jonah-fleet 1.6.0 → 1.9.0

package/templates/workflows/design-review-cron.yml

@@ -0,0 +1,221 @@
+name: Design Review Scheduled Cron (agy)
+
+# Scheduled execution of the Design Review routine using Antigravity CLI on Gemini 3.7 Flash.
+# Dispatches bi-weekly ahead of Product Planning, dynamically discovers player-facing surfaces,
+# audits against DESIGN_SYSTEM.md and visual guardrails, files Autowork token cleanups,
+# and stages pruning & redesign recommendations for Product Planning.
+
+on:
+  schedule:
+    # Bi-weekly on the 1st and 15th of the month at 06:00 UTC (08:00 Paris CEST)
+    # 3 hours prior to Product Planning cron at 09:00 UTC
+    - cron: '0 6 1,15 * *'
+  workflow_dispatch:
+    inputs:
+      target_surface:
+        description: 'Target surface or route to review (optional, e.g. "pronostics", "groupes", "home"; leaves empty for dynamic rotation)'
+        required: false
+        type: string
+
+# Single-flight: do not run overlapping design review runs.
+concurrency:
+  group: design-review-agent
+  cancel-in-progress: false
+
+jobs:
+  run-design-review:
+    runs-on: ubuntu-latest
+    timeout-minutes: 60
+    permissions:
+      contents: write
+      issues: write
+      pull-requests: write
+      statuses: write
+      actions: read
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+          persist-credentials: false
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: 22
+
+      - name: Configure Git author identity
+        env:
+          GH_TOKEN: ${{ secrets.GH_PAT || github.token }}
+        run: |
+          git config --global user.name "github-actions[bot]"
+          git config --global user.email "github-actions[bot]@users.noreply.github.com"
+          git config --global --add safe.directory "$GITHUB_WORKSPACE"
+          gh auth setup-git
+
+      - name: Cache Antigravity CLI
+        id: cache-agy
+        uses: actions/cache@v4
+        with:
+          path: ~/.local/bin/agy
+          key: agy-cli-linux-amd64-v1
+
+      - name: Install Antigravity CLI
+        if: steps.cache-agy.outputs.cache-hit != 'true'
+        run: |
+          curl -fsSL https://antigravity.google/cli/install.sh | bash
+
+      - name: Add Antigravity CLI to PATH
+        run: echo "$HOME/.local/bin" >> $GITHUB_PATH
+
+      - name: Write Antigravity OAuth Token
+        env:
+          ANTIGRAVITY_OAUTH_TOKEN: ${{ secrets.ANTIGRAVITY_OAUTH_TOKEN || secrets.GEMINI_API_KEY }}
+        run: |
+          if [ -z "$ANTIGRAVITY_OAUTH_TOKEN" ]; then
+            echo "::error::Neither ANTIGRAVITY_OAUTH_TOKEN nor GEMINI_API_KEY secret is set; cannot authenticate Antigravity CLI." >&2
+            exit 1
+          fi
+          mkdir -p "$HOME/.gemini/antigravity-cli"
+          chmod 700 "$HOME/.gemini/antigravity-cli"
+          printf '%s' "$ANTIGRAVITY_OAUTH_TOKEN" > "$HOME/.gemini/antigravity-cli/antigravity-oauth-token"
+          chmod 600 "$HOME/.gemini/antigravity-cli/antigravity-oauth-token"
+
+      - name: Fast preflight credential validation (SwarmClaw Pattern #2)
+        run: |
+          if [ ! -s "$HOME/.gemini/antigravity-cli/antigravity-oauth-token" ]; then
