@plainconceptsplatform/workflows 1.9.0 → 1.10.0

package/loops/actions/cleanup-artifacts/action.yml

@@ -1,91 +1,91 @@
-# Managed by @plainconceptsplatform/workflows. Source: loops/actions/cleanup-artifacts/action.yml. Update with workflows update --force; consumer edits may be overwritten.
-name: Clean up artifacts
-description: Delete workflow artifacts older than the configured retention period.
-inputs:
-  token:
-    description: GitHub token with actions write access.
-    required: true
-  artifact-retention-days:
-    description: Retention period in days. Invalid or empty values use 3.
-    required: false
-    default: ''
-runs:
-  using: composite
-  steps:
-    - name: Delete expired artifacts
-      uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
-      env:
-        ARTIFACT_RETENTION_DAYS: ${{ inputs.artifact-retention-days }}
-      with:
-        github-token: ${{ inputs.token }}
-        script: |
-          const parsedDays = Number.parseInt(process.env.ARTIFACT_RETENTION_DAYS, 10);
-          const days = Number.isInteger(parsedDays) && parsedDays > 0 ? parsedDays : 3;
-          const cutoff = new Date(Date.now() - days * 24 * 60 * 60 * 1000);
-
-          core.info(`Retention: ${days} days (cutoff ${cutoff.toISOString()})`);
-
-          const artifacts = await github.paginate(github.rest.actions.listArtifactsForRepo, {
-            ...context.repo,
-            per_page: 100,
-          });
-
-          const expired = artifacts.filter((artifact) => new Date(artifact.created_at) < cutoff);
-
-          let deleted = 0;
-          const failed = [];
-
-          for (const artifact of expired) {
-            // GitHub answers a delete with a 5xx now and then. Three tries, because the
-            // alternative is a red daily run over one artifact that tomorrow's run would
-            // have removed anyway.
-            let lastError;
-            for (let attempt = 1; attempt <= 3; attempt += 1) {
-              try {
-                await github.rest.actions.deleteArtifact({
-                  ...context.repo,
-                  artifact_id: artifact.id,
-                });
-
-                core.info(`Deleted ${artifact.name} (created ${artifact.created_at})`);
-                deleted += 1;
-                lastError = undefined;
-                break;
-              } catch (error) {
-                lastError = error;
-                if (attempt < 3) await new Promise((wait) => setTimeout(wait, attempt * 2000));
-              }
-            }
-
-            if (lastError) {
-              core.warning(
-                `Could not delete ${artifact.name} (${artifact.id}) after 3 tries: ${lastError.message}`,
-              );
-              failed.push({ name: artifact.name, status: lastError.status });
-            }
-          }
-
-          await core.summary
-            .addHeading('Artifact cleanup', 2)
-            .addList([
-              `Retention: ${days} days (cutoff ${cutoff.toISOString()})`,
-              `Deleted: ${deleted}`,
-              `Failed to delete: ${failed.length}`,
-              `Within retention: ${artifacts.length - expired.length}`,
-            ])
-            .write();
-
-          // Deleting nothing at all while expired artifacts exist is a permission or
-          // configuration problem, and has to be loud. One stubborn artifact among many is
-          // the API having a bad minute: tomorrow's run picks it up, and failing here only
-          // teaches people to ignore a red cleanup. A 4xx is never transient, so it fails
-          // whatever else succeeded.
-          const names = failed.map((entry) => entry.name).join(', ');
-          const structural = failed.some((entry) => entry.status && entry.status < 500);
-          if (failed.length > 0 && (deleted === 0 || structural)) {
-            core.setFailed(`${failed.length} artifact(s) could not be deleted: ${names}`);
-          } else if (failed.length > 0) {
-            core.warning(
-              `${failed.length} artifact(s) survived this run and will be retried tomorrow: ${names}`,
