create-agentic-pdlc 2.4.0 → 3.1.0

package/.github/workflows/project-automation.yml

@@ -8,59 +8,230 @@ on:
   issues:
     types: [labeled, closed]
 
-env:
-  PROJECT_ID: "PVT_kwHODpFFL84BXg7h"
-  STATUS_FIELD_ID: "PVTSSF_lAHODpFFL84BXg7hzhStRHI"
-  STATUS_IDEA: "bb6e5a20"
-  STATUS_BRAINSTORMING: "8eb07c5b"
-  STATUS_DETAILING: "9f6ce70e"
-  STATUS_APPROVAL: "31bf4610"
-  STATUS_DEVELOPMENT: "2c9e78e6"
-  STATUS_TESTING: "96b59ade"
-  STATUS_CODE_REVIEW_PR: "86ca9720"
-  STATUS_PRODUCTION: "1581e5bd"
-
 jobs:
-  # Issue Labeled → Move Upstream
-  move-card-on-label:
-    name: Upstream Label → Move Card
-    if: github.event_name == 'issues' && github.event.action == 'labeled'
+  resolve-ids:
+    name: Resolve Board Column IDs
+    if: github.event_name != 'issues' || github.event.action != 'closed'
     runs-on: ubuntu-latest
     env:
       PROJECT_TOKEN: ${{ secrets.PROJECT_TOKEN }}
+    outputs:
+      project_id: ${{ steps.resolve.outputs.project_id }}
+      status_field_id: ${{ steps.resolve.outputs.status_field_id }}
+      status_brainstorming: ${{ steps.resolve.outputs.status_brainstorming }}
+      status_detailing: ${{ steps.resolve.outputs.status_detailing }}
+      status_approval: ${{ steps.resolve.outputs.status_approval }}
+      status_development: ${{ steps.resolve.outputs.status_development }}
+      status_code_review_pr: ${{ steps.resolve.outputs.status_code_review_pr }}
+      status_production: ${{ steps.resolve.outputs.status_production }}
     steps:
-      - name: Detect Label and Move Issue
-        if: ${{ env.PROJECT_TOKEN != '' && env.PROJECT_ID != '{{PROJECT_ID}}' }}
-        uses: actions/github-script@v8
+      - name: Resolve column IDs by name
+        id: resolve
+        if: ${{ env.PROJECT_TOKEN != '' && vars.PROJECT_ID != '' }}
+        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8
         with:
           github-token: ${{ env.PROJECT_TOKEN }}
           script: |
-            const labelName = context.payload.label.name;
-            let targetStatusId = null;
-            let stageName = null;
-
-            if (labelName === 'stage:brainstorming') {
-              targetStatusId = process.env.STATUS_BRAINSTORMING;
-              stageName = 'Brainstorming';
-            } else if (labelName === 'stage:detailing') {
-              targetStatusId = process.env.STATUS_DETAILING;
-              stageName = 'Detailing';
-            } else if (labelName === 'stage:approval') {
-              targetStatusId = process.env.STATUS_APPROVAL;
-              stageName = 'Approval';
-            } else if (labelName === 'stage:development') {
-              targetStatusId = process.env.STATUS_DEVELOPMENT;
-              stageName = 'Development';
+            const projectId = '${{ vars.PROJECT_ID }}';
+            if (!projectId || projectId === '{{PROJECT_ID}}') {
+              core.warning('vars.PROJECT_ID not set — board features disabled');
+              return;
             }
-
-            if (!targetStatusId) {
-              console.log('No stage PDLC label found. Skipping.');
+            const { node } = await github.graphql(`
+              query($id: ID!) {
+                node(id: $id) {
+                  ... on ProjectV2 {
+                    fields(first: 20) {
+                      nodes {
+                        ... on ProjectV2SingleSelectField {
+                          id
+                          name
+                          options { id name }
+                        }
+                      }
+                    }
+                  }
+                }
+              }
+            `, { id: projectId });
+            const statusField = node.fields.nodes.find(f => f.name === 'Status');
+            if (!statusField) { core.setFailed('Status field not found on board'); return; }
+            const opt = (name) => statusField.options.find(o => o.name.includes(name))?.id ?? '';
+            const ids = {
+              brainstorming:  opt('Brainstorming'),
+              detailing:      opt('Detailing'),
+              approval:       opt('Approval'),
+              development:    opt('Development'),
+              code_review_pr: opt('Code Review'),
