@plainconceptsplatform/workflows 1.2.3 → 1.3.1

package/loops/actions/assess-blast-radius/action.yml

@@ -35,6 +35,10 @@ inputs:
     description: Lines changed at or above which the radius is MEDIUM.
     required: false
     default: '200'
+  ignore-paths:
+    description: Extended regular expression. Matching paths count toward neither size nor owner and sensitive paths; protected paths still match them.
+    required: false
+    default: ''
 outputs:
   level:
     description: "low, medium or high."
@@ -64,11 +68,17 @@ outputs:
     description: CODEOWNERS entries covering the changed paths, space separated. Empty when the repository has no CODEOWNERS.
     value: ${{ steps.assess.outputs.required_owners }}
   files_changed:
-    description: Number of files in the diff.
+    description: Number of files that count toward size, ignored paths excluded.
     value: ${{ steps.assess.outputs.files_changed }}
   lines_changed:
-    description: Additions plus deletions.
+    description: Additions plus deletions of the files that count toward size.
     value: ${{ steps.assess.outputs.lines_changed }}
+  files_total:
+    description: Number of files in the whole diff.
+    value: ${{ steps.assess.outputs.files_total }}
+  lines_total:
+    description: Additions plus deletions of the whole diff.
+    value: ${{ steps.assess.outputs.lines_total }}
 runs:
   using: composite
   steps:
@@ -86,22 +96,51 @@ runs:
         HIGH_LINES: ${{ inputs.high-lines }}
         MEDIUM_FILES: ${{ inputs.medium-files }}
         MEDIUM_LINES: ${{ inputs.medium-lines }}
+        IGNORE_PATHS: ${{ inputs.ignore-paths }}
       run: |
         set -euo pipefail
         # One API call. The job this replaced already paid for it to grep PROTECTED_PATHS, and
         # the additions and deletions come back in the same payload, so the diff shape costs
         # nothing extra.
         gh api --paginate "repos/$REPO/pulls/$PR_NUMBER/files?per_page=100" \
-          --jq '[.[] | {filename, additions, deletions}]' > /tmp/blast-files.json
+          --jq '[.[] | {filename, status, additions, deletions, patch}]' | jq -s 'add // []' > /tmp/blast-files.json
+
+        all_files=$(jq -r '.[].filename' /tmp/blast-files.json)
+        files_total=$(jq -r 'length' /tmp/blast-files.json)
+        lines_total=$(jq -r '[.[] | .additions + .deletions] | add // 0' /tmp/blast-files.json)
+
+        # Tests, docs, specs, translations and generated code change no runtime behaviour, so they
+        # do not make a diff bigger. They stay in ALL_PATHS, so a protected path is never ignored.
+        if [ -n "$IGNORE_PATHS" ]; then
+          jq -c --arg re "$IGNORE_PATHS" '[.[] | select(.filename | test($re) | not)]' /tmp/blast-files.json > /tmp/blast-counted.json
+        else
+          cp /tmp/blast-files.json /tmp/blast-counted.json
+        fi
+        files=$(jq -r '.[].filename' /tmp/blast-counted.json)
+        files_changed=$(jq -r 'length' /tmp/blast-counted.json)
+        lines_changed=$(jq -r '[.[] | .additions + .deletions] | add // 0' /tmp/blast-counted.json)
 
-        files=$(jq -r '.[].filename' /tmp/blast-files.json)
-        files_changed=$(jq -r 'length' /tmp/blast-files.json)
-        lines_changed=$(jq -r '[.[] | .additions + .deletions] | add // 0' /tmp/blast-files.json)
+        # A new EF Core migration whose Up() only adds schema. An edited one never qualifies:
+        # changing a migration that may already have run is exactly what needs its owner.
+        additive=""
+        while IFS= read -r candidate; do
+          [ -n "$candidate" ] || continue
+          if jq -r --arg f "$candidate" '.[] | select(.filename == $f) | .patch // ""' /tmp/blast-counted.json |
+             bash "${{ github.action_path }}/migration-is-additive.sh" >/dev/null; then
+            additive="${additive}${additive:+$'\n'}${candidate}"
+          fi
+        done < <(jq -r '.[] | select(.status == "added") | .filename
+                        | select(test("(^|/)[Mm]igrations/[^/]+[.]cs$"))
+                        | select(test("([.]Designer|ModelSnapshot)[.]cs$") | not)' /tmp/blast-counted.json)
 
