code-mower 0.5.0b5__py3-none-any.whl

code_mower/templates/providers.yml

@@ -0,0 +1,454 @@
+version: 1
+provider_templates:
+  acp_bridge:
+    provider: "acp"
+    driver: "local_cli"
+    type: "audit"
+    adapter: null
+    trailer_lane: null
+    spend_policy: "none"
+    merge_authority: false
+    informational: true
+    enabled_by_default: false
+    events: []
+    token_env:
+      - "GITHUB_TOKEN"
+    token_env_any: []
+    trigger_policy: "manual"
+    provider_config:
+      command_env: "CODE_MOWER_ACP_COMMAND"
+      protocol: "agent-client-protocol"
+      prompt_lenses:
+        - "base-audit"
+      status: "protocol research lane; no automatic merge authority"
+    review_hygiene: {}
+  aider:
+    provider: "aider"
+    driver: "local_cli"
+    type: "audit"
+    adapter: null
+    trailer_lane: null
+    spend_policy: "local"
+    merge_authority: false
+    informational: true
+    enabled_by_default: false
+    events: []
+    token_env:
+      - "AIDER_AUDIT_LABEL_TOKEN"
+      - "GITHUB_TOKEN"
+    token_env_any: []
+    trigger_policy: "manual"
+    provider_config:
+      command: "aider"
+      mode: "review-only"
+      model_env: "AIDER_MODEL"
+      api_base_env: "AIDER_API_BASE"
+      status: "optional tool lane; provider-specific invocation belongs in an adapter"
+    review_hygiene: {}
+  antigravity_cli:
+    provider: "antigravity"
+    driver: "local_cli"
+    type: "audit"
+    adapter: null
+    trailer_lane: null
+    spend_policy: "included"
+    merge_authority: false
+    informational: true
+    enabled_by_default: false
+    events: []
+    token_env:
+      - "GITHUB_TOKEN"
+    token_env_any: []
+    trigger_policy: "manual"
+    provider_config:
+      command: "agy"
+      alternate_commands:
+        - "antigravity"
+      command_env: "ANTIGRAVITY_CLI_COMMAND"
+      model_env: "ANTIGRAVITY_MODEL"
+      prompt_lenses:
+        - "base-audit"
+      required_env_truthy:
+        - "ANTIGRAVITY_CLI_USE_AMBIENT_HOME"
+      doctor_probe_args:
+        - "--version"
+      auth: "run `agy` login/install locally; set ANTIGRAVITY_CLI_USE_AMBIENT_HOME=1 to opt into local OAuth state in trusted environments"
+      status: "forward Google CLI research lane; not merge authority until calibrated"
+    review_hygiene: {}
+  claude_audit:
+    provider: "claude"
+    driver: "local_cli"
+    type: "audit"
+    adapter: null
+    trailer_lane: "claude"
+    spend_policy: "included"
+    merge_authority: true
+    informational: false
+    enabled_by_default: true
+    events: []
+    token_env:
+      - "CLAUDE_AUDIT_LABEL_TOKEN"
+      - "GITHUB_TOKEN"
+    token_env_any: []
+    trigger_policy: "label"
+    provider_config:
+      command: "claude"
+      doctor_probe_args:
+        - "--print"
+        - "--output-format"
+        - "json"
+        - "--no-session-persistence"
+        - "--setting-sources"
+        - "local"
+        - "--strict-mcp-config"
+        - "--mcp-config"
+        - '{"mcpServers":{}}'
+        - "--disable-slash-commands"
+        - "--tools"
+        - ""
+        - "--model"
+        - "sonnet"
+        - "--max-budget-usd"
+        - "0.25"
+        - "Reply with exactly: ok"
+      doctor_probe_timeout_seconds: 30
+      doctor_probe_expect_json: true
+      doctor_probe_expect_json_field: "result"
+      doctor_probe_expect_json_value: "ok"
+      doctor_probe_error_fields:
+        - "is_error"
+        - "api_error_status"
+      doctor_probe_auth_status_fields:
+        - "api_error_status"
+    review_hygiene: {}
+  claude_review:
+    provider: "claude"
+    driver: "manual"
+    type: "review"
+    adapter: null
+    trailer_lane: null
+    spend_policy: "none"
+    merge_authority: false
+    informational: true
+    enabled_by_default: true
+    events: []
+    token_env:
+      - "CLAUDE_REVIEW_LABEL_TOKEN"
+    token_env_any: []
+    trigger_policy: "manual"
+    provider_config: {}
+    review_hygiene: {}
+  coderabbit_cli:
+    provider: "coderabbit"
+    driver: "local_cli"
+    type: "audit"
+    adapter: null
+    trailer_lane: null
+    spend_policy: "included"
+    merge_authority: false
+    informational: true
+    enabled_by_default: false
+    events: []
+    token_env:
+      - "GITHUB_TOKEN"
+    token_env_any: []
+    trigger_policy: "manual"
+    provider_config:
+      command: "coderabbit"
+      alternate_commands:
+        - "cr"
+      status: "optional CLI lane for local/on-demand review capture"