+              production:     opt('Production'),
+            };
+            const missing = Object.entries(ids).filter(([, v]) => !v).map(([k]) => k);
+            if (missing.length > 0) {
+              core.setFailed(`Required Status columns not found on board: ${missing.join(', ')}`);
               return;
             }
+            core.setOutput('project_id', projectId);
+            core.setOutput('status_field_id', statusField.id);
+            core.setOutput('status_brainstorming',  ids.brainstorming);
+            core.setOutput('status_detailing',      ids.detailing);
+            core.setOutput('status_approval',       ids.approval);
+            core.setOutput('status_development',    ids.development);
+            core.setOutput('status_code_review_pr', ids.code_review_pr);
+            core.setOutput('status_production',     ids.production);
+            console.log('✅ Board IDs resolved by name');
+
+  # Single dispatcher — f(event) → target column → move card
+  move-card:
+    name: Board Dispatcher
+    needs: [resolve-ids]
+    if: needs.resolve-ids.outputs.project_id != ''
+    runs-on: ubuntu-latest
+    env:
+      PROJECT_TOKEN: ${{ secrets.PROJECT_TOKEN }}
+      PROJECT_ID: ${{ needs.resolve-ids.outputs.project_id }}
+      STATUS_FIELD_ID: ${{ needs.resolve-ids.outputs.status_field_id }}
+      STATUS_BRAINSTORMING: ${{ needs.resolve-ids.outputs.status_brainstorming }}
+      STATUS_DETAILING: ${{ needs.resolve-ids.outputs.status_detailing }}
+      STATUS_APPROVAL: ${{ needs.resolve-ids.outputs.status_approval }}
+      STATUS_DEVELOPMENT: ${{ needs.resolve-ids.outputs.status_development }}
+      STATUS_CODE_REVIEW_PR: ${{ needs.resolve-ids.outputs.status_code_review_pr }}
+      STATUS_PRODUCTION: ${{ needs.resolve-ids.outputs.status_production }}
+    steps:
+      - uses: actions/checkout@v5.0.1
+      - name: Dispatch board move
+        if: ${{ env.PROJECT_TOKEN != '' && env.PROJECT_ID != '' }}
+        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8
+        with:
+          github-token: ${{ env.PROJECT_TOKEN }}
+          script: |
+            const { classifyItem } = require('./scripts/derive-column.js');
+            const { owner, repo } = context.repo;
+            const eventName = context.eventName;
+            const action = context.payload.action;
+
+            const COLUMN_KEY_TO_ENV = {
+              'code_review_pr': 'STATUS_CODE_REVIEW_PR',
+              'development':    'STATUS_DEVELOPMENT',
+              'approval':       'STATUS_APPROVAL',
+              'detailing':      'STATUS_DETAILING',
+              'brainstorming':  'STATUS_BRAINSTORMING',
+            };
+
+            // f(event) → { targetStatusId, linkedNodeIds, stageLabelsToClear, prLabelSwap }
+            async function deriveMove() {
+              const col = (key) => process.env[key];
+
+              // Issue labeled → stage column (uses shared classify logic)
+              if (eventName === 'issues' && action === 'labeled') {
+                const labelNames = (context.payload.issue.labels ?? []).map(l => l.name);
+                const columnKey = classifyItem(labelNames);
+                const targetStatusId = columnKey ? col(COLUMN_KEY_TO_ENV[columnKey]) : null;
+                if (!targetStatusId) return null;
+                return {
+                  targetStatusId,
+                  nodeIds: [context.payload.issue.node_id],
+                  issueNumbers: [],
+                  stageLabelsToClear: [],
+                  prLabelSwap: null,
+                };
+              }
+
+              // PR opened/reopened → Code Review
+              if (eventName === 'pull_request' && (action === 'opened' || action === 'reopened')) {
+                const prNumber = context.payload.pull_request.number;
+                const { data: pr } = await github.rest.pulls.get({ owner, repo, pull_number: prNumber });
+                const linkedIssues = [...(pr.body ?? '').matchAll(/(?:Closes?|Fixes?|Resolves?)\s+#(\d+)/gi)]
+                  .map(m => parseInt(m[1]));
+                const stageLabels = ['stage:development', 'stage:brainstorming', 'stage:detailing', 'jules'];
+
+                if (linkedIssues.length > 0) {