-            );
-          }
+# Managed by @plainconceptsplatform/workflows. Source: loops/actions/cleanup-artifacts/action.yml. Update with workflows update --force; consumer edits may be overwritten.
+name: Clean up artifacts
+description: Delete workflow artifacts older than the configured retention period.
+inputs:
+  token:
+    description: GitHub token with actions write access.
+    required: true
+  artifact-retention-days:
+    description: Retention period in days. Invalid or empty values use 3.
+    required: false
+    default: ''
+runs:
+  using: composite
+  steps:
+    - name: Delete expired artifacts
+      uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
+      env:
+        ARTIFACT_RETENTION_DAYS: ${{ inputs.artifact-retention-days }}
+      with:
+        github-token: ${{ inputs.token }}
+        script: |
+          const parsedDays = Number.parseInt(process.env.ARTIFACT_RETENTION_DAYS, 10);
+          const days = Number.isInteger(parsedDays) && parsedDays > 0 ? parsedDays : 3;
+          const cutoff = new Date(Date.now() - days * 24 * 60 * 60 * 1000);
+
+          core.info(`Retention: ${days} days (cutoff ${cutoff.toISOString()})`);
+
+          const artifacts = await github.paginate(github.rest.actions.listArtifactsForRepo, {
+            ...context.repo,
+            per_page: 100,
+          });
+
+          const expired = artifacts.filter((artifact) => new Date(artifact.created_at) < cutoff);
+
+          let deleted = 0;
+          const failed = [];
+
+          for (const artifact of expired) {
+            // GitHub answers a delete with a 5xx now and then. Three tries, because the
+            // alternative is a red daily run over one artifact that tomorrow's run would
+            // have removed anyway.
+            let lastError;
+            for (let attempt = 1; attempt <= 3; attempt += 1) {
+              try {
+                await github.rest.actions.deleteArtifact({
+                  ...context.repo,
+                  artifact_id: artifact.id,
+                });
+
+                core.info(`Deleted ${artifact.name} (created ${artifact.created_at})`);
+                deleted += 1;
+                lastError = undefined;
+                break;
+              } catch (error) {
+                lastError = error;
+                if (attempt < 3) await new Promise((wait) => setTimeout(wait, attempt * 2000));
+              }
+            }
+
+            if (lastError) {
+              core.warning(
+                `Could not delete ${artifact.name} (${artifact.id}) after 3 tries: ${lastError.message}`,
+              );
+              failed.push({ name: artifact.name, status: lastError.status });
+            }
+          }
+
+          await core.summary
+            .addHeading('Artifact cleanup', 2)
+            .addList([
+              `Retention: ${days} days (cutoff ${cutoff.toISOString()})`,
+              `Deleted: ${deleted}`,
+              `Failed to delete: ${failed.length}`,
+              `Within retention: ${artifacts.length - expired.length}`,
+            ])
+            .write();
+
+          // Deleting nothing at all while expired artifacts exist is a permission or
+          // configuration problem, and has to be loud. One stubborn artifact among many is
+          // the API having a bad minute: tomorrow's run picks it up, and failing here only
+          // teaches people to ignore a red cleanup. A 4xx is never transient, so it fails
+          // whatever else succeeded.
+          const names = failed.map((entry) => entry.name).join(', ');
+          const structural = failed.some((entry) => entry.status && entry.status < 500);
+          if (failed.length > 0 && (deleted === 0 || structural)) {
+            core.setFailed(`${failed.length} artifact(s) could not be deleted: ${names}`);
+          } else if (failed.length > 0) {
+            core.warning(
+              `${failed.length} artifact(s) survived this run and will be retried tomorrow: ${names}`,
+            );
+          }