+            echo "::error::Preflight credential check failed: Antigravity OAuth token file is missing or empty." >&2
+            exit 1
+          fi
+          echo "✓ Preflight credential validation passed."
+
+      - name: Discover and compile domain skills (SwarmClaw Pattern #4)
+        id: skills
+        run: |
+          SKILLS_LIST="Read and follow .agents/skills/design-system/SKILL.md, .agents/skills/design-critique/SKILL.md, and .agents/skills/run/SKILL.md."
+          echo "skills_prompt=$SKILLS_LIST" >> "$GITHUB_OUTPUT"
+
+      - name: Initialize Routine Run Issue
+        id: run-issue
+        env:
+          GH_TOKEN: ${{ secrets.GH_PAT || github.token }}
+          EVENT_NAME: ${{ github.event_name }}
+          RUN_ID: ${{ github.run_id }}
+          SERVER_URL: ${{ github.server_url }}
+          REPOSITORY: ${{ github.repository }}
+        run: |
+          TIMESTAMP=$(date -u +"%Y-%m-%dT%H-%M-%SZ")
+          TITLE="[design-review] run ${TIMESTAMP}"
+          BODY="### Autonomous Routine Execution in Progress
+          - **Routine**: \`design-review\`
+          - **Timestamp**: \`${TIMESTAMP}\`
+          - **Trigger**: \`${EVENT_NAME}\`
+          - **Run ID**: [\`${RUN_ID}\`](${SERVER_URL}/${REPOSITORY}/actions/runs/${RUN_ID})
+
+          ---
+          _Generated by [Antigravity](${SERVER_URL}/${REPOSITORY}/actions/runs/${RUN_ID})_"
+          ISSUE_URL=$(gh issue create --title "$TITLE" --body "$BODY" --label "routine-log,routine:design-review,status:running,runner:github-actions")
+          ISSUE_NUMBER=$(echo "$ISSUE_URL" | grep -oE '[0-9]+$')
+          echo "issue_number=$ISSUE_NUMBER" >> "$GITHUB_OUTPUT"
+          echo "ROUTINE_ISSUE_NUMBER=$ISSUE_NUMBER" >> "$GITHUB_ENV"
+
+      - name: Run Design Review
+        timeout-minutes: 50
+        env:
+          GEMINI_API_KEY: ${{ secrets.GEMINI_API_KEY }}
+          GOOGLE_API_KEY: ${{ secrets.GEMINI_API_KEY }}
+          ANTIGRAVITY_API_KEY: ${{ secrets.GEMINI_API_KEY }}
+          GH_TOKEN: ${{ secrets.GH_PAT || github.token }}
+          ROUTINE_ISSUE_NUMBER: ${{ steps.run-issue.outputs.issue_number }}
+          VERCEL_TOKEN: ${{ secrets.VERCEL_TOKEN }}
+          POSTHOG_API_KEY: ${{ secrets.POSTHOG_API_KEY }}
+          TARGET_SURFACE: ${{ inputs.target_surface }}
+          SKILLS_PROMPT: ${{ steps.skills.outputs.skills_prompt }}
+          GITHUB_SERVER_URL: ${{ github.server_url }}
+          GITHUB_REPOSITORY: ${{ github.repository }}
+          GITHUB_RUN_ID: ${{ github.run_id }}
+        run: |
+          PROMPT="You are the Design Review routine for this repository. Read and follow the instructions in .github/prompts/design-review.md exactly. ${SKILLS_PROMPT}"
+
+          agy -p "$PROMPT" \
+            --model gemini-3.8-flash-high \
+            --output-format text \
+            --print-timeout 50m \
+            --dangerously-skip-permissions
+
+      - name: Emit run summary
+        if: always()
+        run: |
+          REPORT_FILE=".jonah-fleet/run-report.md"
+          if [ -f "$REPORT_FILE" ] && [ -n "$GITHUB_STEP_SUMMARY" ]; then