+                  const nodes = await Promise.all(linkedIssues.map(async n => {
+                    const { data: issue } = await github.rest.issues.get({ owner, repo, issue_number: n });
+                    return { nodeId: issue.node_id, issueNumber: n };
+                  }));
+                  return {
+                    targetStatusId: col('STATUS_CODE_REVIEW_PR'),
+                    nodeIds: nodes.map(n => n.nodeId),
+                    issueNumbers: nodes.map(n => n.issueNumber),
+                    stageLabelsToClear: stageLabels,
+                    prLabelSwap: { add: 'pr:in-review', prNumber },
+                  };
+                } else {
+                  return {
+                    targetStatusId: col('STATUS_CODE_REVIEW_PR'),
+                    nodeIds: [context.payload.pull_request.node_id],
+                    issueNumbers: [],
+                    stageLabelsToClear: [],
+                    prLabelSwap: { add: 'pr:in-review', prNumber },
+                  };
+                }
+              }
+
+              // PR review approved → Code Review + swap PR labels
+              if (eventName === 'pull_request_review' && context.payload.review.state === 'approved') {
+                const prNumber = context.payload.pull_request.number;
+                const { data: pr } = await github.rest.pulls.get({ owner, repo, pull_number: prNumber });
+                const linkedIssues = [...(pr.body ?? '').matchAll(/(?:Closes?|Fixes?|Resolves?)\s+#(\d+)/gi)]
+                  .map(m => parseInt(m[1]));
+
+                if (linkedIssues.length > 0) {
+                  const nodes = await Promise.all(linkedIssues.map(async n => {
+                    const { data: issue } = await github.rest.issues.get({ owner, repo, issue_number: n });
+                    return { nodeId: issue.node_id, issueNumber: n };
+                  }));
+                  return {
+                    targetStatusId: col('STATUS_CODE_REVIEW_PR'),
+                    nodeIds: nodes.map(n => n.nodeId),
+                    issueNumbers: nodes.map(n => n.issueNumber),
+                    stageLabelsToClear: [],
+                    prLabelSwap: { remove: 'pr:in-review', add: 'pr:approved', prNumber },
+                  };
+                } else {
+                  return {
+                    targetStatusId: col('STATUS_CODE_REVIEW_PR'),
+                    nodeIds: [context.payload.pull_request.node_id],
+                    issueNumbers: [],
+                    stageLabelsToClear: [],
+                    prLabelSwap: { remove: 'pr:in-review', add: 'pr:approved', prNumber },
+                  };
+                }
+              }
+
+              // PR merged → Production
+              if (eventName === 'pull_request' && action === 'closed' && context.payload.pull_request.merged) {
+                const prNumber = context.payload.pull_request.number;
+                const { data: pr } = await github.rest.pulls.get({ owner, repo, pull_number: prNumber });
+                const linkedIssues = [...(pr.body ?? '').matchAll(/(?:Closes?|Fixes?|Resolves?)\s+#(\d+)/gi)]
+                  .map(m => parseInt(m[1]));
+
+                if (linkedIssues.length > 0) {
+                  const nodes = await Promise.all(linkedIssues.map(async n => {
+                    const { data: issue } = await github.rest.issues.get({ owner, repo, issue_number: n });
+                    return { nodeId: issue.node_id, issueNumber: n };
+                  }));
+                  return {
+                    targetStatusId: col('STATUS_PRODUCTION'),
+                    nodeIds: nodes.map(n => n.nodeId),
+                    issueNumbers: nodes.map(n => n.issueNumber),
+                    stageLabelsToClear: ['stage:approval'],
+                    prLabelSwap: null,
+                  };
+                } else {
+                  return {
+                    targetStatusId: col('STATUS_PRODUCTION'),
+                    nodeIds: [context.payload.pull_request.node_id],
+                    issueNumbers: [],
+                    stageLabelsToClear: [],
+                    prLabelSwap: null,
+                  };
+                }
+              }
 
