jonah-fleet 1.0.0

package/templates/workflows/trigger-autowork-on-merge.yml

@@ -0,0 +1,130 @@
+name: Trigger Autowork on Merge
+
+on:
+  pull_request:
+    types: [closed]
+
+concurrency:
+  group: autowork-merge-pr-${{ github.event.pull_request.number }}
+  cancel-in-progress: true
+
+jobs:
+  fire-autowork:
+    if: >-
+      github.event.pull_request.merged == true &&
+      github.event.pull_request.base.ref == 'main' &&
+      github.event.pull_request.head.repo.full_name == github.repository
+    runs-on: ubuntu-latest
+    timeout-minutes: 65
+    permissions:
+      contents: write
+      issues: write
+      pull-requests: write
+      statuses: write
+      actions: read
+    steps:
+      - name: Compute unblocked issue
+        id: pick
+        env:
+          GH_TOKEN: ${{ github.token }}
+          OWNER: ${{ github.repository_owner }}
+          REPO: ${{ github.event.repository.name }}
+          PR: ${{ github.event.pull_request.number }}
+        run: |
+          set -euo pipefail
+          # Check changed files to skip pure log PR merges
+          files=$(gh api "repos/$OWNER/$REPO/pulls/$PR/files" --paginate --jq '.[].filename' 2>/dev/null || echo "")
+          if [ -n "$files" ]; then
+            non_log_count=$(echo "$files" | grep -v '^\.github/prompts/logs/' | wc -l)
+            if [ "$non_log_count" -eq 0 ]; then
+              echo "Log-only PR merged — skipping autowork fire."
+              echo "skip=true" >> "$GITHUB_OUTPUT"
+              exit 0
+            fi
+          fi
+          echo "skip=false" >> "$GITHUB_OUTPUT"
+
+      - name: Checkout repository
+        if: steps.pick.outputs.skip != 'true'
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Setup Node.js
+        if: steps.pick.outputs.skip != 'true'
+        uses: actions/setup-node@v4
+        with:
+          node-version: 22
+
+      - name: Configure Git author identity
+        if: steps.pick.outputs.skip != 'true'
+        run: |
+          git config --global user.name "github-actions[bot]"
+          git config --global user.email "github-actions[bot]@users.noreply.github.com"
+          git config --global --add safe.directory "$GITHUB_WORKSPACE"
+
+      - name: Cache Antigravity CLI
+        if: steps.pick.outputs.skip != 'true'
+        id: cache-agy
+        uses: actions/cache@v4
+        with:
+          path: ~/.local/bin/agy
+          key: agy-cli-linux-amd64-v1
+
+      - name: Install Antigravity CLI
+        if: steps.pick.outputs.skip != 'true' && steps.cache-agy.outputs.cache-hit != 'true'
+        run: |
+          curl -fsSL https://antigravity.google/cli/install.sh | bash
+
+      - name: Add Antigravity CLI to PATH
+        if: steps.pick.outputs.skip != 'true'
+        run: echo "$HOME/.local/bin" >> $GITHUB_PATH
+
+      - name: Write Antigravity OAuth Token
+        if: steps.pick.outputs.skip != 'true'
+        env:
+          ANTIGRAVITY_OAUTH_TOKEN: ${{ secrets.ANTIGRAVITY_OAUTH_TOKEN || secrets.GEMINI_API_KEY }}
+        run: |
+          if [ -z "$ANTIGRAVITY_OAUTH_TOKEN" ]; then
+            echo "::error::Neither ANTIGRAVITY_OAUTH_TOKEN nor GEMINI_API_KEY secret is set; cannot authenticate Antigravity CLI." >&2
+            exit 1
+          fi
+          mkdir -p "$HOME/.gemini/antigravity-cli"
+          chmod 700 "$HOME/.gemini/antigravity-cli"
+          printf '%s' "$ANTIGRAVITY_OAUTH_TOKEN" > "$HOME/.gemini/antigravity-cli/antigravity-oauth-token"