+            cat "$REPORT_FILE" >> "$GITHUB_STEP_SUMMARY"
+          fi
+
+      - name: Emit Fleet Telemetry (Opt-in)
+        if: always()
+        env:
+          GH_TOKEN: ${{ secrets.GH_PAT || github.token }}
+          TELEMETRY_ENDPOINT: ${{ secrets.JONAH_FLEET_TELEMETRY_ENDPOINT }}
+          GITHUB_REPOSITORY: ${{ github.repository }}
+          GITHUB_RUN_ID: ${{ github.run_id }}
+          GITHUB_RUN_NUMBER: ${{ github.run_number }}
+        run: |
+          REPORT_FILE=".jonah-fleet/run-report.md"
+          if [ -f "$REPORT_FILE" ]; then
+            npx --yes jonah-fleet telemetry --emit --log "$REPORT_FILE" --endpoint "$TELEMETRY_ENDPOINT" || true
+          fi
+
+      - name: Reconcile Routine Run Issue
+        if: always()
+        env:
+          GH_TOKEN: ${{ secrets.GH_PAT || github.token }}
+          ISSUE_NUMBER: ${{ steps.run-issue.outputs.issue_number }}
+          JOB_STATUS: ${{ job.status }}
+          EVENT_NAME: ${{ github.event_name }}
+          RUN_ID: ${{ github.run_id }}
+          SERVER_URL: ${{ github.server_url }}
+          REPOSITORY: ${{ github.repository }}
+        run: |
+          if [ -z "$ISSUE_NUMBER" ]; then
+            echo "No routine issue to reconcile."
+            exit 0
+          fi
+
+          REPORT_FILE=".jonah-fleet/run-report.md"
+
+          if [ -f "$REPORT_FILE" ]; then
+            BODY_CONTENT=$(cat "$REPORT_FILE")
+          else
+            BODY_CONTENT="### Autonomous Routine Execution Completed (${JOB_STATUS})
+          - **Routine**: \`design-review\`
+          - **Run ID**: [\`${RUN_ID}\`](${SERVER_URL}/${REPOSITORY}/actions/runs/${RUN_ID})
+          - **Trigger**: \`${EVENT_NAME}\`"
+          fi
+
+          FINAL_BODY="${BODY_CONTENT}
+
+          ---
+          _Generated by [Antigravity](${SERVER_URL}/${REPOSITORY}/actions/runs/${RUN_ID})_"
+
+          TEMP_BODY=$(mktemp)
+          echo "$FINAL_BODY" > "$TEMP_BODY"
+          gh issue edit "$ISSUE_NUMBER" --body-file "$TEMP_BODY"
+          rm -f "$TEMP_BODY"
+
+          if [ "$JOB_STATUS" = "success" ]; then
+            gh issue edit "$ISSUE_NUMBER" --add-label "status:success" --remove-label "status:running"
+            gh issue close "$ISSUE_NUMBER" --reason completed
+            echo "✓ Routine run issue #$ISSUE_NUMBER closed as completed."
+          else
+            INTERRUPTION_BODY="### ❌ Milestone: Run Interrupted / Failed
+- **Routine**: \`design-review\`
+- **Status**: Workflow job failed or timed out (\`${JOB_STATUS}\`)
+- **Step**: Actions execution halted before normal completion
+- **Action Log**: [View GitHub Actions Run](${SERVER_URL}/${REPOSITORY}/actions/runs/${RUN_ID})
+
+---
+_Generated by [Antigravity](${SERVER_URL}/${REPOSITORY}/actions/runs/${RUN_ID})_"
+            gh issue comment "$ISSUE_NUMBER" --body "$INTERRUPTION_BODY" || true
+            gh issue edit "$ISSUE_NUMBER" --add-label "status:failure,needs-attention" --remove-label "status:running"
+            echo "⚠️ Routine run issue #$ISSUE_NUMBER left open for triage (status: $JOB_STATUS)."
+          fi

