jonah-fleet 1.8.0 → 1.9.0

package/templates/workflows/autowork-cron.yml

@@ -24,7 +24,7 @@ concurrency:
 jobs:
   run-autowork:
     runs-on: ubuntu-latest
-    timeout-minutes: 65
+    timeout-minutes: 70
     permissions:
       contents: write
       issues: write
@@ -37,7 +37,7 @@ jobs:
         with:
           fetch-depth: 0
           token: ${{ secrets.GH_PAT || github.token }}
-
+          persist-credentials: false
 
       - name: Setup Node.js
         uses: actions/setup-node@v4
@@ -45,10 +45,13 @@ jobs:
           node-version: 22
 
       - name: Configure Git author identity
+        env:
+          GH_TOKEN: ${{ secrets.GH_PAT || github.token }}
         run: |
           git config --global user.name "github-actions[bot]"
           git config --global user.email "github-actions[bot]@users.noreply.github.com"
           git config --global --add safe.directory "$GITHUB_WORKSPACE"
+          gh auth setup-git
 
       - name: Cache Antigravity CLI
         id: cache-agy
@@ -109,7 +112,7 @@ jobs:
         id: routine-config
         run: |
           ROUTINE="autowork"
-          DEFAULT_MODEL="gemini-3.7-flash-high"
+          DEFAULT_MODEL="gemini-3.8-flash-high"
           DEFAULT_TIMEOUT="60"
 
           MODEL="$DEFAULT_MODEL"
@@ -144,6 +147,35 @@ jobs:
           echo "print_timeout=${TIMEOUT}m" >> "$GITHUB_OUTPUT"
           echo "Resolved routine configuration: model=$MODEL, timeout=${TIMEOUT}m"
 
+      - name: Initialize Routine Run Issue
+        id: run-issue
+        env:
+          GH_TOKEN: ${{ secrets.GH_PAT || github.token }}
+          TARGET_ARG: ${{ inputs.target_issue || inputs.issue_number }}
+          EVENT_NAME: ${{ github.event_name }}
+          RUN_ID: ${{ github.run_id }}
+          SERVER_URL: ${{ github.server_url }}
+          REPOSITORY: ${{ github.repository }}
+        run: |
+          TIMESTAMP=$(date -u +"%Y-%m-%dT%H-%M-%SZ")
+          if [ -n "$TARGET_ARG" ]; then
+            TITLE="[autowork] run ${TIMESTAMP} (Issue #${TARGET_ARG})"
+          else
+            TITLE="[autowork] run ${TIMESTAMP}"
+          fi
+          BODY="### Autonomous Routine Execution in Progress
+          - **Routine**: \`autowork\`
+          - **Timestamp**: \`${TIMESTAMP}\`
+          - **Trigger**: \`${EVENT_NAME}\`
+          - **Run ID**: [\`${RUN_ID}\`](${SERVER_URL}/${REPOSITORY}/actions/runs/${RUN_ID})
+
+          ---
+          _Generated by [Antigravity](${SERVER_URL}/${REPOSITORY}/actions/runs/${RUN_ID})_"
+          ISSUE_URL=$(gh issue create --title "$TITLE" --body "$BODY" --label "routine-log,routine:autowork,status:running,runner:github-actions")
+          ISSUE_NUMBER=$(echo "$ISSUE_URL" | grep -oE '[0-9]+$')
+          echo "issue_number=$ISSUE_NUMBER" >> "$GITHUB_OUTPUT"
+          echo "ROUTINE_ISSUE_NUMBER=$ISSUE_NUMBER" >> "$GITHUB_ENV"
+
       - name: Run Autowork
         timeout-minutes: 60
         env:
@@ -152,7 +184,10 @@ jobs:
           ANTIGRAVITY_API_KEY: ${{ secrets.GEMINI_API_KEY }}
           GH_TOKEN: ${{ secrets.GH_PAT || github.token }}
           TARGET_ISSUE: ${{ inputs.target_issue || inputs.issue_number }}
+          ROUTINE_ISSUE_NUMBER: ${{ steps.run-issue.outputs.issue_number }}
           SKILLS_PROMPT: ${{ steps.skills.outputs.skills_prompt }}
+          MODEL: ${{ steps.routine-config.outputs.model || 'gemini-3.8-flash-high' }}
+          PRINT_TIMEOUT: ${{ steps.routine-config.outputs.print_timeout || '60m' }}
           GITHUB_SERVER_URL: ${{ github.server_url }}
           GITHUB_REPOSITORY: ${{ github.repository }}
           GITHUB_RUN_ID: ${{ github.run_id }}
@@ -164,17 +199,17 @@ jobs:
           fi
 