-            const { issue: { number, node_id } } = context.payload;
+              return null;
+            }
 
-            const moveItem = async (nodeId, statusId) => {
+            // Move a single item to target column
+            async function moveItem(nodeId, targetStatusId) {
               const { addProjectV2ItemById: { item } } = await github.graphql(`
                 mutation($p: ID!, $c: ID!) {
                   addProjectV2ItemById(input: {projectId: $p, contentId: $c}) { item { id } }
@@ -73,58 +244,60 @@ jobs:
                   }
                 }`, {
                   p: process.env.PROJECT_ID, i: item.id, f: process.env.STATUS_FIELD_ID,
-                  v: { singleSelectOptionId: statusId }
+                  v: { singleSelectOptionId: targetStatusId }
                 });
-            };
-
-            await moveItem(node_id, targetStatusId);
-            console.log(`Issue #${number} moved to ${stageName}`);
+            }
 
-  # human-approved on issue → qa:approved on linked open PRs
-  handle-human-approved:
-    name: human-approved → qa:approved on linked PRs
-    if: github.event_name == 'issues' && github.event.action == 'labeled' && github.event.label.name == 'human-approved'
-    runs-on: ubuntu-latest
-    permissions:
-      issues: write
-      pull-requests: write
-    steps:
-      - name: Add qa:approved to linked open PRs
-        uses: actions/github-script@v8
-        with:
-          github-token: ${{ secrets.GITHUB_TOKEN }}
-          script: |
-            const { owner, repo } = context.repo;
-            const issueNumber = context.payload.issue.number;
-            const pattern = new RegExp(`(?:Closes?|Fixes?|Resolves?)\\s+#${issueNumber}\\b`, 'i');
+            // Execute
+            const move = await deriveMove();
+            if (!move) {
+              console.log('No board move needed for this event. Skipping.');
+              return;
+            }
 
-            const prs = await github.paginate(github.rest.pulls.list, {
-              owner, repo, state: 'open', per_page: 100
-            });
+            for (const nodeId of move.nodeIds) {
+              await moveItem(nodeId, move.targetStatusId);
+            }
 
-            const linked = prs.filter(pr => pattern.test(pr.body ?? ''));
+            for (const issueNumber of move.issueNumbers) {
+              for (const label of move.stageLabelsToClear) {
+                await github.rest.issues.removeLabel({ owner, repo, issue_number: issueNumber, name: label })
+                  .catch(e => { if (e.status !== 404) { core.error(`Failed to remove label ${label}: ${e.message}`); throw e; } });
+              }
+            }
 
-            if (linked.length === 0) {
-              console.log(`No open PRs linking issue #${issueNumber}. Exiting.`);
-              return;
+            if (move.stageLabelsToClear.length > 0 && move.issueNumbers.length === 0) {
+              // no linked issue numbers tracked for stage-label events (issue is identified by nodeId only)
             }
 
-            for (const pr of linked) {
-              await github.rest.issues.addLabels({
-                owner, repo, issue_number: pr.number, labels: ['qa:approved']
-              }).catch(() => {});
-              console.log(`PR #${pr.number} → qa:approved`);
+            if (move.prLabelSwap) {
+              const { prNumber, remove, add } = move.prLabelSwap;
+              if (remove) {
+                await github.rest.issues.removeLabel({ owner, repo, issue_number: prNumber, name: remove })
+                  .catch(e => { if (e.status !== 404) { core.error(`Failed to remove PR label ${remove}: ${e.message}`); throw e; } });
+              }
+              if (add) {
+                await github.rest.issues.addLabels({ owner, repo, issue_number: prNumber, labels: [add] });
+              }
             }
 
