@plainconceptsplatform/workflows 1.3.1 → 1.5.0

package/loops/actions/housekeeping/action.yml

@@ -220,6 +220,14 @@ runs:
           for (const [parent, children] of childrenOf) {
             const open = children.filter((c) => c.state === 'open');
             if (open.length > 0 || !issues.some((i) => i.number === parent)) continue;
+            // A stack feature issue. Its root pull request closing the issue is what ends it, not
+            // this sweep: closing the tracker here would close a feature whose root pull request
+            // is still open and holding a branch with real work on it. Refine stamps the root
+            // markers on the parent before the first child is ever handed over, so the marker
+            // is there from birth; finding none means flat mode, and the original rule applies.
+            // Everything stack-specific about these parents is decided in section 3b below,
+            // which sees the whole stack, not just the child count.
+            if (issues.some((i) => i.number === parent && /<!-- stack-root-branch: \S+ -->/.test(i.body ?? ''))) continue;
             await act(`#${parent}: closing split parent, all ${children.length} children are done`, async () => {
               await github.rest.issues.createComment({
                 ...context.repo, issue_number: parent,
@@ -229,6 +237,87 @@ runs:
             });
           }
 
+          // The stack and branch sections both need every pull request the repository has ever
+          // seen, closed included, so it is paginated once here rather than once per section.
+          const allPulls = await github.paginate(github.rest.pulls.list, { ...context.repo, state: 'all', per_page: 100 });
+
+          // 3b. Stacks. Section 3 refused to close stack feature issues; this is what happens to
+          // them instead. The whole stack state is on the feature issue (root pull request) plus
+          // the children of the split, and both are already in memory, so a repository without
+          // stacks pays nothing: the marker test below fails first and the loop body never runs.
+          // No polling is added -- this runs on the same cadence the janitor already has, and it
+          // is the backstop for the one event the router can miss: a child issue that closes
+          // seconds after a router run already counted it as open.
+          for (const issue of issues) {
+            if (issue.pull_request) continue;
+            const marker = /<!-- stack-root-pr: (\d+) -->/.exec(issue.body ?? '');
+            if (!marker) continue;
+            const rootPr = Number(marker[1]);
+            const root = allPulls.find((p) => p.number === rootPr);
+            const children = childrenOf.get(issue.number) ?? [];
+            // A child only means work in progress while its pull request is still open.
+            // merge-gate closes the child issue the moment its pull request lands on the
+            // feature branch; if that close was lost -- an API blip, a run that died between
+            // the merge and the close -- the child stays open here for ever and the stack
+            // never reads as finished, which is the stall this sweep exists to prevent. The
+            // child's own `implement-pr` marker names its pull request, so the test is exact:
+            // an open child whose named pull request has merged has landed, whatever its issue
+            // state still claims. Closing it here is the same idempotent backstop section 3 is
+            // for flat splits, and the App token this sweep runs on is what raises the event.
+            let openChildren = 0;
+            for (const child of children) {
+              if (child.state !== 'open') continue;
+              const prMarker = /<!-- implement-pr: (\d+) -->/.exec(child.body ?? '');
+              const landed = prMarker && allPulls.some((p) => p.number === Number(prMarker[1]) && p.merged_at);
+              if (!landed) { openChildren += 1; continue; }
+              await act(`#${child.number}: closing child, its pull request #${prMarker[1]} merged into the stack`, async () => {
+                await github.rest.issues.createComment({
+                  ...context.repo, issue_number: child.number,
+                  body: `${DIGEST_MARKER}\nClosed automatically: its pull request #${prMarker[1]} merged into the feature branch, so this child is done.`,
+                });
+                await github.rest.issues.update({ ...context.repo, issue_number: child.number, state: 'closed', state_reason: 'completed' });
+              });
+            }
+            if (!root) {
+              needsHuman.push({ kind: 'stack-root-missing', issue, rootPr, waited: age(issue.updated_at) });
+            } else if (root.state === 'open') {
+              if (openChildren > 0) continue; // mid-stack: the normal state, not worth a line
+              // Every child is done, so the completion announcement should exist on the root
+              // pull request. Its absence is the lost race above; a person is told here rather
+              // than the stack sitting finished and silent. When the announcement exists but
+              // nobody has merged for days, that is staleness worth one line too.
+              const comments = await github.paginate(github.rest.issues.listComments, {
+                ...context.repo, issue_number: rootPr, per_page: 100,
+              });