-        bash "${{ github.action_path }}/assess-blast-radius.sh" \
+        ALL_PATHS="$all_files" ADDITIVE_MIGRATIONS="$additive" \
+        IGNORED_FILES=$((files_total - files_changed)) IGNORED_LINES=$((lines_total - lines_changed)) \
+          bash "${{ github.action_path }}/assess-blast-radius.sh" \
           "$files_changed" "$lines_changed" <<<"$files" > /tmp/blast-out.env
 
         cat /tmp/blast-out.env >> "$GITHUB_OUTPUT"
+        echo "files_total=$files_total" >> "$GITHUB_OUTPUT"
+        echo "lines_total=$lines_total" >> "$GITHUB_OUTPUT"
 
         # CODEOWNERS refines who is asked; it never decides whether anyone is. A repository
         # without the file still gets an owner disposition from OWNER_PATHS, and the comment
@@ -139,7 +178,7 @@ runs:
             esac
             # An unanchored CODEOWNERS pattern matches at any depth, an anchored one only at the root.
             if [ "$anchored" -eq 1 ]; then regex="^${regex}"; else regex="(^|/)${regex}"; fi
-            if printf '%s\n' "$files" | grep -qE "$regex"; then
+            if printf '%s\n' "$all_files" | grep -qE "$regex"; then
               owners="$owners $rest"
             fi
           done < "$candidate"

package/loops/actions/assess-blast-radius/assess-blast-radius.sh

@@ -2,7 +2,9 @@
 # Managed by @plainconceptsplatform/workflows. Source: loops/actions/assess-blast-radius/assess-blast-radius.sh. Update with `workflows update --force`; consumer edits may be overwritten.
 # Classify a pull request's blast radius from its changed paths and diff shape.
 #
-# Reads the changed paths on stdin, one per line. Prints GITHUB_OUTPUT lines on stdout.
+# Reads the changed paths that count toward the diff's size on stdin, one per line. Prints
+# GITHUB_OUTPUT lines on stdout. ALL_PATHS, when set, is every changed path, ignored ones included:
+# protected paths are matched against it, so ignoring a path never unprotects it.
 # Deliberately model-free: the point of this file is that the most consequential input to the
 # merge decision is computed from facts a shell can check, before any agent reads the diff.
 #
@@ -21,8 +23,13 @@ HIGH_FILES="${HIGH_FILES:-20}"
 HIGH_LINES="${HIGH_LINES:-800}"
 MEDIUM_FILES="${MEDIUM_FILES:-5}"
 MEDIUM_LINES="${MEDIUM_LINES:-200}"
+# Added migrations the caller proved only add schema (migration-is-additive.sh), one per line.
+ADDITIVE_MIGRATIONS="${ADDITIVE_MIGRATIONS:-}"
+IGNORED_FILES="${IGNORED_FILES:-0}"
+IGNORED_LINES="${IGNORED_LINES:-0}"
 
 files="$(cat)"
+all_paths="${ALL_PATHS:-$files}"
 
 # An empty regex matches every line in grep -E, which would mark every pull request protected.
 # A list nobody configured must match nothing, not everything.
@@ -34,9 +41,9 @@ files="$(cat)"
 # before any of them is used: a `match` failure cannot report itself, because `match` runs
 # inside a command substitution and anything it sets dies with the subshell.
 match() {
-  local pattern="$1"
+  local pattern="$1" paths="${2-$files}"
   [ -n "$pattern" ] || return 0
-  printf '%s\n' "$files" | grep -E "$pattern" || true
+  printf '%s\n' "$paths" | grep -E "$pattern" || true
 }
 
 # Compile each configured pattern against nothing. grep exits 2 when the regex is bad, which is
@@ -50,14 +57,22 @@ for name in PROTECTED_PATHS OWNER_PATHS SENSITIVE_PATHS; do
   fi
 done
 