+          chmod 600 "$HOME/.gemini/antigravity-cli/antigravity-oauth-token"
+
+      - name: Discover domain skills
+        if: steps.pick.outputs.skip != 'true'
+        id: skills
+        run: |
+          SKILLS_PROMPT=""
+          if [ -d ".agents/skills" ]; then
+            for skill_path in .agents/skills/*/SKILL.md; do
+              if [ -f "$skill_path" ]; then
+                SKILLS_PROMPT="${SKILLS_PROMPT}Read and follow ${skill_path}. "
+              fi
+            done
+          fi
+          echo "skills_prompt=$SKILLS_PROMPT" >> "$GITHUB_OUTPUT"
+
+      - name: Run Autowork
+        if: steps.pick.outputs.skip != 'true'
+        timeout-minutes: 60
+        env:
+          GEMINI_API_KEY: ${{ secrets.GEMINI_API_KEY }}
+          GOOGLE_API_KEY: ${{ secrets.GEMINI_API_KEY }}
+          ANTIGRAVITY_API_KEY: ${{ secrets.GEMINI_API_KEY }}
+          GH_TOKEN: ${{ secrets.GH_PAT || github.token }}
+          SKILLS_PROMPT: ${{ steps.skills.outputs.skills_prompt }}
+          GITHUB_SERVER_URL: ${{ github.server_url }}
+          GITHUB_REPOSITORY: ${{ github.repository }}
+          GITHUB_RUN_ID: ${{ github.run_id }}
+        run: |
+          PROMPT="You are the Autowork routine for this repository. A PR was recently merged. Read and follow .github/prompts/autowork.md. ${SKILLS_PROMPT} You are in Scan mode: converge on open PRs, close merged issues, and pick the next unblocked priority issue."
+
+          agy -p "$PROMPT" \
+            --model gemini-3.7-flash-high \
+            --output-format text \
+            --print-timeout 60m \
+            --dangerously-skip-permissions

package/templates/workflows/trigger-review-routine.yml

@@ -0,0 +1,141 @@
+name: Trigger Review Routine
+
+on:
+  pull_request:
+    types: [ready_for_review, opened, reopened, synchronize]
+    paths-ignore:
+      - '.github/prompts/logs/**'
+
+concurrency:
+  group: review-routine-pr-${{ github.event.pull_request.number }}
+  cancel-in-progress: true
+
+jobs:
+  trigger-routine:
+    if: >-
+      github.event.pull_request.draft == false &&
+      github.event.pull_request.head.repo.full_name == github.repository
+    runs-on: ubuntu-latest
+    timeout-minutes: 60
+    permissions:
+      contents: write
+      actions: read
+      issues: write
+      pull-requests: write
+      statuses: write
+    steps:
+      - name: Skip if PR already merged or closed
+        id: guard
+        env:
+          GH_TOKEN: ${{ github.token }}
+        run: |
+          gh_api_retry() {
+            local endpoint="$1"
+            shift
+            local out="" err_file
+            err_file="$(mktemp)"
+            for attempt in 1 2 3 4 5; do
+              if out=$(gh api "$endpoint" "$@" 2>"$err_file"); then
+                printf '%s' "$out"
+                rm -f "$err_file"
+                return 0
+              fi
+              sleep $((attempt * 2))
+            done
+            rm -f "$err_file"
+            return 1
+          }
+
+          if ! pr=$(gh_api_retry "repos/${{ github.repository }}/pulls/${{ github.event.pull_request.number }}"); then
+            echo "skip=false" >> "$GITHUB_OUTPUT"
+            exit 0
+          fi
+
+          state=$(echo "$pr" | jq -r '.state')
+          merged=$(echo "$pr" | jq -r '.merged')
+          if [ "$state" = "closed" ] || [ "$merged" = "true" ]; then
+            echo "PR is already $state/merged=$merged — skipping review."
