@plainconceptsplatform/workflows 1.14.0 → 1.15.0

package/dist/workflow-catalog.d.ts

@@ -19,7 +19,7 @@ export interface MandatoryFile {
 }
 export declare const mandatoryFiles: readonly MandatoryFile[];
 export declare const generatedConsumerTargets: readonly [".github/workflows/agent-*.lock.yml", ".github/aw/actions-lock.json"];
-export declare const templateNames: readonly ["agentics-app-errors", "agentics-checks", "agentics-error-report", "agentics-maintenance", "app-ci-dotnet-next", "app-ci-node-monorepo", "bug-report", "dependabot-merge", "feature-request", "github-release", "opencode.ci.json", "platform-template", "quality-gates"];
+export declare const templateNames: readonly ["agentics-app-errors", "agentics-checks", "agentics-maintenance", "app-ci-dotnet-next", "app-ci-node-monorepo", "bug-report", "dependabot-merge", "feature-request", "github-release", "opencode.ci.json", "platform-template", "quality-gates"];
 export type TemplateName = (typeof templateNames)[number];
 export interface CatalogTemplate {
     readonly name: TemplateName;

package/dist/workflow-catalog.js

@@ -52,7 +52,6 @@ export const generatedConsumerTargets = [
 export const templateNames = [
     "agentics-app-errors",
     "agentics-checks",
-    "agentics-error-report",
     "agentics-maintenance",
     "app-ci-dotnet-next",
     "app-ci-node-monorepo",
@@ -67,7 +66,6 @@ export const templateNames = [
 export const catalogTemplates = [
     { name: "agentics-app-errors", file: "agentics-app-errors.yml", description: "Daily application error report: asks Application Insights what the deployed app threw, groups it, and files one issue per distinct problem HERE, labelled bug + refine so the belt picks it up. Deterministic, no model; the report never leaves this repository, and a leak scanner withholds anything carrying an identifier." },
     { name: "agentics-checks", file: "agentics-checks.yml", description: "Agentics checks: verifies generated agent lockfiles, actionlint, and compile on PRs touching workflow files." },
-    { name: "agentics-error-report", file: "agentics-error-report.yml", description: "Daily error report: classifies the last day of failures in the workflows this package ships and files them upstream so the package gets fixed. Deterministic, no model; sends only package-owned names, conclusions and counts, and refuses to file anything a leak scanner flags." },
     { name: "agentics-maintenance", file: "agentics-maintenance.yml", description: "Agentic maintenance: scheduled daily maintenance workflow for keeping workflows and actions up to date." },
     { name: "app-ci-dotnet-next", file: "app-ci-dotnet-next.yml", description: "App CI pipeline for a .NET + Next.js monorepo: build, test, and lint on PRs and schedule." },
     { name: "app-ci-node-monorepo", file: "app-ci-node-monorepo.yml", description: "App CI pipeline for a Node monorepo: build, test, and lint on PRs and schedule." },

