" >> "$GITHUB_OUTPUT"
-          echo "Determined version: $current -> $new_version (bump: $bump)"
-
-          # Copy notes to a clean location the release step can read
-          cp "$notes" /tmp/release-notes.md
-      - name: Bump version in package.json
-        env:
-          NEW_VERSION: ${{ steps.release.outputs.new_version }}
-        run: |
-          set -euo pipefail
-          node -e "
-            const fs = require('fs');
-            for (const file of ['package.json', 'cli/package.json']) {
-              if (fs.existsSync(file)) {
-                const pkg = JSON.parse(fs.readFileSync(file, 'utf8'));
-                pkg.version = process.env.NEW_VERSION;
-                fs.writeFileSync(file, JSON.stringify(pkg, null, 2) + '\n');
-                console.log('Bumped ' + file + ' to ' + process.env.NEW_VERSION);
-              }
-            }
-          "
-      - name: Commit, tag, and push
-        env:
-          NEW_VERSION: ${{ steps.release.outputs.new_version }}
-          GH_TOKEN: ${{ github.token }}
-        run: |
-          set -euo pipefail
-          git config user.name "github-actions[bot]"
-          git config user.email "github-actions[bot]@users.noreply.github.com"
-          git add package.json
-          [ -f cli/package.json ] && git add cli/package.json
-          git commit -m "chore(release): v${NEW_VERSION}"
-          git tag "v${NEW_VERSION}"
-          git push
-          git push --tags
-          echo "Tagged v${NEW_VERSION} and pushed."
-      - name: Create GitHub Release
-        env:
-          NEW_VERSION: ${{ steps.release.outputs.new_version }}
-          GH_TOKEN: ${{ github.token }}
-        run: |
-          set -euo pipefail
-          gh release create "v${NEW_VERSION}" \
-            --repo "$GITHUB_REPOSITORY" \
-            --title "v${NEW_VERSION}" \
-            --notes-file /tmp/release-notes.md
-          echo "GitHub Release v${NEW_VERSION} created."
-
-  incomplete:
-    needs: [agent, safe_outputs]
-    if: >
-      always() &&
-      (needs.agent.result != 'success' || needs.safe_outputs.result != 'success')
-    runs-on: agents-arc
-    permissions:
-      contents: read
-    steps:
-      - name: Report release failure
-        run: |
-          echo "::error::Release agent did not complete successfully."
-          echo "The release was not created. Check the agent logs."
-          exit 1
-
----
-
-1. Read `/tmp/gh-aw/agent/git-log.txt`. It contains the commit log since the last
-   tag (or the last 50 commits if no tag exists).
-
-2. Read `/tmp/gh-aw/agent/current-version.txt` for the current version.
-
-3. Categorize commits by conventional-commit prefix:
-   - `feat:` / `feat(scope):` → Features
-   - `fix:` / `fix(scope):` → Bug Fixes
-   - `chore:` / `chore(scope):` → Maintenance
-   - `docs:` → Documentation
-   - `refactor:` → Refactoring
-   - `perf:` → Performance
-   - Any `BREAKING CHANGE` footer or `!:` prefix → Breaking Changes (top of the notes)
-
-4. Write structured release notes in markdown to `/tmp/gh-aw/agent/release-notes.md`.
-   Format:
-   - A `## What's Changed` heading
-   - Breaking Changes section first (if any)
-   - Grouped sections: `### Features`, `### Bug Fixes`, etc.
-   - One bullet per commit with the commit message (not the hash)
-   - A `**Full Changelog**: <last-tag>...<new-tag>` line at the end
-   - Keep it concise and factual. Do not invent changes that are not in the log.
-
-5. Call `noop` and stop. The deterministic `conclude` job reads the notes you wrote
-   and handles version bumping, tagging, and release creation.
-
-## Diagram
-
-```mermaid
-flowchart TD
-    relStart("Work Router<br/>release route<br/>(manual dispatch)") --> relActivation
-    relActivation("Activation<br/>Prepare prompt + env") --> relPreAgent
-    relPreAgent["Pre-agent<br/>Write git log + version to /tmp"] --> relAgent
-    relAgent["Agent<br/>Read commit log<br/>Write release-notes.md"] --> relNoop
-    relNoop("Safe Outputs<br/>Process noop") --> relConclude
-    relConclude["Conclude<br/>Bump version, commit, tag<br/>push, create GitHub Release"]
-    relConclude --> relDone(("Released<br/>Tag + GitHub Release created"))
-    relConclude -.->|failure| relFail(("Failed<br/>No tag created"))
-    classDef start fill:#ffffff,stroke:#172033,stroke-width:2px,color:#172033
-    classDef action fill:#eef0ff,stroke:#554cff,stroke-width:2px,color:#172033
-    classDef success fill:#e8f8ec,stroke:#18883c,stroke-width:2px,color:#145a32
-    classDef failure fill:#fff0f0,stroke:#ef2929,stroke-width:2px,color:#8b1a2a
-    class relStart start
-    class relActivation,relPreAgent,relAgent action
-    class relDone success
-    class relFail failure
-```
+---
+# Managed by @plainconceptsplatform/workflows. Source: loops/workflows/agent-release.md. Update with `workflows update --force`; consumer edits may be overwritten.