+            console.log(`✅ Board move complete → ${move.targetStatusId} (${move.nodeIds.length} item(s))`);
+
   # OPTIONAL: Uncomment to enable architecture-violation → Idea
   # move-violation-to-board:
   #   name: architecture-violation → 💡 Idea
+  #   needs: [resolve-ids]
   #   if: github.event_name == 'issues' && github.event.action == 'labeled' && github.event.label.name == 'architecture-violation'
   #   runs-on: ubuntu-latest
+  #   env:
+  #     PROJECT_TOKEN: ${{ secrets.PROJECT_TOKEN }}
+  #     PROJECT_ID: ${{ needs.resolve-ids.outputs.project_id }}
+  #     STATUS_FIELD_ID: ${{ needs.resolve-ids.outputs.status_field_id }}
+  #     STATUS_IDEA: ${{ needs.resolve-ids.outputs.status_idea }}
   #   steps:
   #     - name: Move issue to Idea
-  #       if: ${{ env.PROJECT_TOKEN != '' && env.PROJECT_ID != '{{PROJECT_ID}}' }}
-  #       uses: actions/github-script@v8
+  #       if: ${{ env.PROJECT_TOKEN != '' && env.PROJECT_ID != '' }}
+  #       uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8
   #       with:
   #         github-token: ${{ env.PROJECT_TOKEN }}
   #         script: |
@@ -144,193 +317,13 @@ jobs:
   #             });
   #           console.log(`Issue #${number} moved to Idea`);
 