+              const told = comments.find((c) => (c.body ?? '').includes('<!-- stack-complete -->'));
+              if (!told) {
+                needsHuman.push({ kind: 'stack-ready', issue, pull: root, waited: age(issue.updated_at) });
+              } else if (age(told.created_at) > stalePrMs) {
+                needsHuman.push({ kind: 'stack-held', issue, pull: root, waited: age(told.created_at) });
+              }
+            } else if (root.merged_at) {
+              // The root merged to the default branch and its closing keyword should have
+              // closed this issue with it. If something raced that, the same rule section 3
+              // applies to flat splits closes it here: every child done, root landed, done.
+              if (openChildren === 0) {
+                await act(`#${issue.number}: closing stack feature, its root PR #${rootPr} merged`, async () => {
+                  await github.rest.issues.createComment({
+                    ...context.repo, issue_number: issue.number,
+                    body: `${DIGEST_MARKER}\nClosed automatically: the stack's root pull request #${rootPr} merged with every child landed (${children.map((c) => `#${c.number}`).join(', ')}).`,
+                  });
+                  await github.rest.issues.update({ ...context.repo, issue_number: issue.number, state: 'closed', state_reason: 'completed' });
+                });
+              } else {
+                needsHuman.push({ kind: 'stack-orphaned', issue, pull: root, waited: age(root.merged_at), openChildren });
+              }
+            } else {
+              // Closed without merging. That is a person's decision or an accident, and the
+              // landed child work only exists on the feature branch, which section 4 may have
+              // already deleted -- restorable through refs/pull/<n>/head, but a person decides.
+              needsHuman.push({ kind: 'stack-root-closed', issue, pull: root, waited: age(root.closed_at), openChildren });
+            }
+          }
+
           // 4. Branches. Nothing in the fleet has ever deleted one, so they accumulate for ever
           // after a merge and after a close alike. Only ever touch a branch whose pull request is
           // finished; never the default branch, and never one with a pull request still open.
@@ -241,7 +330,6 @@ runs:
           // back, and the pull request page still shows the diff.
           const branches = await github.paginate(github.rest.repos.listBranches, { ...context.repo, per_page: 100 });
           const defaultBranch = context.payload.repository.default_branch;
-          const allPulls = await github.paginate(github.rest.pulls.list, { ...context.repo, state: 'all', per_page: 100 });
           const byHead = new Map();
           for (const pull of allPulls) {
             if (!byHead.has(pull.head.ref)) byHead.set(pull.head.ref, []);
@@ -319,6 +407,11 @@ runs:
           const line = (entry) => {
             if (entry.kind === 'pr-parked') return `- PR #${entry.pull.number} · parked ${days(entry.waited)}d · gate verdict \`${entry.verdict}\` · ${entry.pull.title}`;
             if (entry.kind === 'pr-stale') return `- PR #${entry.pull.number} · ${days(entry.waited)}d old · no gate verdict yet · ${entry.pull.title}`;
+            if (entry.kind === 'stack-ready') return `- PR #${entry.pull.number} · stack finished ${days(entry.waited)}d ago, never announced · human merge needed · ${entry.pull.title}`;
+            if (entry.kind === 'stack-held') return `- PR #${entry.pull.number} · stack ready and waiting on a human merge for ${days(entry.waited)}d · ${entry.pull.title}`;
+            if (entry.kind === 'stack-root-missing') return `- #${entry.issue.number} · names root PR #${entry.rootPr}, which does not exist · ${entry.issue.title}`;
+            if (entry.kind === 'stack-root-closed') return `- PR #${entry.pull.number} · stack root closed unmerged, ${entry.openChildren} child(ren) still open · ${entry.issue.title} · restore the branch from refs/pull/${entry.pull.number}/head if accidental`;
+            if (entry.kind === 'stack-orphaned') return `- #${entry.issue.number} · root merged but ${entry.openChildren} child(ren) still open · ${entry.issue.title}`;
             if (entry.kind === 'retries-exhausted') return `- #${entry.issue.number} · stalled ${days(entry.waited)}d · retried ${entry.attempts}× and still stalling · ${entry.issue.title}`;
             if (entry.kind === 'no-work-label') return `- #${entry.issue.number} · stalled ${days(entry.waited)}d · no work label to retry with · ${entry.issue.title}`;
             if (entry.kind === 'stale-audit') return `- #${entry.issue.number} · open ${days(entry.waited)}d · audit report nobody actioned · ${entry.issue.title}`;
@@ -356,6 +449,7 @@ runs:
             DIGEST_MARKER,
             `_Updated ${new Date().toISOString().slice(0, 16).replace('T', ' ')} UTC. This issue is rewritten by the housekeeping job; edits to it are lost._`,
             section('Waiting on a decision', ['decided']),
+            section('Stacked features waiting on a human', ['stack-ready', 'stack-held', 'stack-root-missing', 'stack-root-closed', 'stack-orphaned']),
             section('Pull requests parked by the gate', ['pr-parked', 'pr-stale']),
             section('Stalled beyond the retry budget', ['retries-exhausted', 'no-work-label']),
             section('Audit reports nobody actioned', ['stale-audit']),

