p-dev-harness 0.3.0 → 0.3.1

package/workspace-snapshot/files/tests/fixtures/workflows/harness-auto-runner-with-production-sync.yml

@@ -0,0 +1,561 @@
+name: Harness Auto Runner
+
+on:
+  repository_dispatch:
+    types: [linear_issue_status_changed, production_promoted]
+  workflow_dispatch:
+    inputs:
+      issue:
+        description: "Linear issue key, e.g. WES-13 (harness run)"
+        required: false
+      phase:
+        description: "Harness phase (auto, planning, implementation, handoff, revision, merge)"
+        required: false
+        default: auto
+      force:
+        description: "Force rerun for supported recovery paths"
+        required: false
+        default: "false"
+      sync_repo:
+        description: "Repo config id for production sync, e.g. target-app (runs sync-production instead of harness run)"
+        required: false
+      sync_dry_run:
+        description: "Production sync dry-run for workflow_dispatch (inspect Linear without writes). Default true when validating sync_repo manually."
+        required: false
+        default: "true"
+
+permissions:
+  contents: read
+
+jobs:
+  gate:
+    if: >-
+      (github.event_name == 'workflow_dispatch' && github.event.inputs.sync_repo == '') ||
+      (github.event_name == 'repository_dispatch' && github.event.action == 'linear_issue_status_changed')
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    outputs:
+      issue_key: ${{ steps.inputs.outputs.issue_key }}
+      phase: ${{ steps.route.outputs.phase }}
+      repo_config_id: ${{ steps.route.outputs.repo_config_id }}
+      base_branch: ${{ steps.route.outputs.base_branch }}
+      target_repo: ${{ steps.route.outputs.target_repo }}
+      linear_status: ${{ steps.route.outputs.linear_status }}
+      merge_concurrency_group: ${{ steps.route.outputs.merge_concurrency_group }}
+      should_run: ${{ steps.route.outputs.should_run }}
+      trigger: ${{ steps.inputs.outputs.trigger }}
+      linear_delivery_id: ${{ steps.inputs.outputs.linear_delivery_id }}
+      input_phase: ${{ steps.inputs.outputs.phase }}
+      force: ${{ steps.inputs.outputs.force }}
+
+    env:
+      LINEAR_API_KEY: ${{ secrets.LINEAR_API_KEY }}
+      GITHUB_TOKEN: ${{ secrets.HARNESS_GITHUB_TOKEN }}
+      HARNESS_CONFIG_JSON_B64: ${{ secrets.HARNESS_CONFIG_JSON_B64 }}
+
+    steps:
+      - name: Resolve inputs
+        id: inputs
+        env:
+          EVENT_NAME: ${{ github.event_name }}
+          INPUT_ISSUE: ${{ github.event.inputs.issue }}
+          INPUT_PHASE: ${{ github.event.inputs.phase || 'auto' }}
+          INPUT_FORCE: ${{ github.event.inputs.force || 'false' }}
+          PAYLOAD_ISSUE_KEY: ${{ github.event.client_payload.issueKey }}
+          PAYLOAD_DELIVERY_ID: ${{ github.event.client_payload.linearDeliveryId || '' }}
+        run: |
+          if [ "$EVENT_NAME" = "workflow_dispatch" ]; then
+            echo "issue_key=$INPUT_ISSUE" >> "$GITHUB_OUTPUT"
+            echo "phase=$INPUT_PHASE" >> "$GITHUB_OUTPUT"
+            echo "force=$INPUT_FORCE" >> "$GITHUB_OUTPUT"
+            echo "trigger=workflow_dispatch" >> "$GITHUB_OUTPUT"
+            echo "linear_delivery_id=" >> "$GITHUB_OUTPUT"
+          else
+            echo "issue_key=$PAYLOAD_ISSUE_KEY" >> "$GITHUB_OUTPUT"
+            echo "phase=auto" >> "$GITHUB_OUTPUT"
+            echo "force=false" >> "$GITHUB_OUTPUT"
+            echo "trigger=repository_dispatch" >> "$GITHUB_OUTPUT"
+            echo "linear_delivery_id=$PAYLOAD_DELIVERY_ID" >> "$GITHUB_OUTPUT"
+          fi
+
+      - name: Validate gate inputs
+        env:
+          ISSUE_KEY: ${{ steps.inputs.outputs.issue_key }}
+          INPUT_PHASE: ${{ steps.inputs.outputs.phase }}
+          INPUT_FORCE: ${{ steps.inputs.outputs.force }}
+        run: |
+          if [ -z "$ISSUE_KEY" ]; then
+            echo "Missing issue key in workflow inputs."