package/templates/workflows/issues-housekeeping-cron.yml

@@ -25,6 +25,7 @@ jobs:
         uses: actions/checkout@v4
         with:
           fetch-depth: 0
+          persist-credentials: false
 
       - name: Setup Node.js
         uses: actions/setup-node@v4
@@ -32,10 +33,13 @@ jobs:
           node-version: 22
 
       - name: Configure Git author identity
+        env:
+          GH_TOKEN: ${{ secrets.GH_PAT || github.token }}
         run: |
           git config --global user.name "github-actions[bot]"
           git config --global user.email "github-actions[bot]@users.noreply.github.com"
           git config --global --add safe.directory "$GITHUB_WORKSPACE"
+          gh auth setup-git
 
       - name: Cache Antigravity CLI
         id: cache-agy
@@ -65,6 +69,69 @@ jobs:
           printf '%s' "$ANTIGRAVITY_OAUTH_TOKEN" > "$HOME/.gemini/antigravity-cli/antigravity-oauth-token"
           chmod 600 "$HOME/.gemini/antigravity-cli/antigravity-oauth-token"
 
+      - name: Resolve routine configuration
+        id: routine-config
+        run: |
+          ROUTINE="issues-housekeeping"
+          DEFAULT_MODEL="gemini-3.8-flash-medium"
+          DEFAULT_TIMEOUT="40"
+
+          MODEL="$DEFAULT_MODEL"
+          TIMEOUT="$DEFAULT_TIMEOUT"
+
+          if [ -f "agents-manifest.json" ]; then
+            CONFIG_JSON=$(node -e '
+              try {
+                const fs = require("fs");
+                const m = JSON.parse(fs.readFileSync("agents-manifest.json", "utf8"));
+                const r = process.argv[1];
+                const model = m.models?.[r] || m.models?.default;
+                const timeout = m.budgets?.timeoutMinutes?.[r] || m.budgets?.timeoutMinutes?.default;
+                console.log(JSON.stringify({ model: model || "", timeout: timeout ? String(timeout) : "" }));
+              } catch (e) {
+                console.log(JSON.stringify({ model: "", timeout: "" }));
+              }
+            ' "$ROUTINE")
+
+            RESOLVED_MODEL=$(node -e "try { console.log(JSON.parse(process.argv[1]).model || ''); } catch {}" "$CONFIG_JSON")
+            RESOLVED_TIMEOUT=$(node -e "try { console.log(JSON.parse(process.argv[1]).timeout || ''); } catch {}" "$CONFIG_JSON")
+
+            if [ -n "$RESOLVED_MODEL" ]; then
+              MODEL="$RESOLVED_MODEL"
+            fi
+            if [ -n "$RESOLVED_TIMEOUT" ]; then
+              TIMEOUT="$RESOLVED_TIMEOUT"
+            fi
+          fi
+
+          echo "model=$MODEL" >> "$GITHUB_OUTPUT"
+          echo "print_timeout=${TIMEOUT}m" >> "$GITHUB_OUTPUT"
+          echo "Resolved routine configuration: model=$MODEL, timeout=${TIMEOUT}m"
+
+      - name: Initialize Routine Run Issue
+        id: run-issue
+        env:
+          GH_TOKEN: ${{ secrets.GH_PAT || github.token }}
+          EVENT_NAME: ${{ github.event_name }}
+          RUN_ID: ${{ github.run_id }}
+          SERVER_URL: ${{ github.server_url }}
+          REPOSITORY: ${{ github.repository }}
+        run: |
+          TIMESTAMP=$(date -u +"%Y-%m-%dT%H-%M-%SZ")
+          TITLE="[issues-housekeeping] run ${TIMESTAMP}"
+          BODY="### Autonomous Routine Execution in Progress
+          - **Routine**: \`issues-housekeeping\`
+          - **Timestamp**: \`${TIMESTAMP}\`
+          - **Trigger**: \`${EVENT_NAME}\`
+          - **Run ID**: [\`${RUN_ID}\`](${SERVER_URL}/${REPOSITORY}/actions/runs/${RUN_ID})
+
+          ---
+          _Generated by [Antigravity](${SERVER_URL}/${REPOSITORY}/actions/runs/${RUN_ID})_"
+          ISSUE_URL=$(gh issue create --title "$TITLE" --body "$BODY" --label "routine-log,routine:issues-housekeeping,status:running,runner:github-actions")
+          ISSUE_NUMBER=$(echo "$ISSUE_URL" | grep -oE '[0-9]+$')
+          echo "issue_number=$ISSUE_NUMBER" >> "$GITHUB_OUTPUT"
+          echo "ROUTINE_ISSUE_NUMBER=$ISSUE_NUMBER" >> "$GITHUB_ENV"
+
       - name: Run Issues Housekeeping
         timeout-minutes: 40
         env:
@@ -72,6 +139,9 @@ jobs:
           GOOGLE_API_KEY: ${{ secrets.GEMINI_API_KEY }}
           ANTIGRAVITY_API_KEY: ${{ secrets.GEMINI_API_KEY }}
           GH_TOKEN: ${{ secrets.GH_PAT || github.token }}
+          ROUTINE_ISSUE_NUMBER: ${{ steps.run-issue.outputs.issue_number }}
+          MODEL: ${{ steps.routine-config.outputs.model || 'gemini-3.8-flash-medium' }}
+          PRINT_TIMEOUT: ${{ steps.routine-config.outputs.print_timeout || '40m' }}
           GITHUB_SERVER_URL: ${{ github.server_url }}
           GITHUB_REPOSITORY: ${{ github.repository }}
           GITHUB_RUN_ID: ${{ github.run_id }}
@@ -79,7 +149,62 @@ jobs:
           PROMPT="You are the Issues Housekeeping routine for this repository. Read and follow .github/prompts/issues-housekeeping.md exactly. Sweep open issues for staleness, duplicates, priority accuracy, and orphaned claims."
 