-  # PR Opened → Move linked issue to Testing (Variant B — QA Agent enabled)
-  move-card-on-pr-open:
-    name: Open PR → Testing
-    if: github.event_name == 'pull_request' && (github.event.action == 'opened' || github.event.action == 'reopened')
-    runs-on: ubuntu-latest
-    env:
-      PROJECT_TOKEN: ${{ secrets.PROJECT_TOKEN }}
-    steps:
-      - name: Move linked issue to Testing
-        if: ${{ env.PROJECT_TOKEN != '' && env.PROJECT_ID != '{{PROJECT_ID}}' }}
-        uses: actions/github-script@v8
-        with:
-          github-token: ${{ env.PROJECT_TOKEN }}
-          script: |
-            const prNumber = context.payload.pull_request.number;
-            const { owner, repo } = context.repo;
-
-            const { data: pr } = await github.rest.pulls.get({ owner, repo, pull_number: prNumber });
-            const body = pr.body ?? '';
-
-            // Extract issues linked via "Closes #N", "Fixes #N", "Resolves #N"
-            const linkedIssues = [...body.matchAll(/(?:Closes?|Fixes?|Resolves?)\s+#(\d+)/gi)]
-              .map(m => parseInt(m[1]));
-
-            const moveItem = async (nodeId) => {
-              const { addProjectV2ItemById: { item } } = await github.graphql(`
-                mutation($p: ID!, $c: ID!) {
-                  addProjectV2ItemById(input: {projectId: $p, contentId: $c}) { item { id } }
-                }`, { p: process.env.PROJECT_ID, c: nodeId });
-
-              await github.graphql(`
-                mutation($p: ID!, $i: ID!, $f: ID!, $v: ProjectV2FieldValue!) {
-                  updateProjectV2ItemFieldValue(input: {projectId: $p, itemId: $i, fieldId: $f, value: $v}) {
-                    projectV2Item { id }
-                  }
-                }`, {
-                  p: process.env.PROJECT_ID, i: item.id, f: process.env.STATUS_FIELD_ID,
-                  v: { singleSelectOptionId: process.env.STATUS_TESTING }
-                });
-            };
-
-            const stageLabelsToRemove = ['stage:development', 'stage:brainstorming', 'stage:detailing', 'jules'];
-
-            if (linkedIssues.length > 0) {
-              for (const n of linkedIssues) {
-                const { data: issue } = await github.rest.issues.get({ owner, repo, issue_number: n });
-                await moveItem(issue.node_id);
-                for (const label of stageLabelsToRemove) {
-                  await github.rest.issues.removeLabel({ owner, repo, issue_number: n, name: label }).catch(() => {});
-                }
-                await github.rest.issues.addLabels({ owner, repo, issue_number: n, labels: ['stage:testing'] }).catch(() => {});
-                console.log(`Issue #${n} → Testing (labels updated)`);
-              }
-            } else {
-              await moveItem(pr.node_id);
-              console.log(`PR #${prNumber} → Testing (no linked issue)`);
-            }
-
-            await github.rest.issues.addLabels({ owner, repo, issue_number: prNumber, labels: ['pr:in-review'] }).catch(() => {});
-
-  # QA Approved → Move linked issue to Code Review / PR
-  move-card-on-qa-pass:
-    name: qa:approved → Code Review / PR
-    if: github.event_name == 'pull_request' && github.event.action == 'labeled' && github.event.label.name == 'qa:approved'
-    runs-on: ubuntu-latest
-    env:
-      PROJECT_TOKEN: ${{ secrets.PROJECT_TOKEN }}
-    steps:
-      - name: Move linked issue to Code Review / PR
-        if: ${{ env.PROJECT_TOKEN != '' && env.PROJECT_ID != '{{PROJECT_ID}}' }}
-        uses: actions/github-script@v8
-        with:
-          github-token: ${{ env.PROJECT_TOKEN }}
-          script: |
-            const prNumber = context.payload.pull_request.number;
-            const { owner, repo } = context.repo;
-
-            const { data: pr } = await github.rest.pulls.get({ owner, repo, pull_number: prNumber });
-            const body = pr.body ?? '';
-
-            const linkedIssues = [...body.matchAll(/(?:Closes?|Fixes?|Resolves?)\s+#(\d+)/gi)]
-              .map(m => parseInt(m[1]));
-
-            const moveItem = async (nodeId) => {
-              const { addProjectV2ItemById: { item } } = await github.graphql(`
-                mutation($p: ID!, $c: ID!) {
-                  addProjectV2ItemById(input: {projectId: $p, contentId: $c}) { item { id } }
-                }`, { p: process.env.PROJECT_ID, c: nodeId });
-
-              await github.graphql(`
-                mutation($p: ID!, $i: ID!, $f: ID!, $v: ProjectV2FieldValue!) {
-                  updateProjectV2ItemFieldValue(input: {projectId: $p, itemId: $i, fieldId: $f, value: $v}) {
-                    projectV2Item { id }
-                  }
-                }`, {
-                  p: process.env.PROJECT_ID, i: item.id, f: process.env.STATUS_FIELD_ID,
-                  v: { singleSelectOptionId: process.env.STATUS_CODE_REVIEW_PR }
-                });
-            };
-
-            if (linkedIssues.length > 0) {
-              for (const n of linkedIssues) {
-                const { data: issue } = await github.rest.issues.get({ owner, repo, issue_number: n });
-                await moveItem(issue.node_id);