+            exit 1
+          fi
+          if ! [[ "$ISSUE_KEY" =~ ^[A-Z]+-[0-9]+$ ]]; then
+            echo "Invalid issue key format."
+            exit 1
+          fi
+          case "$INPUT_PHASE" in
+            auto|planning|implementation|handoff|revision|merge) ;;
+            *)
+              echo "Invalid phase: $INPUT_PHASE"
+              exit 1
+              ;;
+          esac
+          case "$INPUT_FORCE" in
+            true|false) ;;
+            *)
+              echo "Invalid force flag: $INPUT_FORCE"
+              exit 1
+              ;;
+          esac
+
+      - name: Checkout harness repo
+        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5
+
+      - name: Setup Node.js
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020
+        with:
+          node-version: "22"
+          cache: npm
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Build
+        run: npm run build
+
+      - name: Resolve route
+        id: route
+        env:
+          ISSUE_KEY: ${{ steps.inputs.outputs.issue_key }}
+          INPUT_PHASE: ${{ steps.inputs.outputs.phase }}
+        run: |
+          set +e
+          npm run harness:resolve-route -- \
+            --issue "$ISSUE_KEY" \
+            --phase "$INPUT_PHASE" \
+            --json \
+            --github-output
+          EXIT_CODE=$?
+          echo "exit_code=$EXIT_CODE" >> "$GITHUB_OUTPUT"
+          if [ "$EXIT_CODE" -ne 0 ]; then
+            exit "$EXIT_CODE"
+          fi
+
+      - name: Write gate summary
+        if: always()
+        env:
+          ISSUE_KEY: ${{ steps.inputs.outputs.issue_key }}
+          INPUT_PHASE: ${{ steps.inputs.outputs.phase }}
+          RESOLVED_PHASE: ${{ steps.route.outputs.phase }}
+          SHOULD_RUN: ${{ steps.route.outputs.should_run }}
+          REPO_CONFIG_ID: ${{ steps.route.outputs.repo_config_id }}
+          BASE_BRANCH: ${{ steps.route.outputs.base_branch }}
+          MERGE_GROUP: ${{ steps.route.outputs.merge_concurrency_group }}
+        run: |
+          {
+            echo "## Harness Gate"
+            echo ""
+            echo "- Issue: \`$ISSUE_KEY\`"
+            echo "- Input phase: \`$INPUT_PHASE\`"
+            echo "- Resolved phase: \`$RESOLVED_PHASE\`"
+            echo "- Should run: \`$SHOULD_RUN\`"
+            echo "- Repo: \`$REPO_CONFIG_ID\`"
+            echo "- Base branch: \`$BASE_BRANCH\`"
+            echo "- Merge concurrency group: \`$MERGE_GROUP\`"
+          } >> "$GITHUB_STEP_SUMMARY"
+
+  run-harness:
+    needs: gate
+    if: >-
+      needs.gate.result == 'success' &&
+      needs.gate.outputs.should_run == 'true' &&
+      needs.gate.outputs.phase != 'merge'
+    runs-on: ubuntu-latest
+    timeout-minutes: 120
+    concurrency:
+      group: harness-${{ needs.gate.outputs.issue_key }}
+      cancel-in-progress: false
+
+    env:
+      LINEAR_API_KEY: ${{ secrets.LINEAR_API_KEY }}
+      CURSOR_API_KEY: ${{ secrets.CURSOR_API_KEY }}
+      GITHUB_TOKEN: ${{ secrets.HARNESS_GITHUB_TOKEN }}
+      HARNESS_CONFIG_JSON_B64: ${{ secrets.HARNESS_CONFIG_JSON_B64 }}
+
+    steps:
+      - name: Checkout harness repo
+        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5
+
+      - name: Setup Node.js
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020