+env:
+  GIT_AUTHOR_NAME: "github-actions[bot]"
+  GIT_AUTHOR_EMAIL: "github-actions[bot]@users.noreply.github.com"
+  GIT_COMMITTER_NAME: "github-actions[bot]"
+  GIT_COMMITTER_EMAIL: "github-actions[bot]@users.noreply.github.com"
+description: |
+  Generates release notes from the commit log and creates a tagged GitHub Release.
+  The agent writes human-readable release notes; every other step (version bump,
+  commit, tag, push, release creation) is deterministic.
+
+  Router-only worker: triggered exclusively via workflow_call from work-router.yml.
+  Contract input: version-bump(patch|minor|major|auto).
+
+name: "Agent: Release"
+
+imports:
+  - github/gh-aw/.github/workflows/shared/opencode.md@v0.87.5
+  - shared/platform-defaults.md
+  - shared/opencode-ci.md
+
+on:
+  workflow_call:
+    inputs:
+      version-bump:
+        description: "Version bump strategy: patch, minor, major, or auto"
+        required: false
+        type: string
+        default: "auto"
+
+runs-on: agents-arc
+runs-on-slim: agents-arc
+
+secrets:
+  OPENAI_API_KEY: ${{ secrets.OPENAI_API_KEY }}
+
+engine:
+  id: opencode
+  version: "1.2.14"
+  env:
+    OPENAI_BASE_URL: https://forge.plainconcepts.com/v1
+
+model: openai/glm-5-3
+
+max-turns: 100
+max-turn-cache-misses: 3000
+max-ai-credits: 2000
+
+permissions: read-all
+
+checkout:
+  fetch: ["*"]
+  fetch-depth: 0
+
+steps:
+  - name: Prepare release context
+    env:
+      GH_TOKEN: ${{ github.token }}
+      REPO: ${{ github.repository }}
+    run: |
+      set -euo pipefail
+      mkdir -p /tmp/gh-aw/agent
+
+      last_tag=$(git describe --tags --abbrev=0 2>/dev/null || echo "")
+      if [ -n "$last_tag" ]; then
+        git log --oneline --no-decorate "${last_tag}..HEAD" > /tmp/gh-aw/agent/git-log.txt
+      else
+        git log --oneline --no-decorate -50 > /tmp/gh-aw/agent/git-log.txt
+      fi
+
+      version=$(node -p "require('./package.json').version" 2>/dev/null || echo "0.0.0")
+      echo "$version" > /tmp/gh-aw/agent/current-version.txt
+
+      echo "Last tag: ${last_tag:-none}"
+      echo "Current version: $version"
+
+safe-outputs:
+  report-failure-as-issue: false
+  threat-detection: false
+  noop:
+    max: 1
+
+# The fleet is two machines, so this clock is also how long a stuck run can hold half of it.
+# 240 went on to every worker at once when the provider was slow, which fixed the deaths and
+# made every worker equally expensive to hang. These numbers are per worker: enough headroom
+# for a slow gateway on the work it actually does, and not four hours for a run that reads one
+# issue. Turns remain the guard against a confused agent looping; for a custom model the credit
+# ceiling is models.dev fallback pricing and guards nothing.
+#
+# Reads a commit log already on disk and writes release notes. Nothing else.