package/loops/actions/link-pr-to-issue/action.yml

@@ -1,40 +1,40 @@
-# Managed by @plainconceptsplatform/workflows. Source: loops/actions/link-pr-to-issue/action.yml. Update with workflows update --force; consumer edits may be overwritten.
-name: Link pull request to issue
-description: Ensure the pull request body carries a closing reference to its source issue.
-inputs:
-  token:
-    description: GitHub token with pull-requests write access.
-    required: true
-  pr-number:
-    description: Pull request number.
-    required: true
-  issue-number:
-    description: Issue number the pull request should close.
-    required: true
-runs:
-  using: composite
-  steps:
-    - name: Ensure a closing reference
-      shell: bash
-      env:
-        GH_TOKEN: ${{ inputs.token }}
-        REPO: ${{ github.repository }}
-        PR_NUMBER: ${{ inputs.pr-number }}
-        ISSUE_NUMBER: ${{ inputs.issue-number }}
-      run: |
-        set -euo pipefail
-
-        pr="$(gh pr view "$PR_NUMBER" --repo "$REPO" --json closingIssuesReferences,body)"
-
-        if [ "$(jq '.closingIssuesReferences | length' <<<"$pr")" -gt 0 ]; then
-          echo "PR #$PR_NUMBER already closes an issue."
-          exit 0
-        fi
-
-        # A closing reference can only be created from the pull request body; there is no
-        # REST or GraphQL mutation for it.
-        body="$(jq -r '.body // ""' <<<"$pr")"
-        printf '%s\n\nCloses #%s\n' "$body" "$ISSUE_NUMBER" > /tmp/pr-body.md
-
-        gh pr edit "$PR_NUMBER" --repo "$REPO" --body-file /tmp/pr-body.md
-        echo "Added 'Closes #$ISSUE_NUMBER' to PR #$PR_NUMBER."
+# Managed by @plainconceptsplatform/workflows. Source: loops/actions/link-pr-to-issue/action.yml. Update with workflows update --force; consumer edits may be overwritten.
+name: Link pull request to issue
+description: Ensure the pull request body carries a closing reference to its source issue.
+inputs:
+  token:
+    description: GitHub token with pull-requests write access.
+    required: true
+  pr-number:
+    description: Pull request number.
+    required: true
+  issue-number:
+    description: Issue number the pull request should close.
+    required: true
+runs:
+  using: composite
+  steps:
+    - name: Ensure a closing reference
+      shell: bash
+      env:
+        GH_TOKEN: ${{ inputs.token }}
+        REPO: ${{ github.repository }}
+        PR_NUMBER: ${{ inputs.pr-number }}
+        ISSUE_NUMBER: ${{ inputs.issue-number }}
+      run: |
+        set -euo pipefail
+
+        pr="$(gh pr view "$PR_NUMBER" --repo "$REPO" --json closingIssuesReferences,body)"
+
+        if [ "$(jq '.closingIssuesReferences | length' <<<"$pr")" -gt 0 ]; then
+          echo "PR #$PR_NUMBER already closes an issue."
+          exit 0
+        fi
+
+        # A closing reference can only be created from the pull request body; there is no
+        # REST or GraphQL mutation for it.
+        body="$(jq -r '.body // ""' <<<"$pr")"
+        printf '%s\n\nCloses #%s\n' "$body" "$ISSUE_NUMBER" > /tmp/pr-body.md
+
+        gh pr edit "$PR_NUMBER" --repo "$REPO" --body-file /tmp/pr-body.md
+        echo "Added 'Closes #$ISSUE_NUMBER' to PR #$PR_NUMBER."