           agy -p "$PROMPT" \
-            --model gemini-3.7-flash-high \
+            --model "$MODEL" \
             --output-format text \
-            --print-timeout 40m \
+            --print-timeout "$PRINT_TIMEOUT" \
             --dangerously-skip-permissions
+
+      - name: Reconcile Routine Run Issue
+        if: always()
+        env:
+          GH_TOKEN: ${{ secrets.GH_PAT || github.token }}
+          ISSUE_NUMBER: ${{ steps.run-issue.outputs.issue_number }}
+          JOB_STATUS: ${{ job.status }}
+          EVENT_NAME: ${{ github.event_name }}
+          RUN_ID: ${{ github.run_id }}
+          SERVER_URL: ${{ github.server_url }}
+          REPOSITORY: ${{ github.repository }}
+        run: |
+          if [ -z "$ISSUE_NUMBER" ]; then
+            echo "No routine issue to reconcile."
+            exit 0
+          fi
+
+          REPORT_FILE=".jonah-fleet/run-report.md"
+
+          if [ -f "$REPORT_FILE" ]; then
+            BODY_CONTENT=$(cat "$REPORT_FILE")
+          else
+            BODY_CONTENT="### Autonomous Routine Execution Completed (${JOB_STATUS})
+          - **Routine**: \`issues-housekeeping\`
+          - **Run ID**: [\`${RUN_ID}\`](${SERVER_URL}/${REPOSITORY}/actions/runs/${RUN_ID})
+          - **Trigger**: \`${EVENT_NAME}\`"
+          fi
+
+          FINAL_BODY="${BODY_CONTENT}
+
+          ---
+          _Generated by [Antigravity](${SERVER_URL}/${REPOSITORY}/actions/runs/${RUN_ID})_"
+
+          TEMP_BODY=$(mktemp)
+          echo "$FINAL_BODY" > "$TEMP_BODY"
+          gh issue edit "$ISSUE_NUMBER" --body-file "$TEMP_BODY"
+          rm -f "$TEMP_BODY"
+
+          if [ "$JOB_STATUS" = "success" ]; then
+            gh issue edit "$ISSUE_NUMBER" --add-label "status:success" --remove-label "status:running"
+            gh issue close "$ISSUE_NUMBER" --reason completed
+            echo "✓ Routine run issue #$ISSUE_NUMBER closed as completed."
+          else
+            INTERRUPTION_BODY="### ❌ Milestone: Run Interrupted / Failed
+- **Routine**: \`issues-housekeeping\`
+- **Status**: Workflow job failed or timed out (\`${JOB_STATUS}\`)
+- **Step**: Actions execution halted before normal completion
+- **Action Log**: [View GitHub Actions Run](${SERVER_URL}/${REPOSITORY}/actions/runs/${RUN_ID})
+
+---
+_Generated by [Antigravity](${SERVER_URL}/${REPOSITORY}/actions/runs/${RUN_ID})_"
+            gh issue comment "$ISSUE_NUMBER" --body "$INTERRUPTION_BODY" || true
+            gh issue edit "$ISSUE_NUMBER" --add-label "status:failure,needs-attention" --remove-label "status:running"
+            echo "⚠️ Routine run issue #$ISSUE_NUMBER left open for triage (status: $JOB_STATUS)."
+          fi