           agy -p "$PROMPT" \
-            --model "${{ steps.routine-config.outputs.model || 'gemini-3.7-flash-high' }}" \
+            --model "$MODEL" \
             --output-format text \
-            --print-timeout "${{ steps.routine-config.outputs.print_timeout || '60m' }}" \
+            --print-timeout "$PRINT_TIMEOUT" \
             --dangerously-skip-permissions
 
       - name: Emit run summary
         if: always()
         run: |
-          LATEST_LOG=$(ls -t .github/prompts/logs/autowork/*.md 2>/dev/null | head -n 1)
-          if [ -n "$LATEST_LOG" ] && [ -n "$GITHUB_STEP_SUMMARY" ]; then
-            cat "$LATEST_LOG" >> "$GITHUB_STEP_SUMMARY"
+          REPORT_FILE=".jonah-fleet/run-report.md"
+          if [ -f "$REPORT_FILE" ] && [ -n "$GITHUB_STEP_SUMMARY" ]; then
+            cat "$REPORT_FILE" >> "$GITHUB_STEP_SUMMARY"
           fi
 
       - name: Emit Fleet Telemetry (Opt-in)
@@ -186,9 +221,9 @@ jobs:
           GITHUB_RUN_ID: ${{ github.run_id }}
           GITHUB_RUN_NUMBER: ${{ github.run_number }}
         run: |
-          LATEST_LOG=$(ls -t .github/prompts/logs/autowork/*.md 2>/dev/null | head -n 1)
-          if [ -n "$LATEST_LOG" ] && [ -f "$LATEST_LOG" ]; then
-            npx --yes jonah-fleet telemetry --emit --log "$LATEST_LOG" --endpoint "$TELEMETRY_ENDPOINT" || true
+          REPORT_FILE=".jonah-fleet/run-report.md"
+          if [ -f "$REPORT_FILE" ]; then
+            npx --yes jonah-fleet telemetry --emit --log "$REPORT_FILE" --endpoint "$TELEMETRY_ENDPOINT" || true
           fi
 
       - name: Verify Atomic Handoff Invariant (PR Existence Guard)
@@ -196,10 +231,10 @@ jobs:
         env:
           GH_TOKEN: ${{ github.token }}
         run: |
-          LATEST_LOG=$(ls -t .github/prompts/logs/autowork/*.md 2>/dev/null | head -n 1)
-          if [ -n "$LATEST_LOG" ]; then
-            if grep -q "Result.*SUCCESS" "$LATEST_LOG"; then
-              WORKED_BRANCH=$(grep -E '^\s*-\s*(Pushed branch|Branch):' "$LATEST_LOG" | head -n 1 | sed -E 's/.*`([^`]+)`.*/\1/')
+          REPORT_FILE=".jonah-fleet/run-report.md"
+          if [ -f "$REPORT_FILE" ]; then
+            if grep -q "Result.*SUCCESS" "$REPORT_FILE"; then
+              WORKED_BRANCH=$(grep -E '^\s*-\s*(Pushed branch|Branch):' "$REPORT_FILE" | head -n 1 | sed -E 's/.*`([^`]+)`.*/\1/')
               if [ -n "$WORKED_BRANCH" ] && [[ "$WORKED_BRANCH" =~ (feat|fix)/ ]]; then
                 echo "Verifying PR existence for branch: $WORKED_BRANCH"
                 PR_COUNT=$(gh pr list --head "$WORKED_BRANCH" --state all --json number --jq 'length' 2>/dev/null || echo "0")
@@ -212,33 +247,58 @@ jobs:
             fi
           fi
 