package/loops/actions/list-open-issues/action.yml

@@ -1,33 +1,33 @@
-# Managed by @plainconceptsplatform/workflows. Source: loops/actions/list-open-issues/action.yml. Update with workflows update --force; consumer edits may be overwritten.
-name: List open issues
-description: |
-  Writes all open issues (number, title, labels) to `/tmp/gh-aw/agent/open-issues.json`
-  so the agent can check for semantic duplicates without spending turns discovering them.
-inputs:
-  token:
-    description: GitHub token with issues:read permission.
-    required: true
-  repo:
-    description: Repository in `owner/name` format.
-    required: true
-  output-path:
-    description: Path to write the JSON output.
-    required: false
-    default: /tmp/gh-aw/agent/open-issues.json
-runs:
-  using: composite
-  steps:
-    - name: List open issues
-      shell: bash
-      env:
-        GH_TOKEN: ${{ inputs.token }}
-        REPO: ${{ inputs.repo }}
-        OUTPUT_PATH: ${{ inputs.output-path }}
-      run: |
-        set -euo pipefail
-        mkdir -p "$(dirname "$OUTPUT_PATH")"
-        gh issue list --repo "$REPO" --state open --limit 500 \
-          --json number,title,labels \
-          --jq '[.[] | {number, title, labels: [.labels[].name]}]' \
-          > "$OUTPUT_PATH"
-        echo "Wrote $(jq 'length' "$OUTPUT_PATH") open issues to $OUTPUT_PATH"
+# Managed by @plainconceptsplatform/workflows. Source: loops/actions/list-open-issues/action.yml. Update with workflows update --force; consumer edits may be overwritten.
+name: List open issues
+description: |
+  Writes all open issues (number, title, labels) to `/tmp/gh-aw/agent/open-issues.json`
+  so the agent can check for semantic duplicates without spending turns discovering them.
+inputs:
+  token:
+    description: GitHub token with issues:read permission.
+    required: true
+  repo:
+    description: Repository in `owner/name` format.
+    required: true
+  output-path:
+    description: Path to write the JSON output.
+    required: false
+    default: /tmp/gh-aw/agent/open-issues.json
+runs:
+  using: composite
+  steps:
+    - name: List open issues
+      shell: bash
+      env:
+        GH_TOKEN: ${{ inputs.token }}
+        REPO: ${{ inputs.repo }}
+        OUTPUT_PATH: ${{ inputs.output-path }}
+      run: |
+        set -euo pipefail
+        mkdir -p "$(dirname "$OUTPUT_PATH")"
+        gh issue list --repo "$REPO" --state open --limit 500 \
+          --json number,title,labels \
+          --jq '[.[] | {number, title, labels: [.labels[].name]}]' \
+          > "$OUTPUT_PATH"
+        echo "Wrote $(jq 'length' "$OUTPUT_PATH") open issues to $OUTPUT_PATH"