package/templates/workflows/prompt-optimizer-cron.yml

@@ -13,7 +13,7 @@ concurrency:
 jobs:
   run-optimizer:
     runs-on: ubuntu-latest
-    timeout-minutes: 40
+    timeout-minutes: 45
     permissions:
       contents: write
       issues: write
@@ -25,6 +25,7 @@ jobs:
         uses: actions/checkout@v4
         with:
           fetch-depth: 0
+          persist-credentials: false
 
       - name: Setup Node.js
         uses: actions/setup-node@v4
@@ -32,10 +33,13 @@ jobs:
           node-version: 22
 
       - name: Configure Git author identity
+        env:
+          GH_TOKEN: ${{ secrets.GH_PAT || github.token }}
         run: |
           git config --global user.name "github-actions[bot]"
           git config --global user.email "github-actions[bot]@users.noreply.github.com"
           git config --global --add safe.directory "$GITHUB_WORKSPACE"
+          gh auth setup-git
 
       - name: Cache Antigravity CLI
         id: cache-agy
@@ -65,6 +69,69 @@ jobs:
           printf '%s' "$ANTIGRAVITY_OAUTH_TOKEN" > "$HOME/.gemini/antigravity-cli/antigravity-oauth-token"
           chmod 600 "$HOME/.gemini/antigravity-cli/antigravity-oauth-token"
 