-protected_hits="$(match "$PROTECTED_PATHS")"
+protected_hits="$(match "$PROTECTED_PATHS" "$all_paths")"
 owner_hits="$(match "$OWNER_PATHS")"
 sensitive_hits="$(match "$SENSITIVE_PATHS")"
 
+# An additive migration loses no data, so it asks for a second look (medium) rather than its
+# owner. Every other owner path still forces high.
+additive_hits=""
+if [ -n "$ADDITIVE_MIGRATIONS" ] && [ -n "$owner_hits" ]; then
+  additive_hits="$(printf '%s\n' "$owner_hits" | grep -Fxf <(printf '%s\n' "$ADDITIVE_MIGRATIONS") || true)"
+  owner_hits="$(printf '%s\n' "$owner_hits" | grep -vFxf <(printf '%s\n' "$ADDITIVE_MIGRATIONS") || true)"
+fi
+
 # A threshold that is not a number turns its comparison into a shell error that `set -e` does
 # not catch, because the test is an `if` condition: `HIGH_FILES=twenty` printed a diagnostic to
 # stderr and quietly produced `level=low` for a diff of any size.
-for threshold in HIGH_FILES HIGH_LINES MEDIUM_FILES MEDIUM_LINES files_changed lines_changed; do
+for threshold in HIGH_FILES HIGH_LINES MEDIUM_FILES MEDIUM_LINES files_changed lines_changed IGNORED_FILES IGNORED_LINES; do
   case "${!threshold}" in
     ""|*[!0-9]*)
       echo "assess-blast-radius: ${threshold} must be a whole number, got '${!threshold}'" >&2
@@ -92,6 +107,10 @@ if [ "$lines_changed" -ge "$HIGH_LINES" ]; then
 fi
 
 if [ "$level" != high ]; then
+  if [ -n "$additive_hits" ]; then
+    level=medium
+    add_signal "additive migrations, no owner needed ($(printf '%s\n' "$additive_hits" | tr '\n' ' ' | sed 's/ $//'))"
+  fi
   if [ -n "$sensitive_hits" ]; then
     level=medium
     add_signal "sensitive paths touched ($(printf '%s\n' "$sensitive_hits" | tr '\n' ' ' | sed 's/ $//'))"
@@ -107,6 +126,9 @@ if [ "$level" != high ]; then
 fi
 
 [ -n "$signals" ] || signals="no blast-radius signal fired: $files_changed files, $lines_changed lines, no configured path matched"
+if [ "$IGNORED_FILES" -gt 0 ]; then
+  add_signal "not counted toward size: $IGNORED_FILES files, $IGNORED_LINES lines (tests, docs, specs, translations, generated code)"
+fi
 
 # A fixed heredoc delimiter is a fail-open here. Every multi-line value below is built from
 # paths the pull request chose, so a path that is exactly the delimiter closes its block early

package/loops/actions/assess-blast-radius/migration-is-additive.sh

@@ -0,0 +1,38 @@
+#!/usr/bin/env bash
+# Managed by @plainconceptsplatform/workflows. Source: loops/actions/assess-blast-radius/migration-is-additive.sh. Update with `workflows update --force`; consumer edits may be overwritten.
+# Decide whether a newly added EF Core migration only adds schema. Reads the file's diff patch on
+# stdin; exits 0 and prints "additive" when it does, exits 1 and prints the reason when it does not.
+#
+# Only Up() is read: Down() of an additive migration is all drops by construction. Anything that
+# can lose or rewrite data, or a structure this cannot follow, is not additive.
+
+set -euo pipefail
+
+awk '
+  /^\+/ { line = substr($0, 2) }
+  !/^\+/ { next }
+  line ~ /void[ \t]+Up[ \t]*\(/ { in_up = 1; seen_up = 1; next }
+  line ~ /void[ \t]+Down[ \t]*\(/ { in_up = 0; next }
+  !in_up { next }
+  line ~ /\.(Drop[A-Za-z]*|Rename[A-Za-z]*|Alter[A-Za-z]*|Sql|DeleteData|UpdateData|RestartSequence)[ \t]*[(<]/ {
+    match(line, /\.[A-Za-z]+[ \t]*[(<]/)
+    reason = "Up() calls " substr(line, RSTART + 1, RLENGTH - 1)
+    exit
+  }
+  line ~ /\.AddColumn[ \t]*</ { in_column = 1; column = "" }
+  in_column {
+    column = column " " line
+    if (line ~ /\);/) {
+      in_column = 0
+      if (column ~ /nullable:[ \t]*false/ && column !~ /defaultValue/) {
+        reason = "Up() adds a required column with no default"
+        exit
+      }
+    }
+  }
+  END {
+    if (reason == "" && !seen_up) reason = "no Up() method found in the added lines"
+    if (reason != "") { print reason; exit 1 }
+    print "additive"
+  }
+'