package/loops/actions/load-issue-context/action.yml

@@ -1,45 +1,45 @@
-# Managed by @plainconceptsplatform/workflows. Source: loops/actions/load-issue-context/action.yml. Update with workflows update --force; consumer edits may be overwritten.
-name: Load issue context
-description: Write issue metadata and comment context to a JSON file.
-inputs:
-  token:
-    description: GitHub token used by github-script.
-    required: true
-  issue-number:
-    description: Issue number to load.
-    required: true
-  output-path:
-    description: Absolute path where context JSON is written.
-    required: true
-runs:
-  using: composite
-  steps:
-    - name: Load issue and comments
-      uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
-      env:
-        ISSUE_NUMBER: ${{ inputs.issue-number }}
-        OUTPUT_PATH: ${{ inputs.output-path }}
-      with:
-        github-token: ${{ inputs.token }}
-        script: |
-          const fs = require('fs');
-          const issueNumber = Number(process.env.ISSUE_NUMBER);
-          const issue = await github.rest.issues.get({ ...context.repo, issue_number: issueNumber });
-          const comments = await github.paginate(github.rest.issues.listComments, {
-            ...context.repo, issue_number: issueNumber, per_page: 100,
-          });
-
-          fs.mkdirSync(require('path').dirname(process.env.OUTPUT_PATH), { recursive: true });
-          fs.writeFileSync(process.env.OUTPUT_PATH, JSON.stringify({
-            number: issue.data.number,
-            title: issue.data.title,
-            body: issue.data.body,
-            author: issue.data.user.login,
-            authorAssociation: issue.data.author_association,
-            labels: issue.data.labels.map(({ name }) => name),
-            comments: comments.map(({ user, author_association, body }) => ({
-              author: user.login,
-              association: author_association,
-              body,
-            })),
-          }, null, 2));
+# Managed by @plainconceptsplatform/workflows. Source: loops/actions/load-issue-context/action.yml. Update with workflows update --force; consumer edits may be overwritten.
+name: Load issue context
+description: Write issue metadata and comment context to a JSON file.
+inputs:
+  token:
+    description: GitHub token used by github-script.
+    required: true
+  issue-number:
+    description: Issue number to load.
+    required: true
+  output-path:
+    description: Absolute path where context JSON is written.
+    required: true
+runs:
+  using: composite
+  steps:
+    - name: Load issue and comments
+      uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
+      env:
+        ISSUE_NUMBER: ${{ inputs.issue-number }}
+        OUTPUT_PATH: ${{ inputs.output-path }}
+      with:
+        github-token: ${{ inputs.token }}
+        script: |
+          const fs = require('fs');
+          const issueNumber = Number(process.env.ISSUE_NUMBER);
+          const issue = await github.rest.issues.get({ ...context.repo, issue_number: issueNumber });
+          const comments = await github.paginate(github.rest.issues.listComments, {
+            ...context.repo, issue_number: issueNumber, per_page: 100,
+          });
+
+          fs.mkdirSync(require('path').dirname(process.env.OUTPUT_PATH), { recursive: true });
+          fs.writeFileSync(process.env.OUTPUT_PATH, JSON.stringify({
+            number: issue.data.number,
+            title: issue.data.title,
+            body: issue.data.body,
+            author: issue.data.user.login,
+            authorAssociation: issue.data.author_association,
+            labels: issue.data.labels.map(({ name }) => name),
+            comments: comments.map(({ user, author_association, body }) => ({
+              author: user.login,
+              association: author_association,
+              body,
+            })),
+          }, null, 2));