+      - name: Resolve routine configuration
+        id: routine-config
+        run: |
+          ROUTINE="optimizer"
+          DEFAULT_MODEL="gemini-3.8-flash-high"
+          DEFAULT_TIMEOUT="35"
+
+          MODEL="$DEFAULT_MODEL"
+          TIMEOUT="$DEFAULT_TIMEOUT"
+
+          if [ -f "agents-manifest.json" ]; then
+            CONFIG_JSON=$(node -e '
+              try {
+                const fs = require("fs");
+                const m = JSON.parse(fs.readFileSync("agents-manifest.json", "utf8"));
+                const r = process.argv[1];
+                const model = m.models?.[r] || m.models?.default;
+                const timeout = m.budgets?.timeoutMinutes?.[r] || m.budgets?.timeoutMinutes?.default;
+                console.log(JSON.stringify({ model: model || "", timeout: timeout ? String(timeout) : "" }));
+              } catch (e) {
+                console.log(JSON.stringify({ model: "", timeout: "" }));
+              }
+            ' "$ROUTINE")
+
+            RESOLVED_MODEL=$(node -e "try { console.log(JSON.parse(process.argv[1]).model || ''); } catch {}" "$CONFIG_JSON")
+            RESOLVED_TIMEOUT=$(node -e "try { console.log(JSON.parse(process.argv[1]).timeout || ''); } catch {}" "$CONFIG_JSON")
+
+            if [ -n "$RESOLVED_MODEL" ]; then
+              MODEL="$RESOLVED_MODEL"
+            fi
+            if [ -n "$RESOLVED_TIMEOUT" ]; then
+              TIMEOUT="$RESOLVED_TIMEOUT"
+            fi
+          fi
+
+          echo "model=$MODEL" >> "$GITHUB_OUTPUT"
+          echo "print_timeout=${TIMEOUT}m" >> "$GITHUB_OUTPUT"
+          echo "Resolved routine configuration: model=$MODEL, timeout=${TIMEOUT}m"
+
+      - name: Initialize Routine Run Issue
+        id: run-issue
+        env:
+          GH_TOKEN: ${{ secrets.GH_PAT || github.token }}
+          EVENT_NAME: ${{ github.event_name }}
+          RUN_ID: ${{ github.run_id }}
+          SERVER_URL: ${{ github.server_url }}
+          REPOSITORY: ${{ github.repository }}
+        run: |
+          TIMESTAMP=$(date -u +"%Y-%m-%dT%H-%M-%SZ")
+          TITLE="[optimizer] run ${TIMESTAMP}"
+          BODY="### Autonomous Routine Execution in Progress
+          - **Routine**: \`optimizer\`
+          - **Timestamp**: \`${TIMESTAMP}\`
+          - **Trigger**: \`${EVENT_NAME}\`
+          - **Run ID**: [\`${RUN_ID}\`](${SERVER_URL}/${REPOSITORY}/actions/runs/${RUN_ID})
+
+          ---
+          _Generated by [Antigravity](${SERVER_URL}/${REPOSITORY}/actions/runs/${RUN_ID})_"
+          ISSUE_URL=$(gh issue create --title "$TITLE" --body "$BODY" --label "routine-log,routine:optimizer,status:running,runner:github-actions")
+          ISSUE_NUMBER=$(echo "$ISSUE_URL" | grep -oE '[0-9]+$')
+          echo "issue_number=$ISSUE_NUMBER" >> "$GITHUB_OUTPUT"
+          echo "ROUTINE_ISSUE_NUMBER=$ISSUE_NUMBER" >> "$GITHUB_ENV"
+
       - name: Run Prompt Optimizer
         timeout-minutes: 35
         env:
@@ -72,6 +139,9 @@ jobs:
           GOOGLE_API_KEY: ${{ secrets.GEMINI_API_KEY }}
           ANTIGRAVITY_API_KEY: ${{ secrets.GEMINI_API_KEY }}
           GH_TOKEN: ${{ secrets.GH_PAT || github.token }}
+          ROUTINE_ISSUE_NUMBER: ${{ steps.run-issue.outputs.issue_number }}
+          MODEL: ${{ steps.routine-config.outputs.model || 'gemini-3.8-flash-high' }}
+          PRINT_TIMEOUT: ${{ steps.routine-config.outputs.print_timeout || '35m' }}
           GITHUB_SERVER_URL: ${{ github.server_url }}
           GITHUB_REPOSITORY: ${{ github.repository }}
           GITHUB_RUN_ID: ${{ github.run_id }}
@@ -79,17 +149,17 @@ jobs:
           PROMPT="You are the Prompt Optimizer routine for this repository. Read and follow .github/prompts/optimizer.md exactly. Diagnose failures, token anomalies, and review loops, and propose preventative prompt and test fixes."
 
           agy -p "$PROMPT" \
-            --model gemini-3.7-flash-high \
+            --model "$MODEL" \
             --output-format text \
-            --print-timeout 35m \
+            --print-timeout "$PRINT_TIMEOUT" \
             --dangerously-skip-permissions
 
       - name: Emit run summary
         if: always()
         run: |
-          LATEST_LOG=$(ls -t .github/prompts/logs/optimizer/*.md 2>/dev/null | head -n 1)
-          if [ -n "$LATEST_LOG" ] && [ -n "$GITHUB_STEP_SUMMARY" ]; then
-            cat "$LATEST_LOG" >> "$GITHUB_STEP_SUMMARY"
+          REPORT_FILE=".jonah-fleet/run-report.md"
+          if [ -f "$REPORT_FILE" ] && [ -n "$GITHUB_STEP_SUMMARY" ]; then
+            cat "$REPORT_FILE" >> "$GITHUB_STEP_SUMMARY"
           fi
 