+        with:
+          node-version: "22"
+          cache: npm
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Build
+        run: npm run build
+
+      - name: Doctor
+        run: npm run harness:doctor
+
+      - name: Write dispatch metadata
+        env:
+          GITHUB_RUN_ID: ${{ github.run_id }}
+          LINEAR_DELIVERY_ID: ${{ needs.gate.outputs.linear_delivery_id }}
+          TRIGGER: ${{ needs.gate.outputs.trigger }}
+          ISSUE_KEY: ${{ needs.gate.outputs.issue_key }}
+          PHASE: ${{ needs.gate.outputs.phase }}
+          REPO_CONFIG_ID: ${{ needs.gate.outputs.repo_config_id }}
+          BASE_BRANCH: ${{ needs.gate.outputs.base_branch }}
+        run: |
+          RECEIVED_AT="$(date -u +%Y-%m-%dT%H:%M:%SZ)"
+          export RECEIVED_AT
+          npx tsx src/workflow/write-dispatch-metadata.ts
+
+      - name: Run harness
+        id: harness
+        env:
+          ISSUE_KEY: ${{ needs.gate.outputs.issue_key }}
+          INPUT_PHASE: ${{ needs.gate.outputs.input_phase }}
+          RESOLVED_PHASE: ${{ needs.gate.outputs.phase }}
+          FORCE_FLAG_INPUT: ${{ needs.gate.outputs.force }}
+        run: |
+          set +e
+          PHASE="$INPUT_PHASE"
+          if [ "$PHASE" = "auto" ]; then
+            PHASE="$RESOLVED_PHASE"
+          fi
+          FORCE_FLAG=""
+          if [ "$FORCE_FLAG_INPUT" = "true" ]; then
+            FORCE_FLAG="--force"
+          fi
+          npm run harness:run -- --issue "$ISSUE_KEY" --phase "$PHASE" $FORCE_FLAG --json 2>&1 \
+            | tee harness-raw-output.txt
+          EXIT_CODE=${PIPESTATUS[0]}
+          npm run harness:redact-output < harness-raw-output.txt > harness-run-output.json
+          rm -f harness-raw-output.txt
+          echo "Redacted harness output written to harness-run-output.json"
+          echo "exit_code=$EXIT_CODE" >> "$GITHUB_OUTPUT"
+          exit $EXIT_CODE
+
+      - name: Write step summary
+        if: always()
+        env:
+          ISSUE_KEY: ${{ needs.gate.outputs.issue_key }}
+          PHASE: ${{ needs.gate.outputs.phase }}
+          TRIGGER: ${{ needs.gate.outputs.trigger }}
+          LINEAR_DELIVERY_ID: ${{ needs.gate.outputs.linear_delivery_id }}
+          EXIT_CODE: ${{ steps.harness.outputs.exit_code }}
+        run: |
+          {
+            echo "## Harness Auto Runner"
+            echo ""
+            echo "- Issue: \`$ISSUE_KEY\`"
+            echo "- Phase: \`$PHASE\`"
+            echo "- Trigger: \`$TRIGGER\`"
+            echo "- Linear delivery ID: \`$LINEAR_DELIVERY_ID\`"
+            echo "- Harness exit code: \`$EXIT_CODE\`"
+            echo ""
+            if [ -f harness-run-output.json ]; then
+              echo "### Harness manifest summary"
+              npx tsx src/workflow/summarize-manifest.ts harness-run-output.json
+            fi
+          } >> "$GITHUB_STEP_SUMMARY"
+
+      - name: Upload harness artifacts
+        if: always()
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02
+        with:
+          name: harness-run-${{ needs.gate.outputs.issue_key }}-${{ github.run_id }}
+          path: |
+            runs/${{ needs.gate.outputs.issue_key }}/**
+            runs/dispatch-metadata.json
+            harness-run-output.json
+          retention-days: 30