package/loops/actions/add-issue-labels/action.yml

@@ -1,50 +1,50 @@
-# Managed by @plainconceptsplatform/workflows. Source: loops/actions/add-issue-labels/action.yml. Update with workflows update --force; consumer edits may be overwritten.
-name: Add issue labels
-description: Add one or more labels to an issue or pull request.
-inputs:
-  token:
-    description: GitHub token used by github-script.
-    required: true
-  issue-number:
-    description: Issue or pull request number.
-    required: true
-  labels:
-    description: Labels to add, one per line. A comma-separated list is accepted as well.
-    required: true
-runs:
-  using: composite
-  steps:
-    - name: Add labels
-      uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
-      env:
-        ISSUE_NUMBER: ${{ inputs.issue-number }}
-        LABELS: ${{ inputs.labels }}
-      with:
-        github-token: ${{ inputs.token }}
-        script: |
-          const labels = process.env.LABELS.split(/\r?\n|,/).map((label) => label.trim()).filter(Boolean);
-          if (labels.length === 0) {
-            core.notice('No labels to add.');
-            return;
-          }
-
-          // Create what does not exist yet, so shipping a new label in the package does not
-          // require a person to go and make it in every repository first. Its sibling
-          // remove-issue-labels has swallowed 404 for a long time; this one had no guard at all,
-          // so a label the package introduced would fail the step in every consumer until
-          // somebody created it by hand. 422 is "already exists", which is the happy path on
-          // every run after the first.
-          for (const name of labels) {
-            try {
-              await github.rest.issues.createLabel({ ...context.repo, name, color: 'ededed' });
-              core.notice(`Created the ${name} label.`);
-            } catch (error) {
-              if (error.status !== 422) throw error;
-            }
-          }
-
-          await github.rest.issues.addLabels({
-            ...context.repo,
-            issue_number: Number(process.env.ISSUE_NUMBER),
-            labels,
-          });
+# Managed by @plainconceptsplatform/workflows. Source: loops/actions/add-issue-labels/action.yml. Update with workflows update --force; consumer edits may be overwritten.
+name: Add issue labels
+description: Add one or more labels to an issue or pull request.
+inputs:
+  token:
+    description: GitHub token used by github-script.
+    required: true
+  issue-number:
+    description: Issue or pull request number.
+    required: true
+  labels:
+    description: Labels to add, one per line. A comma-separated list is accepted as well.
+    required: true
+runs:
+  using: composite
+  steps:
+    - name: Add labels
+      uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
+      env:
+        ISSUE_NUMBER: ${{ inputs.issue-number }}
+        LABELS: ${{ inputs.labels }}
+      with:
+        github-token: ${{ inputs.token }}
+        script: |
+          const labels = process.env.LABELS.split(/\r?\n|,/).map((label) => label.trim()).filter(Boolean);
+          if (labels.length === 0) {
+            core.notice('No labels to add.');
+            return;
+          }
+
+          // Create what does not exist yet, so shipping a new label in the package does not
+          // require a person to go and make it in every repository first. Its sibling
+          // remove-issue-labels has swallowed 404 for a long time; this one had no guard at all,
+          // so a label the package introduced would fail the step in every consumer until
+          // somebody created it by hand. 422 is "already exists", which is the happy path on
+          // every run after the first.
+          for (const name of labels) {
+            try {
+              await github.rest.issues.createLabel({ ...context.repo, name, color: 'ededed' });
+              core.notice(`Created the ${name} label.`);
+            } catch (error) {
+              if (error.status !== 422) throw error;
+            }
+          }
+
+          await github.rest.issues.addLabels({
+            ...context.repo,
+            issue_number: Number(process.env.ISSUE_NUMBER),
+            labels,
+          });

package/loops/actions/agent-output.cjs

@@ -1,17 +1,17 @@
-// Managed by @plainconceptsplatform/workflows. Source: loops/actions/agent-output.cjs. Update with `workflows update --force`; consumer edits may be overwritten.
-const fs = require('node:fs');
-
-// Every apply-agent-* action reads the same artifact the same way: a missing file means the
-// agent produced nothing, which is a normal outcome rather than a failure.
-function readAgentItems(outputFile, type) {
-  if (!outputFile || !fs.existsSync(outputFile)) {
-    return [];
-  }
-
-  const parsed = JSON.parse(fs.readFileSync(outputFile, 'utf8'));
-  const items = Array.isArray(parsed.items) ? parsed.items : [];
-
-  return type ? items.filter((item) => item.type === type) : items;
-}
-
-module.exports = { readAgentItems };
+// Managed by @plainconceptsplatform/workflows. Source: loops/actions/agent-output.cjs. Update with `workflows update --force`; consumer edits may be overwritten.
+const fs = require('node:fs');
+
+// Every apply-agent-* action reads the same artifact the same way: a missing file means the
+// agent produced nothing, which is a normal outcome rather than a failure.
+function readAgentItems(outputFile, type) {
+  if (!outputFile || !fs.existsSync(outputFile)) {
+    return [];
+  }
+
+  const parsed = JSON.parse(fs.readFileSync(outputFile, 'utf8'));
+  const items = Array.isArray(parsed.items) ? parsed.items : [];
+
+  return type ? items.filter((item) => item.type === type) : items;
+}
+
+module.exports = { readAgentItems };