       - name: Emit Fleet Telemetry (Opt-in)
@@ -101,7 +171,62 @@ jobs:
           GITHUB_RUN_ID: ${{ github.run_id }}
           GITHUB_RUN_NUMBER: ${{ github.run_number }}
         run: |
-          LATEST_LOG=$(ls -t .github/prompts/logs/optimizer/*.md 2>/dev/null | head -n 1)
-          if [ -n "$LATEST_LOG" ] && [ -f "$LATEST_LOG" ]; then
-            npx --yes jonah-fleet telemetry --emit --log "$LATEST_LOG" --endpoint "$TELEMETRY_ENDPOINT" || true
+          REPORT_FILE=".jonah-fleet/run-report.md"
+          if [ -f "$REPORT_FILE" ]; then
+            npx --yes jonah-fleet telemetry --emit --log "$REPORT_FILE" --endpoint "$TELEMETRY_ENDPOINT" || true
+          fi
+
+      - name: Reconcile Routine Run Issue
+        if: always()
+        env:
+          GH_TOKEN: ${{ secrets.GH_PAT || github.token }}
+          ISSUE_NUMBER: ${{ steps.run-issue.outputs.issue_number }}
+          JOB_STATUS: ${{ job.status }}
+          EVENT_NAME: ${{ github.event_name }}
+          RUN_ID: ${{ github.run_id }}
+          SERVER_URL: ${{ github.server_url }}
+          REPOSITORY: ${{ github.repository }}
+        run: |
+          if [ -z "$ISSUE_NUMBER" ]; then
+            echo "No routine issue to reconcile."
+            exit 0
+          fi
+
+          REPORT_FILE=".jonah-fleet/run-report.md"
+
+          if [ -f "$REPORT_FILE" ]; then
+            BODY_CONTENT=$(cat "$REPORT_FILE")
+          else
+            BODY_CONTENT="### Autonomous Routine Execution Completed (${JOB_STATUS})
+          - **Routine**: \`optimizer\`
+          - **Run ID**: [\`${RUN_ID}\`](${SERVER_URL}/${REPOSITORY}/actions/runs/${RUN_ID})
+          - **Trigger**: \`${EVENT_NAME}\`"
+          fi
+
+          FINAL_BODY="${BODY_CONTENT}
+
+          ---
+          _Generated by [Antigravity](${SERVER_URL}/${REPOSITORY}/actions/runs/${RUN_ID})_"
+
+          TEMP_BODY=$(mktemp)
+          echo "$FINAL_BODY" > "$TEMP_BODY"
+          gh issue edit "$ISSUE_NUMBER" --body-file "$TEMP_BODY"
+          rm -f "$TEMP_BODY"
+
+          if [ "$JOB_STATUS" = "success" ]; then
+            gh issue edit "$ISSUE_NUMBER" --add-label "status:success" --remove-label "status:running"
+            gh issue close "$ISSUE_NUMBER" --reason completed
+            echo "✓ Routine run issue #$ISSUE_NUMBER closed as completed."
+          else
+            INTERRUPTION_BODY="### ❌ Milestone: Run Interrupted / Failed
+- **Routine**: \`optimizer\`
+- **Status**: Workflow job failed or timed out (\`${JOB_STATUS}\`)
+- **Step**: Actions execution halted before normal completion
+- **Action Log**: [View GitHub Actions Run](${SERVER_URL}/${REPOSITORY}/actions/runs/${RUN_ID})
+
+---
+_Generated by [Antigravity](${SERVER_URL}/${REPOSITORY}/actions/runs/${RUN_ID})_"
+            gh issue comment "$ISSUE_NUMBER" --body "$INTERRUPTION_BODY" || true
+            gh issue edit "$ISSUE_NUMBER" --add-label "status:failure,needs-attention" --remove-label "status:running"
+            echo "⚠️ Routine run issue #$ISSUE_NUMBER left open for triage (status: $JOB_STATUS)."
           fi

package/templates/workflows/sync-fleet.yml

@@ -19,6 +19,7 @@ jobs:
         uses: actions/checkout@v4
         with:
           fetch-depth: 0
+          persist-credentials: false
 
       - name: Setup Node.js
         uses: actions/setup-node@v4
@@ -26,9 +27,12 @@ jobs:
           node-version: 22
 
       - name: Configure Git author identity
+        env:
+          GH_TOKEN: ${{ secrets.GH_PAT || github.token }}
         run: |
           git config --global user.name "github-actions[bot]"
           git config --global user.email "github-actions[bot]@users.noreply.github.com"
+          gh auth setup-git
 
       - name: Run jonah-fleet sync
         id: sync