package/loops/actions/close-agent-issues/action.yml

@@ -1,43 +1,43 @@
-# Managed by @plainconceptsplatform/workflows. Source: loops/actions/close-agent-issues/action.yml. Update with workflows update --force; consumer edits may be overwritten.
-name: Close agent issues
-description: Close every close_issue item from agent_output.json.
-inputs:
-  output-file:
-    description: Path to agent_output.json.
-    required: true
-  token:
-    description: GitHub token with issues:write.
-    required: true
-runs:
-  using: composite
-  steps:
-    - name: Close issues
-      uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
-      env:
-        AGENT_OUTPUT_LIB: ${{ github.action_path }}/../agent-output.cjs
-        OUTPUT_FILE: ${{ inputs.output-file }}
-      with:
-        github-token: ${{ inputs.token }}
-        script: |
-          const { readAgentItems } = require(process.env.AGENT_OUTPUT_LIB);
-          const items = readAgentItems(process.env.OUTPUT_FILE, 'close_issue');
-
-          let closed = 0;
-
-          for (const item of items) {
-            if (!item.item_number) {
-              core.warning(`close_issue item has no item_number, skipping: ${JSON.stringify(item)}`);
-              continue;
-            }
-
-            await github.rest.issues.update({
-              ...context.repo,
-              issue_number: Number(item.item_number),
-              state: 'closed',
-              state_reason: item.state_reason === 'not_planned' ? 'not_planned' : 'completed',
-            });
-
-            closed += 1;
-          }
-
-          core.info(`Closed ${closed} issue(s).`);
+# Managed by @plainconceptsplatform/workflows. Source: loops/actions/close-agent-issues/action.yml. Update with workflows update --force; consumer edits may be overwritten.
+name: Close agent issues
+description: Close every close_issue item from agent_output.json.
+inputs:
+  output-file:
+    description: Path to agent_output.json.
+    required: true
+  token:
+    description: GitHub token with issues:write.
+    required: true
+runs:
+  using: composite
+  steps:
+    - name: Close issues
+      uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
+      env:
+        AGENT_OUTPUT_LIB: ${{ github.action_path }}/../agent-output.cjs
+        OUTPUT_FILE: ${{ inputs.output-file }}
+      with:
+        github-token: ${{ inputs.token }}
+        script: |
+          const { readAgentItems } = require(process.env.AGENT_OUTPUT_LIB);
+          const items = readAgentItems(process.env.OUTPUT_FILE, 'close_issue');
+
+          let closed = 0;
+
+          for (const item of items) {
+            if (!item.item_number) {
+              core.warning(`close_issue item has no item_number, skipping: ${JSON.stringify(item)}`);
+              continue;
+            }
+
+            await github.rest.issues.update({
+              ...context.repo,
+              issue_number: Number(item.item_number),
+              state: 'closed',
+              state_reason: item.state_reason === 'not_planned' ? 'not_planned' : 'completed',
+            });
+
+            closed += 1;
+          }
+
+          core.info(`Closed ${closed} issue(s).`);

package/loops/actions/collect-doc-drift/action.yml

@@ -0,0 +1,29 @@
+# Managed by @plainconceptsplatform/workflows. Source: loops/actions/collect-doc-drift/action.yml. Update with workflows update --force; consumer edits may be overwritten.
+name: Collect documentation drift
+description: |
+  Writes the documentation facts a script can establish on its own to
+  `/tmp/gh-aw/agent/doc-drift.json`: relative Markdown links that lead nowhere, and paths the
+  entry documents cite that no longer exist. Free, deterministic, no model.
+inputs:
+  entry-docs:
+    description: Comma-separated entry documents, whose cited paths are checked.
+    required: false
+    default: README.md,ARCHITECTURE.md,AGENTS.md,CLAUDE.md,CONTRIBUTING.md,docs/README.md
+  exclude:
+    description: Comma-separated path prefixes left out of the scan, such as archives.
+    required: false
+    default: .github/workflows/,.agents/,.claude/,.opencode/,node_modules/
+  output-path:
+    description: Path to write the JSON output.
+    required: false
+    default: /tmp/gh-aw/agent/doc-drift.json
+runs:
+  using: composite
+  steps:
+    - name: Collect documentation drift
+      shell: bash
+      env:
+        ENTRY_DOCS: ${{ inputs.entry-docs }}
+        EXCLUDE: ${{ inputs.exclude }}
+        OUTPUT_PATH: ${{ inputs.output-path }}
+      run: node "${GITHUB_ACTION_PATH}/collect-doc-drift.mjs"