package/loops/actions/classify-route/action.yml

@@ -56,6 +56,7 @@ runs:
         PR_MERGED: ${{ github.event.pull_request.merged }}
         COMMENT_ON_PR: ${{ github.event.issue.pull_request != '' }}
         COMMENT_SENDER_TYPE: ${{ github.event.comment.user.type }}
+        REVIEW_STATE: ${{ github.event.review.state }}
         ACTOR: ${{ github.actor }}
         RUN_PR_NUMBER: ${{ github.event.workflow_run.pull_requests[0].number }}
         RUN_CONCLUSION: ${{ github.event.workflow_run.conclusion }}
@@ -84,7 +85,7 @@ runs:
 
     - name: Resolve the issue the pull request closes
       id: linked-issue
-      if: steps.classify.outputs.route == 'merge-gate' || steps.classify.outputs.route == 'apply-review'
+      if: contains(fromJson('["merge-gate","apply-review","merge-approved"]'), steps.classify.outputs.route)
       shell: bash
       env:
         GH_TOKEN: ${{ inputs.token }}

package/loops/actions/classify-route/classify-route.sh

@@ -135,7 +135,13 @@ classify_route() {
       ;;
 
     pull_request_review_comment | pull_request_review)
-      route="apply-review"
+      # An approval is a decision, not feedback: the router merges the pull request when the
+      # gate had handed it to a person (merge-approved checks the rest).
+      if [ "${EVENT:-}" = "pull_request_review" ] && [ "${REVIEW_STATE:-}" = "approved" ]; then
+        route="merge-approved"
+      else
+        route="apply-review"
+      fi
       pr_number="${EVENT_PR_NUMBER:-}"
       ;;
 