+          if-no-files-found: ignore
+
+  run-merge:
+    needs: gate
+    if: >-
+      needs.gate.result == 'success' &&
+      needs.gate.outputs.should_run == 'true' &&
+      needs.gate.outputs.phase == 'merge'
+    runs-on: ubuntu-latest
+    timeout-minutes: 120
+    concurrency:
+      group: harness-merge-${{ needs.gate.outputs.merge_concurrency_group }}
+      cancel-in-progress: false
+      queue: max
+
+    env:
+      LINEAR_API_KEY: ${{ secrets.LINEAR_API_KEY }}
+      CURSOR_API_KEY: ${{ secrets.CURSOR_API_KEY }}
+      GITHUB_TOKEN: ${{ secrets.HARNESS_GITHUB_TOKEN }}
+      HARNESS_CONFIG_JSON_B64: ${{ secrets.HARNESS_CONFIG_JSON_B64 }}
+
+    steps:
+      - name: Checkout harness repo
+        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5
+
+      - name: Setup Node.js
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020
+        with:
+          node-version: "22"
+          cache: npm
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Build
+        run: npm run build
+
+      - name: Doctor
+        run: npm run harness:doctor -- --profile merge
+
+      - name: Write dispatch metadata
+        env:
+          GITHUB_RUN_ID: ${{ github.run_id }}
+          LINEAR_DELIVERY_ID: ${{ needs.gate.outputs.linear_delivery_id }}
+          TRIGGER: ${{ needs.gate.outputs.trigger }}
+          ISSUE_KEY: ${{ needs.gate.outputs.issue_key }}
+          PHASE: merge
+          REPO_CONFIG_ID: ${{ needs.gate.outputs.repo_config_id }}
+          BASE_BRANCH: ${{ needs.gate.outputs.base_branch }}
+          MERGE_CONCURRENCY_GROUP: ${{ needs.gate.outputs.merge_concurrency_group }}
+        run: |
+          RECEIVED_AT="$(date -u +%Y-%m-%dT%H:%M:%SZ)"
+          export RECEIVED_AT
+          npx tsx src/workflow/write-dispatch-metadata.ts
+
+      - name: Run merge
+        id: merge
+        env:
+          ISSUE_KEY: ${{ needs.gate.outputs.issue_key }}
+          FORCE_FLAG_INPUT: ${{ needs.gate.outputs.force }}
+        run: |
+          set +e
+          FORCE_FLAG=""
+          if [ "$FORCE_FLAG_INPUT" = "true" ]; then
+            FORCE_FLAG="--force"
+          fi
+          npm run harness:run -- --issue "$ISSUE_KEY" --phase merge $FORCE_FLAG --json 2>&1 \
+            | tee harness-raw-output.txt
+          EXIT_CODE=${PIPESTATUS[0]}
+          npm run harness:redact-output < harness-raw-output.txt > harness-run-output.json
+          rm -f harness-raw-output.txt
+          echo "Redacted harness output written to harness-run-output.json"
+          echo "exit_code=$EXIT_CODE" >> "$GITHUB_OUTPUT"
+          exit $EXIT_CODE
+
+      - name: Write step summary
+        if: always()
+        env:
+          ISSUE_KEY: ${{ needs.gate.outputs.issue_key }}
+          MERGE_GROUP: ${{ needs.gate.outputs.merge_concurrency_group }}
+          TRIGGER: ${{ needs.gate.outputs.trigger }}
+          EXIT_CODE: ${{ steps.merge.outputs.exit_code }}
+        run: |
+          {
+            echo "## Harness Merge Runner"
+            echo ""
+            echo "- Issue: \`$ISSUE_KEY\`"
+            echo "- Merge concurrency group: \`$MERGE_GROUP\`"
+            echo "- Trigger: \`$TRIGGER\`"
+            echo "- Harness exit code: \`$EXIT_CODE\`"
+            echo ""
+            if [ -f harness-run-output.json ]; then