-      - name: Commit and push run log directly to main
+      - name: Reconcile Routine Run Issue
         if: always()
         env:
           GH_TOKEN: ${{ secrets.GH_PAT || github.token }}
+          ISSUE_NUMBER: ${{ steps.run-issue.outputs.issue_number }}
+          JOB_STATUS: ${{ job.status }}
+          EVENT_NAME: ${{ github.event_name }}
+          RUN_ID: ${{ github.run_id }}
+          SERVER_URL: ${{ github.server_url }}
+          REPOSITORY: ${{ github.repository }}
         run: |
-          LATEST_LOG=$(ls -t .github/prompts/logs/autowork/*.md 2>/dev/null | head -n 1)
-          if [ -n "$LATEST_LOG" ] && [ -f "$LATEST_LOG" ]; then
-            TMP_LOG_FILE=$(mktemp)
-            cp "$LATEST_LOG" "$TMP_LOG_FILE"
-            LOG_REL_PATH="$LATEST_LOG"
-            LOG_NAME=$(basename "$LATEST_LOG" .md)
-
-            git fetch origin main:main || git fetch origin main || true
-            git checkout main || git checkout -B main origin/main || true
-
-            mkdir -p "$(dirname "$LOG_REL_PATH")"
-            cp "$TMP_LOG_FILE" "$LOG_REL_PATH"
-            rm -f "$TMP_LOG_FILE"
-
-            git add "$LOG_REL_PATH"
-            if ! git diff --cached --quiet; then
-              git commit -m "docs(log): record autowork run ${LOG_NAME} [skip ci]" || true
-              if [ -n "$GH_TOKEN" ]; then
-                git push "https://x-access-token:${GH_TOKEN}@github.com/${GITHUB_REPOSITORY}.git" main || git push origin main || true
-              else
-                git push origin main || true
-              fi
-            fi
+          if [ -z "$ISSUE_NUMBER" ]; then
+            echo "No routine issue to reconcile."
+            exit 0
+          fi
+
+          REPORT_FILE=".jonah-fleet/run-report.md"
+
+          if [ -f "$REPORT_FILE" ]; then
+            BODY_CONTENT=$(cat "$REPORT_FILE")
+          else
+            BODY_CONTENT="### Autonomous Routine Execution Completed (${JOB_STATUS})
+          - **Routine**: \`autowork\`
+          - **Run ID**: [\`${RUN_ID}\`](${SERVER_URL}/${REPOSITORY}/actions/runs/${RUN_ID})
+          - **Trigger**: \`${EVENT_NAME}\`"
+          fi
+
+          FINAL_BODY="${BODY_CONTENT}
+
+          ---
+          _Generated by [Antigravity](${SERVER_URL}/${REPOSITORY}/actions/runs/${RUN_ID})_"
+
+          TEMP_BODY=$(mktemp)
+          echo "$FINAL_BODY" > "$TEMP_BODY"
+          gh issue edit "$ISSUE_NUMBER" --body-file "$TEMP_BODY"
+          rm -f "$TEMP_BODY"
+
+          if [ "$JOB_STATUS" = "success" ]; then
+            gh issue edit "$ISSUE_NUMBER" --add-label "status:success" --remove-label "status:running"
+            gh issue close "$ISSUE_NUMBER" --reason completed
+            echo "✓ Routine run issue #$ISSUE_NUMBER closed as completed."
+          else
+            INTERRUPTION_BODY="### ❌ Milestone: Run Interrupted / Failed
+- **Routine**: \`autowork\`
+- **Status**: Workflow job failed or timed out (\`${JOB_STATUS}\`)
+- **Step**: Actions execution halted before normal completion
+- **Action Log**: [View GitHub Actions Run](${SERVER_URL}/${REPOSITORY}/actions/runs/${RUN_ID})
+
+---
+_Generated by [Antigravity](${SERVER_URL}/${REPOSITORY}/actions/runs/${RUN_ID})_"
+            gh issue comment "$ISSUE_NUMBER" --body "$INTERRUPTION_BODY" || true
+            gh issue edit "$ISSUE_NUMBER" --add-label "status:failure,needs-attention" --remove-label "status:running"
+            echo "⚠️ Routine run issue #$ISSUE_NUMBER left open for triage (status: $JOB_STATUS)."
           fi
 