package/loops/actions/cleanup-artifacts/action.yml

@@ -1,91 +1,91 @@
-# Managed by @plainconceptsplatform/workflows. Source: loops/actions/cleanup-artifacts/action.yml. Update with workflows update --force; consumer edits may be overwritten.
-name: Clean up artifacts
-description: Delete workflow artifacts older than the configured retention period.
-inputs:
-  token:
-    description: GitHub token with actions write access.
-    required: true
-  artifact-retention-days:
-    description: Retention period in days. Invalid or empty values use 3.
-    required: false
-    default: ''
-runs:
-  using: composite
-  steps:
-    - name: Delete expired artifacts
-      uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
-      env:
-        ARTIFACT_RETENTION_DAYS: ${{ inputs.artifact-retention-days }}
-      with:
-        github-token: ${{ inputs.token }}
-        script: |
-          const parsedDays = Number.parseInt(process.env.ARTIFACT_RETENTION_DAYS, 10);
-          const days = Number.isInteger(parsedDays) && parsedDays > 0 ? parsedDays : 3;
-          const cutoff = new Date(Date.now() - days * 24 * 60 * 60 * 1000);
-
-          core.info(`Retention: ${days} days (cutoff ${cutoff.toISOString()})`);
-
-          const artifacts = await github.paginate(github.rest.actions.listArtifactsForRepo, {
-            ...context.repo,
-            per_page: 100,
-          });
-
-          const expired = artifacts.filter((artifact) => new Date(artifact.created_at) < cutoff);
-
-          let deleted = 0;
-          const failed = [];
-
-          for (const artifact of expired) {
-            // GitHub answers a delete with a 5xx now and then. Three tries, because the
-            // alternative is a red daily run over one artifact that tomorrow's run would
-            // have removed anyway.
-            let lastError;
-            for (let attempt = 1; attempt <= 3; attempt += 1) {
-              try {
-                await github.rest.actions.deleteArtifact({
-                  ...context.repo,
-                  artifact_id: artifact.id,
-                });
-
-                core.info(`Deleted ${artifact.name} (created ${artifact.created_at})`);
-                deleted += 1;
-                lastError = undefined;
-                break;
-              } catch (error) {
-                lastError = error;
-                if (attempt < 3) await new Promise((wait) => setTimeout(wait, attempt * 2000));
-              }
-            }
-
-            if (lastError) {
-              core.warning(
-                `Could not delete ${artifact.name} (${artifact.id}) after 3 tries: ${lastError.message}`,
-              );
-              failed.push({ name: artifact.name, status: lastError.status });
-            }
-          }
-
-          await core.summary
-            .addHeading('Artifact cleanup', 2)
-            .addList([
-              `Retention: ${days} days (cutoff ${cutoff.toISOString()})`,
-              `Deleted: ${deleted}`,
-              `Failed to delete: ${failed.length}`,
-              `Within retention: ${artifacts.length - expired.length}`,
-            ])
-            .write();
-
-          // Deleting nothing at all while expired artifacts exist is a permission or
-          // configuration problem, and has to be loud. One stubborn artifact among many is
-          // the API having a bad minute: tomorrow's run picks it up, and failing here only
-          // teaches people to ignore a red cleanup. A 4xx is never transient, so it fails
-          // whatever else succeeded.
-          const names = failed.map((entry) => entry.name).join(', ');
-          const structural = failed.some((entry) => entry.status && entry.status < 500);
-          if (failed.length > 0 && (deleted === 0 || structural)) {
-            core.setFailed(`${failed.length} artifact(s) could not be deleted: ${names}`);
-          } else if (failed.length > 0) {
-            core.warning(
-              `${failed.length} artifact(s) survived this run and will be retried tomorrow: ${names}`,
-            );
-          }
+# Managed by @plainconceptsplatform/workflows. Source: loops/actions/cleanup-artifacts/action.yml. Update with workflows update --force; consumer edits may be overwritten.
+name: Clean up artifacts
+description: Delete workflow artifacts older than the configured retention period.
+inputs:
+  token:
+    description: GitHub token with actions write access.
+    required: true
+  artifact-retention-days:
+    description: Retention period in days. Invalid or empty values use 3.
+    required: false
+    default: ''
+runs:
+  using: composite
+  steps:
+    - name: Delete expired artifacts
+      uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
+      env:
+        ARTIFACT_RETENTION_DAYS: ${{ inputs.artifact-retention-days }}
+      with:
+        github-token: ${{ inputs.token }}
+        script: |
+          const parsedDays = Number.parseInt(process.env.ARTIFACT_RETENTION_DAYS, 10);
+          const days = Number.isInteger(parsedDays) && parsedDays > 0 ? parsedDays : 3;
+          const cutoff = new Date(Date.now() - days * 24 * 60 * 60 * 1000);
+
+          core.info(`Retention: ${days} days (cutoff ${cutoff.toISOString()})`);
+
+          const artifacts = await github.paginate(github.rest.actions.listArtifactsForRepo, {
+            ...context.repo,
+            per_page: 100,
+          });
+
+          const expired = artifacts.filter((artifact) => new Date(artifact.created_at) < cutoff);
+
+          let deleted = 0;
+          const failed = [];
+
+          for (const artifact of expired) {
+            // GitHub answers a delete with a 5xx now and then. Three tries, because the
+            // alternative is a red daily run over one artifact that tomorrow's run would
+            // have removed anyway.
+            let lastError;
+            for (let attempt = 1; attempt <= 3; attempt += 1) {
+              try {
+                await github.rest.actions.deleteArtifact({
+                  ...context.repo,
+                  artifact_id: artifact.id,
+                });
+
+                core.info(`Deleted ${artifact.name} (created ${artifact.created_at})`);
+                deleted += 1;
+                lastError = undefined;
+                break;
+              } catch (error) {
+                lastError = error;
+                if (attempt < 3) await new Promise((wait) => setTimeout(wait, attempt * 2000));
+              }
+            }
+
+            if (lastError) {
+              core.warning(
+                `Could not delete ${artifact.name} (${artifact.id}) after 3 tries: ${lastError.message}`,
+              );
+              failed.push({ name: artifact.name, status: lastError.status });
+            }
+          }
+
+          await core.summary
+            .addHeading('Artifact cleanup', 2)
+            .addList([
+              `Retention: ${days} days (cutoff ${cutoff.toISOString()})`,
+              `Deleted: ${deleted}`,
+              `Failed to delete: ${failed.length}`,
+              `Within retention: ${artifacts.length - expired.length}`,
+            ])
+            .write();
+
+          // Deleting nothing at all while expired artifacts exist is a permission or
+          // configuration problem, and has to be loud. One stubborn artifact among many is
+          // the API having a bad minute: tomorrow's run picks it up, and failing here only
+          // teaches people to ignore a red cleanup. A 4xx is never transient, so it fails
+          // whatever else succeeded.
+          const names = failed.map((entry) => entry.name).join(', ');
+          const structural = failed.some((entry) => entry.status && entry.status < 500);
+          if (failed.length > 0 && (deleted === 0 || structural)) {
+            core.setFailed(`${failed.length} artifact(s) could not be deleted: ${names}`);
+          } else if (failed.length > 0) {
+            core.warning(
+              `${failed.length} artifact(s) survived this run and will be retried tomorrow: ${names}`,
+            );
+          }