package/loops/actions/merge-agent-pr/action.yml

@@ -1,49 +1,49 @@
-# Managed by @plainconceptsplatform/workflows. Source: loops/actions/merge-agent-pr/action.yml. Update with workflows update --force; consumer edits may be overwritten.
-name: Merge agent pull request
-description: Read merge_pull_request from agent_output.json and merge the PR via gh.
-inputs:
-  output-file:
-    description: Path to agent_output.json.
-    required: true
-  token:
-    description: GitHub token with pull-requests:write and contents:write.
-    required: true
-  repo:
-    description: Target repository in owner/name format.
-    required: false
-    default: ${{ github.repository }}
-runs:
-  using: composite
-  steps:
-    - name: Merge pull request
-      shell: bash
-      env:
-        GH_TOKEN: ${{ inputs.token }}
-        OUTPUT_FILE: ${{ inputs.output-file }}
-        REPO: ${{ inputs.repo }}
-      run: |
-        set -euo pipefail
-        [ -f "$OUTPUT_FILE" ] || exit 0
-
-        jq -c '.items[] | select(.type == "merge_pull_request")' "$OUTPUT_FILE" | while read -r item; do
-          PR_NUM=$(echo "$item" | jq -er '.pr_number // .item_number // empty')
-          [[ "$PR_NUM" =~ ^[1-9][0-9]*$ ]] || { echo "::error::Invalid pull request number: $PR_NUM"; exit 1; }
-
-          HEAD_SHA=$(gh pr view "$PR_NUM" --repo "$REPO" --json headRefOid --jq '.headRefOid')
-          [[ "$HEAD_SHA" =~ ^[0-9a-fA-F]{40}$ ]] || { echo "::error::Invalid pull request head SHA for #$PR_NUM"; exit 1; }
-
-          HEAD_REF=$(gh pr view "$PR_NUM" --repo "$REPO" --json headRefName --jq '.headRefName')
-
-          gh pr merge "$PR_NUM" --repo "$REPO" --squash --match-head-commit "$HEAD_SHA"
-
-          # Delete the branch, because nothing else ever has: four repositories had accumulated
-          # 47 non-main branches, every one the head of a pull request merged or closed months
-          # ago. Done after the merge and with its failure swallowed rather than through
-          # `gh pr merge --delete-branch`, which also tries to delete the local branch and can
-          # turn a completed merge into a red step. `delete_branch_on_merge` on the repository
-          # does the same job, but only where someone remembered to switch it on.
-          if [ -n "$HEAD_REF" ] && [ "$HEAD_REF" != "null" ]; then
-            gh api -X DELETE "repos/$REPO/git/refs/heads/$HEAD_REF" >/dev/null 2>&1 ||
-              echo "::notice::branch $HEAD_REF was already gone or is protected"
-          fi
-        done
+# Managed by @plainconceptsplatform/workflows. Source: loops/actions/merge-agent-pr/action.yml. Update with workflows update --force; consumer edits may be overwritten.
+name: Merge agent pull request
+description: Read merge_pull_request from agent_output.json and merge the PR via gh.
+inputs:
+  output-file:
+    description: Path to agent_output.json.
+    required: true
+  token:
+    description: GitHub token with pull-requests:write and contents:write.
+    required: true
+  repo:
+    description: Target repository in owner/name format.
+    required: false
+    default: ${{ github.repository }}
+runs:
+  using: composite
+  steps:
+    - name: Merge pull request
+      shell: bash
+      env:
+        GH_TOKEN: ${{ inputs.token }}
+        OUTPUT_FILE: ${{ inputs.output-file }}
+        REPO: ${{ inputs.repo }}
+      run: |
+        set -euo pipefail
+        [ -f "$OUTPUT_FILE" ] || exit 0
+
+        jq -c '.items[] | select(.type == "merge_pull_request")' "$OUTPUT_FILE" | while read -r item; do
+          PR_NUM=$(echo "$item" | jq -er '.pr_number // .item_number // empty')
+          [[ "$PR_NUM" =~ ^[1-9][0-9]*$ ]] || { echo "::error::Invalid pull request number: $PR_NUM"; exit 1; }
+
+          HEAD_SHA=$(gh pr view "$PR_NUM" --repo "$REPO" --json headRefOid --jq '.headRefOid')
+          [[ "$HEAD_SHA" =~ ^[0-9a-fA-F]{40}$ ]] || { echo "::error::Invalid pull request head SHA for #$PR_NUM"; exit 1; }
+
+          HEAD_REF=$(gh pr view "$PR_NUM" --repo "$REPO" --json headRefName --jq '.headRefName')
+
+          gh pr merge "$PR_NUM" --repo "$REPO" --squash --match-head-commit "$HEAD_SHA"
+
+          # Delete the branch, because nothing else ever has: four repositories had accumulated
+          # 47 non-main branches, every one the head of a pull request merged or closed months
+          # ago. Done after the merge and with its failure swallowed rather than through
+          # `gh pr merge --delete-branch`, which also tries to delete the local branch and can
+          # turn a completed merge into a red step. `delete_branch_on_merge` on the repository
+          # does the same job, but only where someone remembered to switch it on.
+          if [ -n "$HEAD_REF" ] && [ "$HEAD_REF" != "null" ]; then
+            gh api -X DELETE "repos/$REPO/git/refs/heads/$HEAD_REF" >/dev/null 2>&1 ||
+              echo "::notice::branch $HEAD_REF was already gone or is protected"
+          fi
+        done