package/templates/workflows/dependency-check-cron.yml

@@ -25,6 +25,7 @@ jobs:
         uses: actions/checkout@v4
         with:
           fetch-depth: 0
+          persist-credentials: false
 
       - name: Setup Node.js
         uses: actions/setup-node@v4
@@ -32,10 +33,13 @@ jobs:
           node-version: 22
 
       - name: Configure Git author identity
+        env:
+          GH_TOKEN: ${{ secrets.GH_PAT || github.token }}
         run: |
           git config --global user.name "github-actions[bot]"
           git config --global user.email "github-actions[bot]@users.noreply.github.com"
           git config --global --add safe.directory "$GITHUB_WORKSPACE"
+          gh auth setup-git
 
       - name: Cache Antigravity CLI
         id: cache-agy
@@ -69,7 +73,7 @@ jobs:
         id: routine-config
         run: |
           ROUTINE="dependency-update-security-check"
-          DEFAULT_MODEL="gemini-3.7-flash"
+          DEFAULT_MODEL="gemini-3.8-flash-medium"
           DEFAULT_TIMEOUT="25"
 
           MODEL="$DEFAULT_MODEL"
@@ -104,6 +108,30 @@ jobs:
           echo "print_timeout=${TIMEOUT}m" >> "$GITHUB_OUTPUT"
           echo "Resolved routine configuration: model=$MODEL, timeout=${TIMEOUT}m"
 
+      - name: Initialize Routine Run Issue
+        id: run-issue
+        env:
+          GH_TOKEN: ${{ secrets.GH_PAT || github.token }}
+          EVENT_NAME: ${{ github.event_name }}
+          RUN_ID: ${{ github.run_id }}
+          SERVER_URL: ${{ github.server_url }}
+          REPOSITORY: ${{ github.repository }}
+        run: |
+          TIMESTAMP=$(date -u +"%Y-%m-%dT%H-%M-%SZ")
+          TITLE="[dependency-check] run ${TIMESTAMP}"
+          BODY="### Autonomous Routine Execution in Progress
+          - **Routine**: \`dependency-update-security-check\`
+          - **Timestamp**: \`${TIMESTAMP}\`
+          - **Trigger**: \`${EVENT_NAME}\`
+          - **Run ID**: [\`${RUN_ID}\`](${SERVER_URL}/${REPOSITORY}/actions/runs/${RUN_ID})
+
+          ---
+          _Generated by [Antigravity](${SERVER_URL}/${REPOSITORY}/actions/runs/${RUN_ID})_"
+          ISSUE_URL=$(gh issue create --title "$TITLE" --body "$BODY" --label "routine-log,routine:dependency-check,status:running,runner:github-actions")
+          ISSUE_NUMBER=$(echo "$ISSUE_URL" | grep -oE '[0-9]+$')
+          echo "issue_number=$ISSUE_NUMBER" >> "$GITHUB_OUTPUT"
+          echo "ROUTINE_ISSUE_NUMBER=$ISSUE_NUMBER" >> "$GITHUB_ENV"
+
       - name: Run Dependency Update Check
         timeout-minutes: 25
         env:
@@ -111,6 +139,9 @@ jobs:
           GOOGLE_API_KEY: ${{ secrets.GEMINI_API_KEY }}
           ANTIGRAVITY_API_KEY: ${{ secrets.GEMINI_API_KEY }}
           GH_TOKEN: ${{ secrets.GH_PAT || github.token }}
+          ROUTINE_ISSUE_NUMBER: ${{ steps.run-issue.outputs.issue_number }}
+          MODEL: ${{ steps.routine-config.outputs.model || 'gemini-3.8-flash-medium' }}
+          PRINT_TIMEOUT: ${{ steps.routine-config.outputs.print_timeout || '25m' }}
           GITHUB_SERVER_URL: ${{ github.server_url }}
           GITHUB_REPOSITORY: ${{ github.repository }}
           GITHUB_RUN_ID: ${{ github.run_id }}
@@ -118,7 +149,62 @@ jobs:
           PROMPT="You are the Dependency Update & Security Check routine. Read and follow .github/prompts/dependency-update-security-check.md exactly. Check dependencies for updates and vulnerabilities, and create or update tracking issues."
 