package/loops/actions/apply-agent-bundle/action.yml

@@ -1,24 +1,24 @@
-# Managed by @plainconceptsplatform/workflows. Source: loops/actions/apply-agent-bundle/action.yml. Update with workflows update --force; consumer edits may be overwritten.
-name: Apply agent bundle
-description: Fast-forward an intended branch to the single commit exported by a verified git bundle.
-inputs:
-  bundle-file:
-    description: Path to the git bundle from the agent artifact.
-    required: true
-  target-branch:
-    description: Branch that must fast-forward to the bundle commit.
-    required: true
-  base-branch:
-    description: Existing branch used only when target-branch does not exist.
-    required: false
-    default: ''
-runs:
-  using: composite
-  steps:
-    - name: Fast-forward branch from bundle
-      shell: bash
-      env:
-        BUNDLE_FILE: ${{ inputs.bundle-file }}
-        TARGET_BRANCH: ${{ inputs.target-branch }}
-        BASE_BRANCH: ${{ inputs.base-branch }}
-      run: bash "$GITHUB_ACTION_PATH/apply-bundle.sh" "$BUNDLE_FILE" "$TARGET_BRANCH" "$BASE_BRANCH"
+# Managed by @plainconceptsplatform/workflows. Source: loops/actions/apply-agent-bundle/action.yml. Update with workflows update --force; consumer edits may be overwritten.
+name: Apply agent bundle
+description: Fast-forward an intended branch to the single commit exported by a verified git bundle.
+inputs:
+  bundle-file:
+    description: Path to the git bundle from the agent artifact.
+    required: true
+  target-branch:
+    description: Branch that must fast-forward to the bundle commit.
+    required: true
+  base-branch:
+    description: Existing branch used only when target-branch does not exist.
+    required: false
+    default: ''
+runs:
+  using: composite
+  steps:
+    - name: Fast-forward branch from bundle
+      shell: bash
+      env:
+        BUNDLE_FILE: ${{ inputs.bundle-file }}
+        TARGET_BRANCH: ${{ inputs.target-branch }}
+        BASE_BRANCH: ${{ inputs.base-branch }}
+      run: bash "$GITHUB_ACTION_PATH/apply-bundle.sh" "$BUNDLE_FILE" "$TARGET_BRANCH" "$BASE_BRANCH"

package/loops/actions/apply-agent-comments/action.yml

@@ -1,42 +1,42 @@
-# Managed by @plainconceptsplatform/workflows. Source: loops/actions/apply-agent-comments/action.yml. Update with workflows update --force; consumer edits may be overwritten.
-name: Apply agent comments
-description: Post every add_comment item from agent_output.json.
-inputs:
-  output-file:
-    description: Path to agent_output.json.
-    required: true
-  token:
-    description: GitHub token with issues:write and pull-requests:write.
-    required: true
-runs:
-  using: composite
-  steps:
-    - name: Post comments
-      uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
-      env:
-        AGENT_OUTPUT_LIB: ${{ github.action_path }}/../agent-output.cjs
-        OUTPUT_FILE: ${{ inputs.output-file }}
-      with:
-        github-token: ${{ inputs.token }}
-        script: |
-          const { readAgentItems } = require(process.env.AGENT_OUTPUT_LIB);
-          const items = readAgentItems(process.env.OUTPUT_FILE, 'add_comment');
-
-          let posted = 0;
-
-          for (const item of items) {
-            if (!item.item_number) {
-              core.warning(`add_comment item has no item_number, skipping: ${JSON.stringify(item)}`);
-              continue;
-            }
-
-            await github.rest.issues.createComment({
-              ...context.repo,
-              issue_number: Number(item.item_number),
-              body: item.body,
-            });
-
-            posted += 1;
-          }
-
-          core.info(`Posted ${posted} comment(s).`);
+# Managed by @plainconceptsplatform/workflows. Source: loops/actions/apply-agent-comments/action.yml. Update with workflows update --force; consumer edits may be overwritten.
+name: Apply agent comments
+description: Post every add_comment item from agent_output.json.
+inputs:
+  output-file:
+    description: Path to agent_output.json.
+    required: true
+  token:
+    description: GitHub token with issues:write and pull-requests:write.
+    required: true
+runs:
+  using: composite
+  steps:
+    - name: Post comments
+      uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
+      env:
+        AGENT_OUTPUT_LIB: ${{ github.action_path }}/../agent-output.cjs
+        OUTPUT_FILE: ${{ inputs.output-file }}
+      with:
+        github-token: ${{ inputs.token }}
+        script: |
+          const { readAgentItems } = require(process.env.AGENT_OUTPUT_LIB);
+          const items = readAgentItems(process.env.OUTPUT_FILE, 'add_comment');
+
+          let posted = 0;
+
+          for (const item of items) {
+            if (!item.item_number) {
+              core.warning(`add_comment item has no item_number, skipping: ${JSON.stringify(item)}`);
+              continue;
+            }
+
+            await github.rest.issues.createComment({
+              ...context.repo,
+              issue_number: Number(item.item_number),
+              body: item.body,
+            });
+
+            posted += 1;
+          }
+
+          core.info(`Posted ${posted} comment(s).`);