package/loops/actions/collect-doc-drift/collect-doc-drift.mjs

@@ -0,0 +1,133 @@
+// Managed by @plainconceptsplatform/workflows. Source: loops/actions/collect-doc-drift/collect-doc-drift.mjs. Update with workflows update --force; consumer edits may be overwritten.
+//
+// Everything here is something a model would otherwise spend turns establishing, and could get
+// wrong. Existence only: whether a link's anchor resolves, or whether a sentence is still true,
+// is left to the agent.
+
+import { execFileSync } from "node:child_process";
+import { existsSync, mkdirSync, readFileSync, statSync, writeFileSync } from "node:fs";
+import { dirname, join, normalize } from "node:path";
+import { pathToFileURL } from "node:url";
+
+// A report nobody can finish reading is a report nobody acts on, and it costs input tokens.
+const MAX_LISTED = 200;
+
+const FENCE = /^\s*(```|~~~)/;
+const INLINE_LINK = /(?<!!)\[[^\]]*\]\(\s*<?([^)\s>]+)>?(?:\s+"[^"]*")?\s*\)/g;
+const IMAGE_LINK = /!\[[^\]]*\]\(\s*<?([^)\s>]+)>?(?:\s+"[^"]*")?\s*\)/g;
+const CODE_SPAN = /`([^`\n]+)`/g;
+const CITED_PATH = /^\.?\/?[\w.-]+(\/[\w.-]+)*\/?$/;
+const EXTERNAL = /^[a-z][a-z0-9+.-]*:|^\/\//i;
+
+const splitList = (value) => (value ?? "").split(",").map((item) => item.trim()).filter(Boolean);
+
+export const isExcluded = (path, prefixes) => prefixes.some((prefix) => path.startsWith(prefix));
+
+/** The file a link points at, or null when it does not point at a file in this repository. */
+export function linkTarget(fromFile, href) {
+  if (href.startsWith("#") || EXTERNAL.test(href)) return null;
+  const path = href.split(/[#?]/)[0];
+  if (path === "") return null;
+  const decoded = decodePath(path);
+  return normalize(decoded.startsWith("/") ? decoded.slice(1) : join(dirname(fromFile), decoded));
+}
+
+function decodePath(path) {
+  try {
+    return decodeURIComponent(path);
+  } catch {
+    // A literal % that is not an escape: the undecoded path is the one to check.
+    return path;
+  }
+}
+
+// A code span in prose often is a path, but `owner/repo` and `application/json` have the same
+// shape. Requiring an existing first segment keeps paths into this repository and drops those.
+export function citedPath(span, topLevelEntries) {
+  if (!span.includes("/") || !CITED_PATH.test(span)) return null;
+  const path = span.replace(/^\.?\//, "");
+  return topLevelEntries.has(path.split("/")[0]) ? path : null;
+}
+
+/** Walk a Markdown document line by line, skipping fenced code, where a link is an example. */
+export function* proseLines(markdown) {
+  let fenced = false;
+  let number = 0;
+  for (const line of markdown.split(/\r?\n/)) {
+    number += 1;
+    if (FENCE.test(line)) {
+      fenced = !fenced;
+      continue;
+    }
+    if (!fenced) yield { number, line };
+  }
+}
+
+export function scan({ files, entryDocs, read, exists, topLevelEntries }) {
+  const brokenLinks = [];
+  const missingPaths = [];
+  const seenCitations = new Set();
+
+  for (const file of files) {
+    const isEntry = entryDocs.includes(file);
+    for (const { number, line } of proseLines(read(file))) {
+      const withoutCode = line.replace(CODE_SPAN, "");
+      for (const pattern of [INLINE_LINK, IMAGE_LINK]) {
+        for (const [, href] of withoutCode.matchAll(pattern)) {
+          const target = linkTarget(file, href);
+          if (target !== null && !exists(target)) brokenLinks.push({ file, line: number, target: href });
+        }
+      }
+      if (!isEntry) continue;
+      for (const [, span] of line.matchAll(CODE_SPAN)) {
+        const path = citedPath(span, topLevelEntries);
+        const key = `${file}:${path}`;
+        if (path === null || seenCitations.has(key) || exists(path)) continue;
+        seenCitations.add(key);
+        missingPaths.push({ file, line: number, path });
+      }
+    }
+  }
+
+  return { brokenLinks, missingPaths };
+}
+
+function main() {
+  const entryDocs = splitList(process.env.ENTRY_DOCS);
+  const exclude = splitList(process.env.EXCLUDE);
+  const outputPath = process.env.OUTPUT_PATH ?? "/tmp/gh-aw/agent/doc-drift.json";
+
+  const tracked = execFileSync("git", ["ls-files", "-z"], { encoding: "utf8", maxBuffer: 1 << 28 })
+    .split("\0").filter(Boolean);
+  const files = tracked.filter((path) => path.endsWith(".md") && !isExcluded(path, exclude));
+  const trackedSet = new Set(tracked);
+  const exists = (path) => {
+    if (trackedSet.has(path)) return true;
+    // A directory is tracked only through its files, and a generated file not at all.
+    return existsSync(path) && (statSync(path).isDirectory() || statSync(path).isFile());
+  };
+
+  const { brokenLinks, missingPaths } = scan({
+    files,
+    entryDocs,
+    read: (path) => readFileSync(path, "utf8"),
+    exists,
+    topLevelEntries: new Set(tracked.map((path) => path.split("/")[0])),
+  });
+
+  const report = {
+    scannedDocuments: files.length,
+    entryDocuments: entryDocs.filter((path) => trackedSet.has(path)),
+    missingEntryDocuments: entryDocs.filter((path) => !trackedSet.has(path)),
+    brokenLinkCount: brokenLinks.length,
+    missingPathCount: missingPaths.length,
+    brokenLinks: brokenLinks.slice(0, MAX_LISTED),
+    missingPaths: missingPaths.slice(0, MAX_LISTED),
+  };
+
+  mkdirSync(dirname(outputPath), { recursive: true });
+  writeFileSync(outputPath, `${JSON.stringify(report, null, 2)}\n`);
+  console.log(`Scanned ${files.length} documents: ${brokenLinks.length} broken links, ${missingPaths.length} missing cited paths.`);
+}
+
+if (process.argv[1] && import.meta.url === pathToFileURL(process.argv[1]).href) main();