           agy -p "$PROMPT" \
-            --model "${{ steps.routine-config.outputs.model || 'gemini-3.7-flash' }}" \
+            --model "$MODEL" \
             --output-format text \
-            --print-timeout "${{ steps.routine-config.outputs.print_timeout || '25m' }}" \
+            --print-timeout "$PRINT_TIMEOUT" \
             --dangerously-skip-permissions
+
+      - name: Reconcile Routine Run Issue
+        if: always()
+        env:
+          GH_TOKEN: ${{ secrets.GH_PAT || github.token }}
+          ISSUE_NUMBER: ${{ steps.run-issue.outputs.issue_number }}
+          JOB_STATUS: ${{ job.status }}
+          EVENT_NAME: ${{ github.event_name }}
+          RUN_ID: ${{ github.run_id }}
+          SERVER_URL: ${{ github.server_url }}
+          REPOSITORY: ${{ github.repository }}
+        run: |
+          if [ -z "$ISSUE_NUMBER" ]; then
+            echo "No routine issue to reconcile."
+            exit 0
+          fi
+
+          REPORT_FILE=".jonah-fleet/run-report.md"
+
+          if [ -f "$REPORT_FILE" ]; then
+            BODY_CONTENT=$(cat "$REPORT_FILE")
+          else
+            BODY_CONTENT="### Autonomous Routine Execution Completed (${JOB_STATUS})
+          - **Routine**: \`dependency-update-security-check\`
+          - **Run ID**: [\`${RUN_ID}\`](${SERVER_URL}/${REPOSITORY}/actions/runs/${RUN_ID})
+          - **Trigger**: \`${EVENT_NAME}\`"
+          fi
+
+          FINAL_BODY="${BODY_CONTENT}
+
+          ---
+          _Generated by [Antigravity](${SERVER_URL}/${REPOSITORY}/actions/runs/${RUN_ID})_"
+
+          TEMP_BODY=$(mktemp)
+          echo "$FINAL_BODY" > "$TEMP_BODY"
+          gh issue edit "$ISSUE_NUMBER" --body-file "$TEMP_BODY"
+          rm -f "$TEMP_BODY"
+
+          if [ "$JOB_STATUS" = "success" ]; then
+            gh issue edit "$ISSUE_NUMBER" --add-label "status:success" --remove-label "status:running"
+            gh issue close "$ISSUE_NUMBER" --reason completed
+            echo "✓ Routine run issue #$ISSUE_NUMBER closed as completed."
+          else
+            INTERRUPTION_BODY="### ❌ Milestone: Run Interrupted / Failed
+- **Routine**: \`dependency-check\`
+- **Status**: Workflow job failed or timed out (\`${JOB_STATUS}\`)
+- **Step**: Actions execution halted before normal completion
+- **Action Log**: [View GitHub Actions Run](${SERVER_URL}/${REPOSITORY}/actions/runs/${RUN_ID})
+
+---
+_Generated by [Antigravity](${SERVER_URL}/${REPOSITORY}/actions/runs/${RUN_ID})_"
+            gh issue comment "$ISSUE_NUMBER" --body "$INTERRUPTION_BODY" || true
+            gh issue edit "$ISSUE_NUMBER" --add-label "status:failure,needs-attention" --remove-label "status:running"
+            echo "⚠️ Routine run issue #$ISSUE_NUMBER left open for triage (status: $JOB_STATUS)."
+          fi