-                if (issue.labels?.some(l => l.name === 'stage:testing')) {
-                  await github.rest.issues.removeLabel({ owner, repo, issue_number: n, name: 'stage:testing' }).catch(() => {});
-                }
-                console.log(`Issue #${n} → Code Review / PR`);
-              }
-            } else {
-              await moveItem(pr.node_id);
-              console.log(`PR #${prNumber} → Code Review / PR (no linked issue)`);
-            }
-
-  # Review Approved → Add Label
-  move-card-on-review-approved:
-    name: Approved PR → Add Label
-    if: github.event_name == 'pull_request_review' && github.event.review.state == 'approved'
-    runs-on: ubuntu-latest
-    env:
-      PROJECT_TOKEN: ${{ secrets.PROJECT_TOKEN }}
-    steps:
-      - name: Swap PR labels
-        if: ${{ env.PROJECT_TOKEN != '' && env.PROJECT_ID != '{{PROJECT_ID}}' }}
-        uses: actions/github-script@v8
-        with:
-          github-token: ${{ env.PROJECT_TOKEN }}
-          script: |
-            const prNumber = context.payload.pull_request.number;
-            const { owner, repo } = context.repo;
-            try { await github.rest.issues.removeLabel({ owner, repo, issue_number: prNumber, name: 'pr:in-review' }); } catch {}
-            await github.rest.issues.addLabels({ owner, repo, issue_number: prNumber, labels: ['pr:approved'] }).catch(() => {});
-
-  # PR Merged → Production
-  move-card-on-pr-merge:
-    name: Merged PR → Production
-    if: github.event_name == 'pull_request' && github.event.action == 'closed' && github.event.pull_request.merged == true
-    runs-on: ubuntu-latest
-    env:
-      PROJECT_TOKEN: ${{ secrets.PROJECT_TOKEN }}
-    steps:
-      - name: Move issue to Production
-        if: ${{ env.PROJECT_TOKEN != '' && env.PROJECT_ID != '{{PROJECT_ID}}' }}
-        uses: actions/github-script@v8
-        with:
-          github-token: ${{ env.PROJECT_TOKEN }}
-          script: |
-            const prNumber = context.payload.pull_request.number;
-            const { owner, repo } = context.repo;
-            const { data: pr } = await github.rest.pulls.get({ owner, repo, pull_number: prNumber });
-            const body = pr.body ?? '';
-            const linkedIssues = [...body.matchAll(/(?:Closes?|Fixes?|Resolves?)\s+#(\d+)/gi)].map(m => parseInt(m[1]));
-
-            const moveItem = async (nodeId) => {
-              const { addProjectV2ItemById: { item } } = await github.graphql(`
-                mutation($p: ID!, $c: ID!) {
-                  addProjectV2ItemById(input: {projectId: $p, contentId: $c}) { item { id } }
-                }`, { p: process.env.PROJECT_ID, c: nodeId });
-              await github.graphql(`
-                mutation($p: ID!, $i: ID!, $f: ID!, $v: ProjectV2FieldValue!) {
-                  updateProjectV2ItemFieldValue(input: {projectId: $p, itemId: $i, fieldId: $f, value: $v}) {
-                    projectV2Item { id }
-                  }
-                }`, { p: process.env.PROJECT_ID, i: item.id, f: process.env.STATUS_FIELD_ID,
-                      v: { singleSelectOptionId: process.env.STATUS_PRODUCTION } });
-            };
-
-            if (linkedIssues.length > 0) {
-              for (const n of linkedIssues) {
-                const { data: issue } = await github.rest.issues.get({ owner, repo, issue_number: n });
-                await moveItem(issue.node_id);
-                if (issue.labels?.some(l => l.name === 'stage:approval')) {
-                  await github.rest.issues.removeLabel({ owner, repo, issue_number: n, name: 'stage:approval' }).catch(() => {});
-                }
-                console.log(`Issue #${n} → Production`);
-              }
-            } else {
-              await moveItem(pr.node_id);
-            }
-
   cleanup-labels-on-close:
     name: Issue closed → strip stage/agent labels
     if: github.event_name == 'issues' && github.event.action == 'closed'
     runs-on: ubuntu-latest
     steps:
       - name: Remove transient labels
-        uses: actions/github-script@v8
+        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
           script: |
@@ -338,8 +331,8 @@ jobs:
             const issue_number = context.payload.issue.number;
             const toRemove = [
               'stage:brainstorming', 'stage:detailing',
-              'stage:approval', 'stage:development', 'stage:testing',
-              'qa:needs-work', 'pr:in-review', 'jules'
+              'stage:approval', 'stage:development',
+              'pr:in-review', 'jules'
             ];
             for (const label of toRemove) {
               await github.rest.issues.removeLabel({ owner, repo, issue_number, name: label }).catch(() => {});

package/CLAUDE.md

@@ -1,6 +1,6 @@
 # agentic-pdlc
 
-**What it is:** npm CLI (`npx create-agentic-pdlc`) that installs a PDLC workflow for AI agent projects. Stack: Markdown + GitHub Actions YAML only — never complex Node/Python/Bash scripts.
+**What it is:** npm CLI (`npx create-agentic-pdlc`) that installs a PDLC workflow for AI agent projects.
 
 **Workflow:** `stage:brainstorming` → `stage:detailing` → `spec:approved` → `stage:development` → PR → merge. Labels move the board automatically.