package/loops/actions/create-issue-comment/action.yml

@@ -1,29 +1,29 @@
-# Managed by @plainconceptsplatform/workflows. Source: loops/actions/create-issue-comment/action.yml. Update with workflows update --force; consumer edits may be overwritten.
-name: Create issue comment
-description: Create a comment on an issue or pull request.
-inputs:
-  token:
-    description: GitHub token used by github-script.
-    required: true
-  issue-number:
-    description: Issue or pull request number.
-    required: true
-  body:
-    description: Complete Markdown comment body.
-    required: true
-runs:
-  using: composite
-  steps:
-    - name: Create comment
-      uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
-      env:
-        ISSUE_NUMBER: ${{ inputs.issue-number }}
-        BODY: ${{ inputs.body }}
-      with:
-        github-token: ${{ inputs.token }}
-        script: |
-          await github.rest.issues.createComment({
-            ...context.repo,
-            issue_number: Number(process.env.ISSUE_NUMBER),
-            body: process.env.BODY,
-          });
+# Managed by @plainconceptsplatform/workflows. Source: loops/actions/create-issue-comment/action.yml. Update with workflows update --force; consumer edits may be overwritten.
+name: Create issue comment
+description: Create a comment on an issue or pull request.
+inputs:
+  token:
+    description: GitHub token used by github-script.
+    required: true
+  issue-number:
+    description: Issue or pull request number.
+    required: true
+  body:
+    description: Complete Markdown comment body.
+    required: true
+runs:
+  using: composite
+  steps:
+    - name: Create comment
+      uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
+      env:
+        ISSUE_NUMBER: ${{ inputs.issue-number }}
+        BODY: ${{ inputs.body }}
+      with:
+        github-token: ${{ inputs.token }}
+        script: |
+          await github.rest.issues.createComment({
+            ...context.repo,
+            issue_number: Number(process.env.ISSUE_NUMBER),
+            body: process.env.BODY,
+          });

package/loops/actions/download-agent-output/action.yml

@@ -1,53 +1,53 @@
-# Managed by @plainconceptsplatform/workflows. Source: loops/actions/download-agent-output/action.yml. Update with workflows update --force; consumer edits may be overwritten.
-name: Download agent output
-description: Download the agent artifact and expose the output JSON and bundle paths.
-inputs:
-  artifact-name:
-    description: >-
-      Artifact name to download. gh-aw prefixes it with the value it derives from the
-      workflow's inputs, so a workflow_call worker must pass the activation job's
-      artifact_prefix output followed by "agent", not the bare name.
-    required: true
-outputs:
-  output-file:
-    description: Path to agent_output.json, or empty if not found.
-    value: ${{ steps.download.outputs.output-file }}
-  bundle-file:
-    description: Path to the git bundle, or empty if not found.
-    value: ${{ steps.download.outputs.bundle-file }}
-  item-count:
-    description: Number of items in the agent output.
-    value: ${{ steps.download.outputs.item-count }}
-runs:
-  using: composite
-  steps:
-    - name: Download agent artifact