package/templates/workflows/design-review-cron.yml

@@ -0,0 +1,221 @@
+name: Design Review Scheduled Cron (agy)
+
+# Scheduled execution of the Design Review routine using Antigravity CLI on Gemini 3.7 Flash.
+# Dispatches bi-weekly ahead of Product Planning, dynamically discovers player-facing surfaces,
+# audits against DESIGN_SYSTEM.md and visual guardrails, files Autowork token cleanups,
+# and stages pruning & redesign recommendations for Product Planning.
+
+on:
+  schedule:
+    # Bi-weekly on the 1st and 15th of the month at 06:00 UTC (08:00 Paris CEST)
+    # 3 hours prior to Product Planning cron at 09:00 UTC
+    - cron: '0 6 1,15 * *'
+  workflow_dispatch:
+    inputs:
+      target_surface:
+        description: 'Target surface or route to review (optional, e.g. "pronostics", "groupes", "home"; leaves empty for dynamic rotation)'
+        required: false
+        type: string
+
+# Single-flight: do not run overlapping design review runs.
+concurrency:
+  group: design-review-agent
+  cancel-in-progress: false
+
+jobs:
+  run-design-review:
+    runs-on: ubuntu-latest
+    timeout-minutes: 60
+    permissions:
+      contents: write
+      issues: write
+      pull-requests: write
+      statuses: write
+      actions: read
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+          persist-credentials: false
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: 22
+
+      - name: Configure Git author identity
+        env:
+          GH_TOKEN: ${{ secrets.GH_PAT || github.token }}
+        run: |
+          git config --global user.name "github-actions[bot]"
+          git config --global user.email "github-actions[bot]@users.noreply.github.com"
+          git config --global --add safe.directory "$GITHUB_WORKSPACE"
+          gh auth setup-git
+
+      - name: Cache Antigravity CLI
+        id: cache-agy
+        uses: actions/cache@v4
+        with:
+          path: ~/.local/bin/agy
+          key: agy-cli-linux-amd64-v1
+
+      - name: Install Antigravity CLI
+        if: steps.cache-agy.outputs.cache-hit != 'true'
+        run: |
+          curl -fsSL https://antigravity.google/cli/install.sh | bash
+
+      - name: Add Antigravity CLI to PATH
+        run: echo "$HOME/.local/bin" >> $GITHUB_PATH
+
+      - name: Write Antigravity OAuth Token
+        env:
+          ANTIGRAVITY_OAUTH_TOKEN: ${{ secrets.ANTIGRAVITY_OAUTH_TOKEN || secrets.GEMINI_API_KEY }}
+        run: |
+          if [ -z "$ANTIGRAVITY_OAUTH_TOKEN" ]; then
+            echo "::error::Neither ANTIGRAVITY_OAUTH_TOKEN nor GEMINI_API_KEY secret is set; cannot authenticate Antigravity CLI." >&2
+            exit 1
+          fi
+          mkdir -p "$HOME/.gemini/antigravity-cli"
+          chmod 700 "$HOME/.gemini/antigravity-cli"
+          printf '%s' "$ANTIGRAVITY_OAUTH_TOKEN" > "$HOME/.gemini/antigravity-cli/antigravity-oauth-token"
+          chmod 600 "$HOME/.gemini/antigravity-cli/antigravity-oauth-token"
+
+      - name: Fast preflight credential validation (SwarmClaw Pattern #2)
+        run: |
+          if [ ! -s "$HOME/.gemini/antigravity-cli/antigravity-oauth-token" ]; then