+              echo "### Harness manifest summary"
+              npx tsx src/workflow/summarize-manifest.ts harness-run-output.json
+            fi
+          } >> "$GITHUB_STEP_SUMMARY"
+
+      - name: Upload harness artifacts
+        if: always()
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02
+        with:
+          name: harness-merge-${{ needs.gate.outputs.issue_key }}-${{ github.run_id }}
+          path: |
+            runs/${{ needs.gate.outputs.issue_key }}/**
+            runs/dispatch-metadata.json
+            harness-run-output.json
+          retention-days: 30
+          if-no-files-found: ignore
+
+  sync-production:
+    if: >-
+      (github.event_name == 'repository_dispatch' && github.event.action == 'production_promoted') ||
+      (github.event_name == 'workflow_dispatch' && github.event.inputs.sync_repo != '')
+    runs-on: ubuntu-latest
+    timeout-minutes: 30
+    concurrency:
+      group: harness-production-sync-${{ github.event.client_payload.repo || github.event.inputs.sync_repo }}
+      cancel-in-progress: true
+
+    env:
+      LINEAR_API_KEY: ${{ secrets.LINEAR_API_KEY }}
+      GITHUB_TOKEN: ${{ secrets.HARNESS_GITHUB_TOKEN }}
+      HARNESS_CONFIG_JSON_B64: ${{ secrets.HARNESS_CONFIG_JSON_B64 }}
+
+    steps:
+      - name: Resolve sync inputs
+        id: sync
+        env:
+          EVENT_NAME: ${{ github.event_name }}
+          INPUT_SYNC_REPO: ${{ github.event.inputs.sync_repo }}
+          INPUT_SYNC_DRY_RUN: ${{ github.event.inputs.sync_dry_run }}
+          PAYLOAD_REPO: ${{ github.event.client_payload.repo }}
+          PAYLOAD_PRODUCTION_BRANCH: ${{ github.event.client_payload.productionBranch || '' }}
+          PAYLOAD_SOURCE_REPO: ${{ github.event.client_payload.sourceRepo || '' }}
+          PAYLOAD_AFTER: ${{ github.event.client_payload.after || '' }}
+          PAYLOAD_REF: ${{ github.event.client_payload.ref || '' }}
+        run: |
+          if [ "$EVENT_NAME" = "workflow_dispatch" ]; then
+            echo "repo=$INPUT_SYNC_REPO" >> "$GITHUB_OUTPUT"
+            echo "trigger=workflow_dispatch" >> "$GITHUB_OUTPUT"
+            echo "production_branch=" >> "$GITHUB_OUTPUT"
+            echo "source_repo=" >> "$GITHUB_OUTPUT"
+            echo "after=" >> "$GITHUB_OUTPUT"
+            echo "ref=" >> "$GITHUB_OUTPUT"
+            if [ -z "$INPUT_SYNC_DRY_RUN" ]; then
+              echo "dry_run=true" >> "$GITHUB_OUTPUT"
+            else
+              echo "dry_run=$INPUT_SYNC_DRY_RUN" >> "$GITHUB_OUTPUT"
+            fi
+          else
+            echo "repo=$PAYLOAD_REPO" >> "$GITHUB_OUTPUT"
+            echo "trigger=repository_dispatch" >> "$GITHUB_OUTPUT"
+            echo "production_branch=$PAYLOAD_PRODUCTION_BRANCH" >> "$GITHUB_OUTPUT"
+            echo "source_repo=$PAYLOAD_SOURCE_REPO" >> "$GITHUB_OUTPUT"
+            echo "after=$PAYLOAD_AFTER" >> "$GITHUB_OUTPUT"
+            echo "ref=$PAYLOAD_REF" >> "$GITHUB_OUTPUT"
+            echo "dry_run=false" >> "$GITHUB_OUTPUT"
+          fi
+
+      - name: Validate sync repo id
+        env:
+          REPO_ID: ${{ steps.sync.outputs.repo }}
+        run: |
+          if [ -z "$REPO_ID" ]; then
+            echo "Missing repo id in production_promoted payload or sync_repo input."