-      uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
-      with:
-        name: ${{ inputs.artifact-name }}
-        path: agent-artifact
-    - name: Locate output and bundle
-      id: download
-      shell: bash
-      env:
-        ARTIFACT_NAME: ${{ inputs.artifact-name }}
-      run: |
-        set -euo pipefail
-        OUTPUT_FILE=""
-        BUNDLE_FILE=""
-        ITEM_COUNT="0"
-
-        if [ -f "agent-artifact/agent_output.json" ]; then
-          OUTPUT_FILE="agent-artifact/agent_output.json"
-          ITEM_COUNT=$(jq '.items | length' "$OUTPUT_FILE")
-          BUNDLE_FILE=$(ls agent-artifact/aw-*.bundle 2>/dev/null | head -1 || true)
-        else
-          echo "::error::Artifact '$ARTIFACT_NAME' contained no agent_output.json. Nothing the agent proposed will be applied."
-          exit 1
-        fi
-
-        echo "Artifact '$ARTIFACT_NAME' carries $ITEM_COUNT item(s)."
-
-        echo "output-file=$OUTPUT_FILE" >> "$GITHUB_OUTPUT"
-        echo "bundle-file=$BUNDLE_FILE" >> "$GITHUB_OUTPUT"
-        echo "item-count=$ITEM_COUNT" >> "$GITHUB_OUTPUT"
+# Managed by @plainconceptsplatform/workflows. Source: loops/actions/download-agent-output/action.yml. Update with workflows update --force; consumer edits may be overwritten.
+name: Download agent output
+description: Download the agent artifact and expose the output JSON and bundle paths.
+inputs:
+  artifact-name:
+    description: >-
+      Artifact name to download. gh-aw prefixes it with the value it derives from the
+      workflow's inputs, so a workflow_call worker must pass the activation job's
+      artifact_prefix output followed by "agent", not the bare name.
+    required: true
+outputs:
+  output-file:
+    description: Path to agent_output.json, or empty if not found.
+    value: ${{ steps.download.outputs.output-file }}
+  bundle-file:
+    description: Path to the git bundle, or empty if not found.
+    value: ${{ steps.download.outputs.bundle-file }}
+  item-count:
+    description: Number of items in the agent output.
+    value: ${{ steps.download.outputs.item-count }}
+runs:
+  using: composite
+  steps:
+    - name: Download agent artifact
+      uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+      with:
+        name: ${{ inputs.artifact-name }}
+        path: agent-artifact
+    - name: Locate output and bundle
+      id: download
+      shell: bash
+      env:
+        ARTIFACT_NAME: ${{ inputs.artifact-name }}
+      run: |
+        set -euo pipefail
+        OUTPUT_FILE=""
+        BUNDLE_FILE=""
+        ITEM_COUNT="0"
+
+        if [ -f "agent-artifact/agent_output.json" ]; then
+          OUTPUT_FILE="agent-artifact/agent_output.json"
+          ITEM_COUNT=$(jq '.items | length' "$OUTPUT_FILE")
+          BUNDLE_FILE=$(ls agent-artifact/aw-*.bundle 2>/dev/null | head -1 || true)
+        else
+          echo "::error::Artifact '$ARTIFACT_NAME' contained no agent_output.json. Nothing the agent proposed will be applied."
+          exit 1
+        fi
+
+        echo "Artifact '$ARTIFACT_NAME' carries $ITEM_COUNT item(s)."
+
+        echo "output-file=$OUTPUT_FILE" >> "$GITHUB_OUTPUT"
+        echo "bundle-file=$BUNDLE_FILE" >> "$GITHUB_OUTPUT"
+        echo "item-count=$ITEM_COUNT" >> "$GITHUB_OUTPUT"