+            echo "skip=true" >> "$GITHUB_OUTPUT"
+            exit 0
+          fi
+          echo "skip=false" >> "$GITHUB_OUTPUT"
+
+      - name: Checkout repository
+        if: steps.guard.outputs.skip != 'true'
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Setup Node.js
+        if: steps.guard.outputs.skip != 'true'
+        uses: actions/setup-node@v4
+        with:
+          node-version: 22
+
+      - name: Configure Git author identity
+        if: steps.guard.outputs.skip != 'true'
+        run: |
+          git config --global user.name "github-actions[bot]"
+          git config --global user.email "github-actions[bot]@users.noreply.github.com"
+          git config --global --add safe.directory "$GITHUB_WORKSPACE"
+
+      - name: Cache Antigravity CLI
+        if: steps.guard.outputs.skip != 'true'
+        id: cache-agy
+        uses: actions/cache@v4
+        with:
+          path: ~/.local/bin/agy
+          key: agy-cli-linux-amd64-v1
+
+      - name: Install Antigravity CLI
+        if: steps.guard.outputs.skip != 'true' && steps.cache-agy.outputs.cache-hit != 'true'
+        run: |
+          curl -fsSL https://antigravity.google/cli/install.sh | bash
+
+      - name: Add Antigravity CLI to PATH
+        if: steps.guard.outputs.skip != 'true'
+        run: echo "$HOME/.local/bin" >> $GITHUB_PATH
+
+      - name: Write Antigravity OAuth Token
+        if: steps.guard.outputs.skip != 'true'
+        env:
+          ANTIGRAVITY_OAUTH_TOKEN: ${{ secrets.ANTIGRAVITY_OAUTH_TOKEN || secrets.GEMINI_API_KEY }}
+        run: |
+          if [ -z "$ANTIGRAVITY_OAUTH_TOKEN" ]; then
+            echo "::error::Neither ANTIGRAVITY_OAUTH_TOKEN nor GEMINI_API_KEY secret is set; cannot authenticate Antigravity CLI." >&2
+            exit 1
+          fi
+          mkdir -p "$HOME/.gemini/antigravity-cli"
+          chmod 700 "$HOME/.gemini/antigravity-cli"
+          printf '%s' "$ANTIGRAVITY_OAUTH_TOKEN" > "$HOME/.gemini/antigravity-cli/antigravity-oauth-token"
+          chmod 600 "$HOME/.gemini/antigravity-cli/antigravity-oauth-token"
+
+      - name: Run Peer Review
+        if: steps.guard.outputs.skip != 'true'
+        timeout-minutes: 55
+        env:
+          GEMINI_API_KEY: ${{ secrets.GEMINI_API_KEY }}
+          GOOGLE_API_KEY: ${{ secrets.GEMINI_API_KEY }}
+          ANTIGRAVITY_API_KEY: ${{ secrets.GEMINI_API_KEY }}
+          GH_TOKEN: ${{ secrets.GH_PAT || github.token }}
+          PR_NUMBER: ${{ github.event.pull_request.number }}
+          PR_URL: ${{ github.event.pull_request.html_url }}
+          GITHUB_SERVER_URL: ${{ github.server_url }}
+          GITHUB_REPOSITORY: ${{ github.repository }}
+          GITHUB_RUN_ID: ${{ github.run_id }}
+        run: |
+          PROMPT="You are the Peer Review routine for this repository. Read and follow the instructions in .github/prompts/peer-review.md exactly. Your target is pull request #${PR_NUMBER} (${PR_URL}). You are in Targeted mode: review PR #${PR_NUMBER} directly."
+
+          agy -p "$PROMPT" \
+            --model gemini-3.7-flash-high \
+            --output-format text \
+            --print-timeout 55m \
+            --dangerously-skip-permissions
+
+      - name: Emit run summary
+        if: always() && steps.guard.outputs.skip != 'true'
+        run: |
+          LATEST_LOG=$(ls -t .github/prompts/logs/peer-review/*.md 2>/dev/null | head -n 1)
+          if [ -n "$LATEST_LOG" ] && [ -n "$GITHUB_STEP_SUMMARY" ]; then
+            cat "$LATEST_LOG" >> "$GITHUB_STEP_SUMMARY"
+          fi