+            echo "::error::Preflight credential check failed: Antigravity OAuth token file is missing or empty." >&2
+            exit 1
+          fi
+          echo "✓ Preflight credential validation passed."
+
+      - name: Discover and compile domain skills (SwarmClaw Pattern #4)
+        id: skills
+        run: |
+          SKILLS_LIST="Read and follow .agents/skills/design-system/SKILL.md, .agents/skills/design-critique/SKILL.md, and .agents/skills/run/SKILL.md."
+          echo "skills_prompt=$SKILLS_LIST" >> "$GITHUB_OUTPUT"
+
+      - name: Initialize Routine Run Issue
+        id: run-issue
+        env:
+          GH_TOKEN: ${{ secrets.GH_PAT || github.token }}
+          EVENT_NAME: ${{ github.event_name }}
+          RUN_ID: ${{ github.run_id }}
+          SERVER_URL: ${{ github.server_url }}
+          REPOSITORY: ${{ github.repository }}
+        run: |
+          TIMESTAMP=$(date -u +"%Y-%m-%dT%H-%M-%SZ")
+          TITLE="[design-review] run ${TIMESTAMP}"
+          BODY="### Autonomous Routine Execution in Progress
+          - **Routine**: \`design-review\`
+          - **Timestamp**: \`${TIMESTAMP}\`
+          - **Trigger**: \`${EVENT_NAME}\`
+          - **Run ID**: [\`${RUN_ID}\`](${SERVER_URL}/${REPOSITORY}/actions/runs/${RUN_ID})
+
+          ---
+          _Generated by [Antigravity](${SERVER_URL}/${REPOSITORY}/actions/runs/${RUN_ID})_"
+          ISSUE_URL=$(gh issue create --title "$TITLE" --body "$BODY" --label "routine-log,routine:design-review,status:running,runner:github-actions")
+          ISSUE_NUMBER=$(echo "$ISSUE_URL" | grep -oE '[0-9]+$')
+          echo "issue_number=$ISSUE_NUMBER" >> "$GITHUB_OUTPUT"
+          echo "ROUTINE_ISSUE_NUMBER=$ISSUE_NUMBER" >> "$GITHUB_ENV"
+
+      - name: Run Design Review
+        timeout-minutes: 50
+        env:
+          GEMINI_API_KEY: ${{ secrets.GEMINI_API_KEY }}
+          GOOGLE_API_KEY: ${{ secrets.GEMINI_API_KEY }}
+          ANTIGRAVITY_API_KEY: ${{ secrets.GEMINI_API_KEY }}
+          GH_TOKEN: ${{ secrets.GH_PAT || github.token }}
+          ROUTINE_ISSUE_NUMBER: ${{ steps.run-issue.outputs.issue_number }}
+          VERCEL_TOKEN: ${{ secrets.VERCEL_TOKEN }}
+          POSTHOG_API_KEY: ${{ secrets.POSTHOG_API_KEY }}
+          TARGET_SURFACE: ${{ inputs.target_surface }}
+          SKILLS_PROMPT: ${{ steps.skills.outputs.skills_prompt }}
+          GITHUB_SERVER_URL: ${{ github.server_url }}
+          GITHUB_REPOSITORY: ${{ github.repository }}
+          GITHUB_RUN_ID: ${{ github.run_id }}
+        run: |
+          PROMPT="You are the Design Review routine for this repository. Read and follow the instructions in .github/prompts/design-review.md exactly. ${SKILLS_PROMPT}"
+
+          agy -p "$PROMPT" \
+            --model gemini-3.8-flash-high \
+            --output-format text \
+            --print-timeout 50m \
+            --dangerously-skip-permissions
+
+      - name: Emit run summary
+        if: always()
+        run: |
+          REPORT_FILE=".jonah-fleet/run-report.md"
+          if [ -f "$REPORT_FILE" ] && [ -n "$GITHUB_STEP_SUMMARY" ]; then