package/loops/actions/identify-gate-subject/action.yml

@@ -49,6 +49,9 @@ outputs:
   run-id:
     description: CI run ID when fetched.
     value: ${{ steps.identify.outputs.run-id }}
+  human-author:
+    description: Whether a person with write access opened the pull request, rather than a trusted bot.
+    value: ${{ steps.identify.outputs.human-author }}
 runs:
   using: composite
   steps:
@@ -194,6 +197,7 @@ runs:
           if [ -n "$issue" ]; then echo "closes=closes issue #$issue"; else echo "closes=closes no issue"; fi
           echo "conclusion=$ci_conclusion"
           echo "run-id=$ci_run_id"
+          if [ "$bot" = true ]; then echo "human-author=false"; else echo "human-author=true"; fi
         } >> "$GITHUB_OUTPUT"
 
         echo "PR #$PR_NUMBER by $author closes #${issue:-nothing}; CI concluded $ci_conclusion"

package/loops/actions/land-pull-request/action.yml

@@ -23,6 +23,14 @@ inputs:
     required: false
     default: Approved by the merge gate.
 
+  post-merge-event:
+    description: >-
+      repository_dispatch event type posted after a merge lands on the default branch. GitHub does
+      not always create a push run for a merge the App performs, so a consumer that deploys on push
+      opts into this event instead of relying on that run.
+    required: false
+    default: agentic-post-merge
+
 outputs:
   landed:
     description: "'merged', 'enqueued', or empty when nothing happened."
@@ -40,4 +48,6 @@ runs:
         HEAD_SHA: ${{ inputs.head-sha }}
         APPROVE: ${{ inputs.approve }}
         APPROVAL_BODY: ${{ inputs.approval-body }}
+        DEFAULT_BRANCH: ${{ github.event.repository.default_branch }}
+        POST_MERGE_EVENT: ${{ inputs.post-merge-event }}
       run: bash "${GITHUB_ACTION_PATH}/land-pull-request.sh"