package/loops/actions/push-agent-branch/action.yml

@@ -1,45 +1,45 @@
-# Managed by @plainconceptsplatform/workflows. Source: loops/actions/push-agent-branch/action.yml. Update with workflows update --force; consumer edits may be overwritten.
-name: Push agent branch
-description: Read push_to_pull_request_branch from agent_output.json and fast-forward from its git bundle.
-inputs:
-  output-file:
-    description: Path to agent_output.json.
-    required: true
-  bundle-file:
-    description: Path to the git bundle from the agent artifact.
-    required: false
-    default: ''
-  token:
-    description: GitHub token with contents:write.
-    required: true
-runs:
-  using: composite
-  steps:
-    - name: Configure git credentials
-      shell: bash
-      env:
-        GH_TOKEN: ${{ inputs.token }}
-      run: |
-        git config --global url."https://x-access-token:${GH_TOKEN}@github.com/".insteadOf "https://github.com/"
-    - name: Read pull request branch
-      id: request
-      shell: bash
-      env:
-        GH_TOKEN: ${{ inputs.token }}
-        OUTPUT_FILE: ${{ inputs.output-file }}
-        BUNDLE_FILE: ${{ inputs.bundle-file }}
-      run: |
-        set -euo pipefail
-        [ -f "$OUTPUT_FILE" ] || exit 0
-
-        ITEM=$(jq -c '.items[] | select(.type == "push_to_pull_request_branch")' "$OUTPUT_FILE")
-        [ -n "$ITEM" ] || exit 0
-
-        BRANCH=$(echo "$ITEM" | jq -r '.branch')
-        echo "branch=$BRANCH" >> "$GITHUB_OUTPUT"
-    - name: Apply bundle to pull request branch
-      if: steps.request.outputs.branch != '' && inputs.bundle-file != ''
-      uses: ./.github/actions/apply-agent-bundle
-      with:
-        bundle-file: ${{ inputs.bundle-file }}
-        target-branch: ${{ steps.request.outputs.branch }}
+# Managed by @plainconceptsplatform/workflows. Source: loops/actions/push-agent-branch/action.yml. Update with workflows update --force; consumer edits may be overwritten.
+name: Push agent branch
+description: Read push_to_pull_request_branch from agent_output.json and fast-forward from its git bundle.
+inputs:
+  output-file:
+    description: Path to agent_output.json.
+    required: true
+  bundle-file:
+    description: Path to the git bundle from the agent artifact.
+    required: false
+    default: ''
+  token:
+    description: GitHub token with contents:write.
+    required: true
+runs:
+  using: composite
+  steps:
+    - name: Configure git credentials
+      shell: bash
+      env:
+        GH_TOKEN: ${{ inputs.token }}
+      run: |
+        git config --global url."https://x-access-token:${GH_TOKEN}@github.com/".insteadOf "https://github.com/"
+    - name: Read pull request branch
+      id: request
+      shell: bash
+      env:
+        GH_TOKEN: ${{ inputs.token }}
+        OUTPUT_FILE: ${{ inputs.output-file }}
+        BUNDLE_FILE: ${{ inputs.bundle-file }}
+      run: |
+        set -euo pipefail
+        [ -f "$OUTPUT_FILE" ] || exit 0
+
+        ITEM=$(jq -c '.items[] | select(.type == "push_to_pull_request_branch")' "$OUTPUT_FILE")
+        [ -n "$ITEM" ] || exit 0
+
+        BRANCH=$(echo "$ITEM" | jq -r '.branch')
+        echo "branch=$BRANCH" >> "$GITHUB_OUTPUT"
+    - name: Apply bundle to pull request branch
+      if: steps.request.outputs.branch != '' && inputs.bundle-file != ''
+      uses: ./.github/actions/apply-agent-bundle
+      with:
+        bundle-file: ${{ inputs.bundle-file }}
+        target-branch: ${{ steps.request.outputs.branch }}