package/loops/actions/apply-agent-labels/action.yml

@@ -1,55 +1,55 @@
-# Managed by @plainconceptsplatform/workflows. Source: loops/actions/apply-agent-labels/action.yml. Update with workflows update --force; consumer edits may be overwritten.
-name: Apply agent labels
-description: Apply every add_labels and remove_labels item from agent_output.json.
-inputs:
-  output-file:
-    description: Path to agent_output.json.
-    required: true
-  token:
-    description: GitHub token with issues:write.
-    required: true
-runs:
-  using: composite
-  steps:
-    - name: Apply label changes
-      uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
-      env:
-        AGENT_OUTPUT_LIB: ${{ github.action_path }}/../agent-output.cjs
-        OUTPUT_FILE: ${{ inputs.output-file }}
-      with:
-        github-token: ${{ inputs.token }}
-        script: |
-          const { readAgentItems } = require(process.env.AGENT_OUTPUT_LIB);
-          const items = readAgentItems(process.env.OUTPUT_FILE)
-            .filter((item) => item.type === 'add_labels' || item.type === 'remove_labels');
-
-          let added = 0;
-          let removed = 0;
-
-          for (const item of items) {
-            const labels = (item.labels ?? []).map((label) => label.name).filter(Boolean);
-
-            if (!item.item_number || labels.length === 0) {
-              core.warning(`${item.type} item is not actionable, skipping: ${JSON.stringify(item)}`);
-              continue;
-            }
-
-            const issue_number = Number(item.item_number);
-
-            if (item.type === 'add_labels') {
-              await github.rest.issues.addLabels({ ...context.repo, issue_number, labels });
-              added += labels.length;
-              continue;
-            }
-
-            for (const name of labels) {
-              try {
-                await github.rest.issues.removeLabel({ ...context.repo, issue_number, name });
-                removed += 1;
-              } catch (error) {
-                if (error.status !== 404) throw error;
-              }
-            }
-          }
-
-          core.info(`Added ${added} label(s), removed ${removed}.`);
+# Managed by @plainconceptsplatform/workflows. Source: loops/actions/apply-agent-labels/action.yml. Update with workflows update --force; consumer edits may be overwritten.
+name: Apply agent labels
+description: Apply every add_labels and remove_labels item from agent_output.json.
+inputs:
+  output-file:
+    description: Path to agent_output.json.
+    required: true
+  token:
+    description: GitHub token with issues:write.
+    required: true
+runs:
+  using: composite
+  steps:
+    - name: Apply label changes
+      uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
+      env:
+        AGENT_OUTPUT_LIB: ${{ github.action_path }}/../agent-output.cjs
+        OUTPUT_FILE: ${{ inputs.output-file }}
+      with:
+        github-token: ${{ inputs.token }}
+        script: |
+          const { readAgentItems } = require(process.env.AGENT_OUTPUT_LIB);
+          const items = readAgentItems(process.env.OUTPUT_FILE)
+            .filter((item) => item.type === 'add_labels' || item.type === 'remove_labels');
+
+          let added = 0;
+          let removed = 0;
+
+          for (const item of items) {
+            const labels = (item.labels ?? []).map((label) => label.name).filter(Boolean);
+
+            if (!item.item_number || labels.length === 0) {
+              core.warning(`${item.type} item is not actionable, skipping: ${JSON.stringify(item)}`);
+              continue;
+            }
+
+            const issue_number = Number(item.item_number);
+
+            if (item.type === 'add_labels') {
+              await github.rest.issues.addLabels({ ...context.repo, issue_number, labels });
+              added += labels.length;
+              continue;
+            }
+
+            for (const name of labels) {
+              try {
+                await github.rest.issues.removeLabel({ ...context.repo, issue_number, name });
+                removed += 1;
+              } catch (error) {
+                if (error.status !== 404) throw error;
+              }
+            }
+          }
+
+          core.info(`Added ${added} label(s), removed ${removed}.`);