+timeout-minutes: 30
+
+jobs:
+  conclude:
+    needs: [activation, agent, safe_outputs]
+    if: >
+      always() &&
+      needs.agent.result == 'success' &&
+      needs.safe_outputs.result == 'success'
+    runs-on: agents-arc
+    permissions:
+      contents: write
+    steps:
+      - name: Download agent output artifact
+        id: download-agent-output
+        continue-on-error: true
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+        with:
+          pattern: "{${{ needs.activation.outputs.artifact_prefix }}agent,${{ needs.activation.outputs.artifact_prefix }}agent-output-fallback}"
+          merge-multiple: true
+          path: /tmp/gh-aw/
+      - name: Checkout repository
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          token: ${{ github.token }}
+          fetch-depth: 0
+      - name: Read release notes and determine version
+        id: release
+        env:
+          VERSION_BUMP: ${{ inputs.version-bump }}
+        run: |
+          set -euo pipefail
+
+          notes="/tmp/gh-aw/agent/release-notes.md"
+          if [ ! -f "$notes" ]; then
+            echo "::error::Agent did not write release-notes.md"
+            exit 1
+          fi
+
+          current=$(node -p "require('./package.json').version" 2>/dev/null || echo "0.0.0")
+          echo "current_version=$current" >> "$GITHUB_OUTPUT"
+
+          # Determine the version bump
+          bump="$VERSION_BUMP"
+          if [ "$bump" = "auto" ]; then
+            if grep -qiE 'BREAKING CHANGE' "$notes" || grep -qE '\w+\(!:' /tmp/gh-aw/agent/git-log.txt; then
+              bump="major"
+            elif grep -qE '^feat(\(.+\))?:' /tmp/gh-aw/agent/git-log.txt; then
+              bump="minor"
+            else
+              bump="patch"
+            fi
+          fi
+
+          # Semver bump
+          IFS='.' read -r major minor patch <<< "$current"
+          case "$bump" in
+            major) major=$((major + 1)); minor=0; patch=0 ;;
+            minor) minor=$((minor + 1)); patch=0 ;;
+            patch) patch=$((patch + 1)) ;;
+            *) echo "::error::Unknown version-bump: $bump"; exit 1 ;;
+          esac
+          new_version="${major}.${minor}.${patch}"
+          echo "new_version=$new_version" >> "$GITHUB_OUTPUT"
+          echo "Determined version: $current -> $new_version (bump: $bump)"
+
+          # Copy notes to a clean location the release step can read
+          cp "$notes" /tmp/release-notes.md
+      - name: Bump version in package.json
+        env:
+          NEW_VERSION: ${{ steps.release.outputs.new_version }}
+        run: |
+          set -euo pipefail
+          node -e "
+            const fs = require('fs');
+            for (const file of ['package.json', 'cli/package.json']) {
+              if (fs.existsSync(file)) {
+                const pkg = JSON.parse(fs.readFileSync(file, 'utf8'));
+                pkg.version = process.env.NEW_VERSION;
+                fs.writeFileSync(file, JSON.stringify(pkg, null, 2) + '\n');
+                console.log('Bumped ' + file + ' to ' + process.env.NEW_VERSION);
+              }
+            }
+          "
+      - name: Commit, tag, and push
+        env:
+          NEW_VERSION: ${{ steps.release.outputs.new_version }}
+          GH_TOKEN: ${{ github.token }}
+        run: |
+          set -euo pipefail
+          git config user.name "github-actions[bot]"
+          git config user.email "github-actions[bot]@users.noreply.github.com"
+          git add package.json
+          [ -f cli/package.json ] && git add cli/package.json
+          git commit -m "chore(release): v${NEW_VERSION}"
+          git tag "v${NEW_VERSION}"
+          git push
+          git push --tags
+          echo "Tagged v${NEW_VERSION} and pushed."
+      - name: Create GitHub Release
+        env:
+          NEW_VERSION: ${{ steps.release.outputs.new_version }}
+          GH_TOKEN: ${{ github.token }}
+        run: |
+          set -euo pipefail
+          gh release create "v${NEW_VERSION}" \
+            --repo "$GITHUB_REPOSITORY" \
+            --title "v${NEW_VERSION}" \
+            --notes-file /tmp/release-notes.md
+          echo "GitHub Release v${NEW_VERSION} created."
+
+  incomplete:
+    needs: [agent, safe_outputs]
+    if: >
+      always() &&
+      (needs.agent.result != 'success' || needs.safe_outputs.result != 'success')
+    runs-on: agents-arc
+    permissions:
+      contents: read
+    steps:
+      - name: Report release failure
+        run: |
+          echo "::error::Release agent did not complete successfully."
+          echo "The release was not created. Check the agent logs."
+          exit 1
+
+---
+
+1. Read `/tmp/gh-aw/agent/git-log.txt`. It contains the commit log since the last
+   tag (or the last 50 commits if no tag exists).
+
+2. Read `/tmp/gh-aw/agent/current-version.txt` for the current version.
+
+3. Categorize commits by conventional-commit prefix:
+   - `feat:` / `feat(scope):` → Features
+   - `fix:` / `fix(scope):` → Bug Fixes
+   - `chore:` / `chore(scope):` → Maintenance
+   - `docs:` → Documentation
+   - `refactor:` → Refactoring
+   - `perf:` → Performance
+   - Any `BREAKING CHANGE` footer or `!:` prefix → Breaking Changes (top of the notes)
+
+4. Write structured release notes in markdown to `/tmp/gh-aw/agent/release-notes.md`.
+   Format:
+   - A `## What's Changed` heading
+   - Breaking Changes section first (if any)
+   - Grouped sections: `### Features`, `### Bug Fixes`, etc.
+   - One bullet per commit with the commit message (not the hash)
+   - A `**Full Changelog**: <last-tag>...<new-tag>` line at the end
+   - Keep it concise and factual. Do not invent changes that are not in the log.
+
+5. Call `noop` and stop. The deterministic `conclude` job reads the notes you wrote
+   and handles version bumping, tagging, and release creation.