package/loops/actions/remove-issue-labels/action.yml

@@ -1,37 +1,37 @@
-# Managed by @plainconceptsplatform/workflows. Source: loops/actions/remove-issue-labels/action.yml. Update with workflows update --force; consumer edits may be overwritten.
-name: Remove issue labels
-description: Remove one or more labels from an issue or pull request.
-inputs:
-  token:
-    description: GitHub token used by github-script.
-    required: true
-  issue-number:
-    description: Issue or pull request number.
-    required: true
-  labels:
-    description: Labels to remove, one per line. A comma-separated list is accepted as well.
-    required: true
-runs:
-  using: composite
-  steps:
-    - name: Remove labels
-      uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
-      env:
-        ISSUE_NUMBER: ${{ inputs.issue-number }}
-        LABELS: ${{ inputs.labels }}
-      with:
-        github-token: ${{ inputs.token }}
-        script: |
-          // Callers wrote `labels: a,b` while this split on newlines, so one label named "a,b"
-          // was removed: a 404, swallowed below, and neither label ever came off.
-          for (const label of process.env.LABELS.split(/\r?\n|,/).map((label) => label.trim()).filter(Boolean)) {
-            try {
-              await github.rest.issues.removeLabel({
-                ...context.repo,
-                issue_number: Number(process.env.ISSUE_NUMBER),
-                name: label,
-              });
-            } catch (error) {
-              if (error.status !== 404) throw error;
-            }
-          }
+# Managed by @plainconceptsplatform/workflows. Source: loops/actions/remove-issue-labels/action.yml. Update with workflows update --force; consumer edits may be overwritten.
+name: Remove issue labels
+description: Remove one or more labels from an issue or pull request.
+inputs:
+  token:
+    description: GitHub token used by github-script.
+    required: true
+  issue-number:
+    description: Issue or pull request number.
+    required: true
+  labels:
+    description: Labels to remove, one per line. A comma-separated list is accepted as well.
+    required: true
+runs:
+  using: composite
+  steps:
+    - name: Remove labels
+      uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
+      env:
+        ISSUE_NUMBER: ${{ inputs.issue-number }}
+        LABELS: ${{ inputs.labels }}
+      with:
+        github-token: ${{ inputs.token }}
+        script: |
+          // Callers wrote `labels: a,b` while this split on newlines, so one label named "a,b"
+          // was removed: a 404, swallowed below, and neither label ever came off.
+          for (const label of process.env.LABELS.split(/\r?\n|,/).map((label) => label.trim()).filter(Boolean)) {
+            try {
+              await github.rest.issues.removeLabel({
+                ...context.repo,
+                issue_number: Number(process.env.ISSUE_NUMBER),
+                name: label,
+              });
+            } catch (error) {
+              if (error.status !== 404) throw error;
+            }
+          }