package/loops/actions/cleanup-artifacts/action.yml

@@ -1,91 +1,91 @@
-# Managed by @plainconceptsplatform/workflows. Source: loops/actions/cleanup-artifacts/action.yml. Update with workflows update --force; consumer edits may be overwritten.
-name: Clean up artifacts
-description: Delete workflow artifacts older than the configured retention period.
-inputs:
-  token:
-    description: GitHub token with actions write access.
-    required: true
-  artifact-retention-days:
-    description: Retention period in days. Invalid or empty values use 3.
-    required: false
-    default: ''
-runs:
-  using: composite
-  steps:
-    - name: Delete expired artifacts
-      uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
-      env:
-        ARTIFACT_RETENTION_DAYS: ${{ inputs.artifact-retention-days }}
-      with:
-        github-token: ${{ inputs.token }}
-        script: |
-          const parsedDays = Number.parseInt(process.env.ARTIFACT_RETENTION_DAYS, 10);
-          const days = Number.isInteger(parsedDays) && parsedDays > 0 ? parsedDays : 3;
-          const cutoff = new Date(Date.now() - days * 24 * 60 * 60 * 1000);
-
-          core.info(`Retention: ${days} days (cutoff ${cutoff.toISOString()})`);
-
-          const artifacts = await github.paginate(github.rest.actions.listArtifactsForRepo, {
-            ...context.repo,
-            per_page: 100,
-          });
-
-          const expired = artifacts.filter((artifact) => new Date(artifact.created_at) < cutoff);
-
-          let deleted = 0;
-          const failed = [];
-
-          for (const artifact of expired) {
-            // GitHub answers a delete with a 5xx now and then. Three tries, because the
-            // alternative is a red daily run over one artifact that tomorrow's run would
-            // have removed anyway.
-            let lastError;
-            for (let attempt = 1; attempt <= 3; attempt += 1) {
-              try {
-                await github.rest.actions.deleteArtifact({
-                  ...context.repo,
-                  artifact_id: artifact.id,
-                });
-
-                core.info(`Deleted ${artifact.name} (created ${artifact.created_at})`);
-                deleted += 1;
-                lastError = undefined;
-                break;
-              } catch (error) {
-                lastError = error;
-                if (attempt < 3) await new Promise((wait) => setTimeout(wait, attempt * 2000));
-              }
-            }
-
-            if (lastError) {
-              core.warning(
-                `Could not delete ${artifact.name} (${artifact.id}) after 3 tries: ${lastError.message}`,
-              );
-              failed.push({ name: artifact.name, status: lastError.status });
-            }
-          }
-
-          await core.summary
-            .addHeading('Artifact cleanup', 2)
-            .addList([
-              `Retention: ${days} days (cutoff ${cutoff.toISOString()})`,
-              `Deleted: ${deleted}`,
-              `Failed to delete: ${failed.length}`,
-              `Within retention: ${artifacts.length - expired.length}`,
-            ])
-            .write();
-
-          // Deleting nothing at all while expired artifacts exist is a permission or
-          // configuration problem, and has to be loud. One stubborn artifact among many is
-          // the API having a bad minute: tomorrow's run picks it up, and failing here only
-          // teaches people to ignore a red cleanup. A 4xx is never transient, so it fails
-          // whatever else succeeded.
-          const names = failed.map((entry) => entry.name).join(', ');
-          const structural = failed.some((entry) => entry.status && entry.status < 500);
-          if (failed.length > 0 && (deleted === 0 || structural)) {
-            core.setFailed(`${failed.length} artifact(s) could not be deleted: ${names}`);
-          } else if (failed.length > 0) {
-            core.warning(
-              `${failed.length} artifact(s) survived this run and will be retried tomorrow: ${names}`,