+            cat "$REPORT_FILE" >> "$GITHUB_STEP_SUMMARY"
+          fi
+
+      - name: Emit Fleet Telemetry (Opt-in)
+        if: always()
+        env:
+          GH_TOKEN: ${{ secrets.GH_PAT || github.token }}
+          TELEMETRY_ENDPOINT: ${{ secrets.JONAH_FLEET_TELEMETRY_ENDPOINT }}
+          GITHUB_REPOSITORY: ${{ github.repository }}
+          GITHUB_RUN_ID: ${{ github.run_id }}
+          GITHUB_RUN_NUMBER: ${{ github.run_number }}
+        run: |
+          REPORT_FILE=".jonah-fleet/run-report.md"
+          if [ -f "$REPORT_FILE" ]; then
+            npx --yes jonah-fleet telemetry --emit --log "$REPORT_FILE" --endpoint "$TELEMETRY_ENDPOINT" || true
+          fi
+
+      - name: Reconcile Routine Run Issue
+        if: always()
+        env:
+          GH_TOKEN: ${{ secrets.GH_PAT || github.token }}
+          ISSUE_NUMBER: ${{ steps.run-issue.outputs.issue_number }}
+          JOB_STATUS: ${{ job.status }}
+          EVENT_NAME: ${{ github.event_name }}
+          RUN_ID: ${{ github.run_id }}
+          SERVER_URL: ${{ github.server_url }}
+          REPOSITORY: ${{ github.repository }}
+        run: |
+          if [ -z "$ISSUE_NUMBER" ]; then
+            echo "No routine issue to reconcile."
+            exit 0
+          fi
+
+          REPORT_FILE=".jonah-fleet/run-report.md"
+
+          if [ -f "$REPORT_FILE" ]; then
+            BODY_CONTENT=$(cat "$REPORT_FILE")
+          else
+            BODY_CONTENT="### Autonomous Routine Execution Completed (${JOB_STATUS})
+          - **Routine**: \`design-review\`
+          - **Run ID**: [\`${RUN_ID}\`](${SERVER_URL}/${REPOSITORY}/actions/runs/${RUN_ID})
+          - **Trigger**: \`${EVENT_NAME}\`"
+          fi
+
+          FINAL_BODY="${BODY_CONTENT}
+
+          ---
+          _Generated by [Antigravity](${SERVER_URL}/${REPOSITORY}/actions/runs/${RUN_ID})_"
+
+          TEMP_BODY=$(mktemp)
+          echo "$FINAL_BODY" > "$TEMP_BODY"
+          gh issue edit "$ISSUE_NUMBER" --body-file "$TEMP_BODY"
+          rm -f "$TEMP_BODY"
+
+          if [ "$JOB_STATUS" = "success" ]; then
+            gh issue edit "$ISSUE_NUMBER" --add-label "status:success" --remove-label "status:running"
+            gh issue close "$ISSUE_NUMBER" --reason completed
+            echo "✓ Routine run issue #$ISSUE_NUMBER closed as completed."
+          else
+            INTERRUPTION_BODY="### ❌ Milestone: Run Interrupted / Failed
+- **Routine**: \`design-review\`
+- **Status**: Workflow job failed or timed out (\`${JOB_STATUS}\`)
+- **Step**: Actions execution halted before normal completion
+- **Action Log**: [View GitHub Actions Run](${SERVER_URL}/${REPOSITORY}/actions/runs/${RUN_ID})
+
+---
+_Generated by [Antigravity](${SERVER_URL}/${REPOSITORY}/actions/runs/${RUN_ID})_"
+            gh issue comment "$ISSUE_NUMBER" --body "$INTERRUPTION_BODY" || true
+            gh issue edit "$ISSUE_NUMBER" --add-label "status:failure,needs-attention" --remove-label "status:running"
+            echo "⚠️ Routine run issue #$ISSUE_NUMBER left open for triage (status: $JOB_STATUS)."
+          fi