package/loops/actions/close-agent-issues/action.yml

@@ -1,43 +1,43 @@
-# Managed by @plainconceptsplatform/workflows. Source: loops/actions/close-agent-issues/action.yml. Update with workflows update --force; consumer edits may be overwritten.
-name: Close agent issues
-description: Close every close_issue item from agent_output.json.
-inputs:
-  output-file:
-    description: Path to agent_output.json.
-    required: true
-  token:
-    description: GitHub token with issues:write.
-    required: true
-runs:
-  using: composite
-  steps:
-    - name: Close issues
-      uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
-      env:
-        AGENT_OUTPUT_LIB: ${{ github.action_path }}/../agent-output.cjs
-        OUTPUT_FILE: ${{ inputs.output-file }}
-      with:
-        github-token: ${{ inputs.token }}
-        script: |
-          const { readAgentItems } = require(process.env.AGENT_OUTPUT_LIB);
-          const items = readAgentItems(process.env.OUTPUT_FILE, 'close_issue');
-
-          let closed = 0;
-
-          for (const item of items) {
-            if (!item.item_number) {
-              core.warning(`close_issue item has no item_number, skipping: ${JSON.stringify(item)}`);
-              continue;
-            }
-
-            await github.rest.issues.update({
-              ...context.repo,
-              issue_number: Number(item.item_number),
-              state: 'closed',
-              state_reason: item.state_reason === 'not_planned' ? 'not_planned' : 'completed',
-            });
-
-            closed += 1;
-          }
-
-          core.info(`Closed ${closed} issue(s).`);
+# Managed by @plainconceptsplatform/workflows. Source: loops/actions/close-agent-issues/action.yml. Update with workflows update --force; consumer edits may be overwritten.
+name: Close agent issues
+description: Close every close_issue item from agent_output.json.
+inputs:
+  output-file:
+    description: Path to agent_output.json.
+    required: true
+  token:
+    description: GitHub token with issues:write.
+    required: true
+runs:
+  using: composite
+  steps:
+    - name: Close issues
+      uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
+      env:
+        AGENT_OUTPUT_LIB: ${{ github.action_path }}/../agent-output.cjs
+        OUTPUT_FILE: ${{ inputs.output-file }}
+      with:
+        github-token: ${{ inputs.token }}
+        script: |
+          const { readAgentItems } = require(process.env.AGENT_OUTPUT_LIB);
+          const items = readAgentItems(process.env.OUTPUT_FILE, 'close_issue');
+
+          let closed = 0;
+
+          for (const item of items) {
+            if (!item.item_number) {
+              core.warning(`close_issue item has no item_number, skipping: ${JSON.stringify(item)}`);
+              continue;
+            }
+
+            await github.rest.issues.update({
+              ...context.repo,
+              issue_number: Number(item.item_number),
+              state: 'closed',
+              state_reason: item.state_reason === 'not_planned' ? 'not_planned' : 'completed',
+            });
+
+            closed += 1;
+          }
+
+          core.info(`Closed ${closed} issue(s).`);