-            );
-          }
+# Managed by @plainconceptsplatform/workflows. Source: loops/actions/cleanup-artifacts/action.yml. Update with workflows update --force; consumer edits may be overwritten.
+name: Clean up artifacts
+description: Delete workflow artifacts older than the configured retention period.
+inputs:
+  token:
+    description: GitHub token with actions write access.
+    required: true
+  artifact-retention-days:
+    description: Retention period in days. Invalid or empty values use 3.
+    required: false
+    default: ''
+runs:
+  using: composite
+  steps:
+    - name: Delete expired artifacts
+      uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
+      env:
+        ARTIFACT_RETENTION_DAYS: ${{ inputs.artifact-retention-days }}
+      with:
+        github-token: ${{ inputs.token }}
+        script: |
+          const parsedDays = Number.parseInt(process.env.ARTIFACT_RETENTION_DAYS, 10);
+          const days = Number.isInteger(parsedDays) && parsedDays > 0 ? parsedDays : 3;
+          const cutoff = new Date(Date.now() - days * 24 * 60 * 60 * 1000);
+
+          core.info(`Retention: ${days} days (cutoff ${cutoff.toISOString()})`);
+
+          const artifacts = await github.paginate(github.rest.actions.listArtifactsForRepo, {
+            ...context.repo,
+            per_page: 100,
+          });
+
+          const expired = artifacts.filter((artifact) => new Date(artifact.created_at) < cutoff);
+
+          let deleted = 0;
+          const failed = [];
+
+          for (const artifact of expired) {
+            // GitHub answers a delete with a 5xx now and then. Three tries, because the
+            // alternative is a red daily run over one artifact that tomorrow's run would
+            // have removed anyway.
+            let lastError;
+            for (let attempt = 1; attempt <= 3; attempt += 1) {
+              try {
+                await github.rest.actions.deleteArtifact({
+                  ...context.repo,
+                  artifact_id: artifact.id,
+                });
+
+                core.info(`Deleted ${artifact.name} (created ${artifact.created_at})`);
+                deleted += 1;
+                lastError = undefined;
+                break;
+              } catch (error) {
+                lastError = error;
+                if (attempt < 3) await new Promise((wait) => setTimeout(wait, attempt * 2000));
+              }
+            }
+
+            if (lastError) {
+              core.warning(
+                `Could not delete ${artifact.name} (${artifact.id}) after 3 tries: ${lastError.message}`,
+              );
+              failed.push({ name: artifact.name, status: lastError.status });
+            }
+          }
+
+          await core.summary
+            .addHeading('Artifact cleanup', 2)
+            .addList([
+              `Retention: ${days} days (cutoff ${cutoff.toISOString()})`,
+              `Deleted: ${deleted}`,
+              `Failed to delete: ${failed.length}`,
+              `Within retention: ${artifacts.length - expired.length}`,
+            ])
+            .write();
+
+          // Deleting nothing at all while expired artifacts exist is a permission or
+          // configuration problem, and has to be loud. One stubborn artifact among many is
+          // the API having a bad minute: tomorrow's run picks it up, and failing here only
+          // teaches people to ignore a red cleanup. A 4xx is never transient, so it fails
+          // whatever else succeeded.
+          const names = failed.map((entry) => entry.name).join(', ');
+          const structural = failed.some((entry) => entry.status && entry.status < 500);
+          if (failed.length > 0 && (deleted === 0 || structural)) {
+            core.setFailed(`${failed.length} artifact(s) could not be deleted: ${names}`);
+          } else if (failed.length > 0) {
+            core.warning(
+              `${failed.length} artifact(s) survived this run and will be retried tomorrow: ${names}`,
+            );
+          }