+            exit 1
+          fi
+          if ! [[ "$REPO_ID" =~ ^[a-z][a-z0-9-]*$ ]]; then
+            echo "Invalid repo id format."
+            exit 1
+          fi
+
+      - name: Validate sync dry run
+        if: github.event_name == 'workflow_dispatch'
+        env:
+          SYNC_DRY_RUN: ${{ steps.sync.outputs.dry_run }}
+        run: |
+          case "$SYNC_DRY_RUN" in
+            true|false) ;;
+            *)
+              echo "Invalid sync_dry_run value. Expected true or false."
+              exit 1
+              ;;
+          esac
+
+      - name: Checkout harness repo
+        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5
+
+      - name: Setup Node.js
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020
+        with:
+          node-version: "22"
+          cache: npm
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Build
+        run: npm run build
+
+      - name: Write dispatch metadata
+        env:
+          GITHUB_RUN_ID: ${{ github.run_id }}
+          TRIGGER: ${{ steps.sync.outputs.trigger }}
+          EVENT_ACTION: ${{ github.event.action }}
+          REPO: ${{ steps.sync.outputs.repo }}
+          PRODUCTION_BRANCH: ${{ steps.sync.outputs.production_branch }}
+          SOURCE_REPO: ${{ steps.sync.outputs.source_repo }}
+          AFTER: ${{ steps.sync.outputs.after }}
+        run: |
+          RECEIVED_AT="$(date -u +%Y-%m-%dT%H:%M:%SZ)"
+          export RECEIVED_AT
+          npx tsx src/workflow/write-dispatch-metadata.ts
+
+      - name: Run production sync
+        id: sync_production
+        env:
+          REPO_ID: ${{ steps.sync.outputs.repo }}
+          SOURCE_REPO: ${{ steps.sync.outputs.source_repo }}
+          PRODUCTION_BRANCH: ${{ steps.sync.outputs.production_branch }}
+          REF: ${{ steps.sync.outputs.ref }}
+          SYNC_DRY_RUN: ${{ steps.sync.outputs.dry_run }}
+        run: |
+          set +e
+          SYNC_ARGS=(--repo "$REPO_ID" --json)
+          if [ -n "$SOURCE_REPO" ]; then
+            SYNC_ARGS+=(--source-repo "$SOURCE_REPO")
+          fi
+          if [ -n "$PRODUCTION_BRANCH" ]; then
+            SYNC_ARGS+=(--production-branch "$PRODUCTION_BRANCH")
+          fi
+          if [ -n "$REF" ]; then
+            SYNC_ARGS+=(--ref "$REF")
+          fi
+          if [ "$SYNC_DRY_RUN" = "true" ]; then
+            SYNC_ARGS+=(--dry-run)
+          fi
+          npm run harness:sync-production -- "${SYNC_ARGS[@]}" 2>&1 \
+            | tee sync-raw-output.txt
+          EXIT_CODE=${PIPESTATUS[0]}
+          npm run harness:redact-output < sync-raw-output.txt > sync-production-output.json
+          rm -f sync-raw-output.txt
+          echo "Redacted sync output written to sync-production-output.json"
+          echo "exit_code=$EXIT_CODE" >> "$GITHUB_OUTPUT"
+          exit $EXIT_CODE
+
+      - name: Write step summary
+        if: always()
+        env:
+          REPO_ID: ${{ steps.sync.outputs.repo }}
+          TRIGGER: ${{ steps.sync.outputs.trigger }}
+          PRODUCTION_BRANCH: ${{ steps.sync.outputs.production_branch }}
+          SOURCE_REPO: ${{ steps.sync.outputs.source_repo }}
+          AFTER: ${{ steps.sync.outputs.after }}
+          EXIT_CODE: ${{ steps.sync_production.outputs.exit_code }}
+          DRY_RUN: ${{ steps.sync.outputs.dry_run }}
+        run: |
+          {
+            echo "## Harness Production Sync"
+            echo ""
+            echo "- Repo: \`$REPO_ID\`"
+            echo "- Trigger: \`$TRIGGER\`"
+            echo "- Dry run: \`$DRY_RUN\`"
+            echo "- Production branch: \`$PRODUCTION_BRANCH\`"