package/loops/actions/create-agent-issues/action.yml

@@ -1,52 +1,52 @@
-# Managed by @plainconceptsplatform/workflows. Source: loops/actions/create-agent-issues/action.yml. Update with workflows update --force; consumer edits may be overwritten.
-name: Create agent issues
-description: Create every create_issue item from agent_output.json.
-inputs:
-  output-file:
-    description: Path to agent_output.json.
-    required: true
-  token:
-    description: GitHub token with issues:write.
-    required: true
-outputs:
-  created-count:
-    description: Number of issues created.
-    value: ${{ steps.create.outputs.created-count }}
-  first-issue-number:
-    description: Issue number of the first issue created, or empty.
-    value: ${{ steps.create.outputs.first-issue-number }}
-runs:
-  using: composite
-  steps:
-    - name: Create issues
-      id: create
-      uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
-      env:
-        AGENT_OUTPUT_LIB: ${{ github.action_path }}/../agent-output.cjs
-        OUTPUT_FILE: ${{ inputs.output-file }}
-      with:
-        github-token: ${{ inputs.token }}
-        script: |
-          const { readAgentItems } = require(process.env.AGENT_OUTPUT_LIB);
-          const items = readAgentItems(process.env.OUTPUT_FILE, 'create_issue');
-
-          const created = [];
-
-          for (const item of items) {
-            if (!item.title) {
-              core.warning(`create_issue item has no title, skipping: ${JSON.stringify(item)}`);
-              continue;
-            }
-
-            const { data } = await github.rest.issues.create({
-              ...context.repo,
-              title: item.title,
-              body: item.body ?? '',
-            });
-
-            created.push(data.number);
-            core.info(`Created #${data.number}: ${item.title}`);
-          }
-
-          core.setOutput('created-count', String(created.length));
-          core.setOutput('first-issue-number', created.length > 0 ? String(created[0]) : '');
+# Managed by @plainconceptsplatform/workflows. Source: loops/actions/create-agent-issues/action.yml. Update with workflows update --force; consumer edits may be overwritten.
+name: Create agent issues
+description: Create every create_issue item from agent_output.json.
+inputs:
+  output-file:
+    description: Path to agent_output.json.
+    required: true
+  token:
+    description: GitHub token with issues:write.
+    required: true
+outputs:
+  created-count:
+    description: Number of issues created.
+    value: ${{ steps.create.outputs.created-count }}
+  first-issue-number:
+    description: Issue number of the first issue created, or empty.
+    value: ${{ steps.create.outputs.first-issue-number }}
+runs:
+  using: composite
+  steps:
+    - name: Create issues
+      id: create
+      uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
+      env:
+        AGENT_OUTPUT_LIB: ${{ github.action_path }}/../agent-output.cjs
+        OUTPUT_FILE: ${{ inputs.output-file }}
+      with:
+        github-token: ${{ inputs.token }}
+        script: |
+          const { readAgentItems } = require(process.env.AGENT_OUTPUT_LIB);
+          const items = readAgentItems(process.env.OUTPUT_FILE, 'create_issue');
+
+          const created = [];
+
+          for (const item of items) {
+            if (!item.title) {
+              core.warning(`create_issue item has no title, skipping: ${JSON.stringify(item)}`);
+              continue;
+            }
+
+            const { data } = await github.rest.issues.create({
+              ...context.repo,
+              title: item.title,
+              body: item.body ?? '',
+            });
+
+            created.push(data.number);
+            core.info(`Created #${data.number}: ${item.title}`);
+          }
+
+          core.setOutput('created-count', String(created.length));
+          core.setOutput('first-issue-number', created.length > 0 ? String(created[0]) : '');