+            echo "- Source repo: \`$SOURCE_REPO\`"
+            echo "- After commit: \`$AFTER\`"
+            echo "- Exit code: \`$EXIT_CODE\`"
+            echo ""
+            if [ -f sync-production-output.json ]; then
+              echo "### Sync output (redacted JSON on disk)"
+              echo "- See workflow artifacts for sync-production-output.json"
+            fi
+          } >> "$GITHUB_STEP_SUMMARY"
+
+      - name: Upload sync artifacts
+        if: always()
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02
+        with:
+          name: harness-sync-${{ steps.sync.outputs.repo }}-${{ github.run_id }}
+          path: |
+            runs/**
+            runs/dispatch-metadata.json
+            sync-production-output.json
+          retention-days: 30
+          if-no-files-found: ignore

package/workspace-snapshot/files/tests/fixtures/workflows/trigger-harness-production-sync.yml

@@ -0,0 +1,31 @@
+name: Trigger harness production sync
+
+on:
+  push:
+    branches: [main]
+
+permissions:
+  contents: read
+
+jobs:
+  dispatch:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Dispatch production_promoted to harness
+        env:
+          HARNESS_DISPATCH_TOKEN: ${{ secrets.HARNESS_DISPATCH_TOKEN }}
+        run: |
+          curl -fsS -X POST \
+            -H "Authorization: Bearer ${HARNESS_DISPATCH_TOKEN}" \
+            -H "Accept: application/vnd.github+json" \
+            -H "X-GitHub-Api-Version: 2022-11-28" \
+            https://api.github.com/repos/weston-uribe/agentic-product-development-harness/dispatches \
+            -d "$(jq -n \
+              --arg repo target-app \
+              --arg branch main \
+              --arg source owner/example-target-app \
+              --arg after "${{ github.sha }}" \
+              --arg ref "${{ github.ref }}" \
+              --arg run_id "${{ github.run_id }}" \
+              --arg received "$(date -u +%Y-%m-%dT%H:%M:%SZ)" \
+              '{event_type:"production_promoted", client_payload:{repo:$repo, productionBranch:$branch, sourceRepo:$source, after:$after, ref:$ref, githubRunId:$run_id, receivedAt:$received}}')"

package/workspace-snapshot/files/tests/github/actions-url.test.ts

@@ -0,0 +1,45 @@
+import { afterEach, beforeEach, describe, expect, it } from "vitest";
+import {
+  formatGitHubActionsRunLink,
+  getGitHubActionsRunUrl,
+} from "../../src/github/actions-url.js";
+
+describe("getGitHubActionsRunUrl", () => {
+  const originalEnv = { ...process.env };
+
+  beforeEach(() => {
+    process.env = { ...originalEnv };
+  });
+
+  afterEach(() => {
+    process.env = originalEnv;
+  });
+
+  it("builds run URL from GitHub Actions env vars", () => {
+    process.env.GITHUB_SERVER_URL = "https://github.com";
+    process.env.GITHUB_REPOSITORY = "weston-uribe/agentic-product-development-harness";
+    process.env.GITHUB_RUN_ID = "28899991092";
+
+    expect(getGitHubActionsRunUrl()).toBe(
+      "https://github.com/weston-uribe/agentic-product-development-harness/actions/runs/28899991092",
+    );
+  });
+
+  it("returns null when env vars are missing", () => {
+    delete process.env.GITHUB_SERVER_URL;
+    delete process.env.GITHUB_REPOSITORY;
+    delete process.env.GITHUB_RUN_ID;
+
+    expect(getGitHubActionsRunUrl()).toBeNull();
+  });
+
+  it("formats markdown link for Actions run URL", () => {
+    expect(
+      formatGitHubActionsRunLink(
+        "https://github.com/weston-uribe/agentic-product-development-harness/actions/runs/123",
+      ),
+    ).toBe(
+      "[GitHub Actions run](https://github.com/weston-uribe/agentic-product-development-harness/actions/runs/123)",
+    );
+  });
+});