+    review_hygiene: {}
+  codex:
+    provider: "codex"
+    driver: "local_cli"
+    type: "audit"
+    adapter: null
+    trailer_lane: null
+    spend_policy: "included"
+    merge_authority: true
+    informational: false
+    enabled_by_default: true
+    events: []
+    token_env:
+      - "CODEX_AUDIT_LABEL_TOKEN"
+      - "GITHUB_TOKEN"
+    token_env_any: []
+    trigger_policy: "label"
+    provider_config:
+      command: "codex"
+      doctor_probe_args:
+        - "--version"
+    review_hygiene: {}
+  cursor_bugbot:
+    provider: "cursor_bugbot"
+    driver: "saas_event"
+    type: "audit"
+    adapter: "cursor_bugbot"
+    trailer_lane: null
+    spend_policy: "paid"
+    merge_authority: false
+    informational: true
+    enabled_by_default: false
+    events:
+      - "issue_comment"
+    token_env:
+      - "CURSOR_BUGBOT_AUDIT_LABEL_TOKEN"
+      - "GITHUB_TOKEN"
+    token_env_any: []
+    trigger_policy: "manual"
+    provider_config:
+      bot_authors:
+        - "cursor[bot]"
+        - "cursor"
+      trigger_comments:
+        - "bugbot run"
+        - "@cursor review"
+      rules_file: ".cursor/BUGBOT.md"
+      status: "manual informational lane; keep calibration-only until enabled BugBot output shape is captured and adjudicated"
+    review_hygiene: {}
+  devin:
+    provider: "devin"
+    driver: "hosted_bridge"
+    type: "audit"
+    adapter: null
+    trailer_lane: null
+    spend_policy: "paid"
+    merge_authority: true
+    informational: false
+    enabled_by_default: false
+    events: []
+    token_env:
+      - "DEVIN_AUDIT_LABEL_TOKEN"
+      - "GITHUB_TOKEN"
+    token_env_any: []
+    trigger_policy: "manual"
+    provider_config: {}
+    review_hygiene:
+      workflow: ".github/workflows/devin-clear-stale.yml"
+      token_env: "GITHUB_TOKEN"
+  gemini_cli:
+    provider: "gemini"
+    driver: "local_cli"
+    type: "audit"
+    adapter: null
+    trailer_lane: null
+    spend_policy: "included"
+    merge_authority: false
+    informational: true
+    enabled_by_default: false
+    events: []
+    token_env:
+      - "GITHUB_TOKEN"
+    token_env_any:
+      - ["GEMINI_API_KEY", "GOOGLE_API_KEY"]
+    trigger_policy: "manual"
+    provider_config:
+      command: "gemini"
+      command_env: "GEMINI_CLI_COMMAND"
+      model_env: "GEMINI_MODEL"
+      prompt_lenses:
+        - "base-audit"
+      doctor_probe_args:
+        - "-p"
+        - "Reply with exactly: ok"
+        - "--output-format"
+        - "json"
+        - "--skip-trust"
+      doctor_probe_timeout_seconds: 45
+      doctor_probe_expect_json: true
+      doctor_probe_expect_json_field: "response"
+      doctor_probe_expect_json_value: "ok"
+      status: "optional third-peer CLI lane; not merge authority until calibrated"
+    review_hygiene: {}
+  gitar:
+    provider: "gitar"
+    driver: "saas_event"
+    type: "audit"
+    adapter: "gitar"
+    trailer_lane: null
+    spend_policy: "included"
+    merge_authority: false
+    informational: true
+    enabled_by_default: true
+    events:
+      - "issue_comment"
+    token_env:
+      - "GITAR_AUDIT_LABEL_TOKEN"
+      - "GITHUB_TOKEN"
+    token_env_any: []
+    trigger_policy: "label"
+    provider_config:
+      bot_authors:
+        - "gitar-ai[bot]"
+        - "gitar-bot"
+        - "gitar-bot[bot]"
+    review_hygiene: {}
+  greptile:
+    provider: "greptile"
+    driver: "saas_event"
+    type: "audit"
+    adapter: "greptile"
+    trailer_lane: null
+    spend_policy: "paid"
+    merge_authority: false
+    informational: true
+    enabled_by_default: true
+    events:
+      - "pull_request_review"
+      - "check_run"
+    token_env:
+      - "GREPTILE_AUDIT_LABEL_TOKEN"
+      - "GITHUB_TOKEN"
+    token_env_any: []
+    trigger_policy: "label"
+    provider_config:
+      bot_authors:
+        - "greptile-apps[bot]"
+        - "greptile-apps"
+      check_runs:
+        - app_slug: "greptile-apps"
+          name: "Greptile Review"
+    review_hygiene: {}
+  hermes_cli:
+    provider: "hermes"
+    driver: "local_cli"
+    type: "audit"
+    adapter: null
+    trailer_lane: null
+    spend_policy: "included"
+    merge_authority: false
+    informational: true
+    enabled_by_default: false
+    events: []
+    token_env:
+      - "GITHUB_TOKEN"
+    token_env_any: []
+    trigger_policy: "manual"
+    provider_config:
+      command: "hermes"
+      command_env: "HERMES_CLI_COMMAND"
+      model_env: "HERMES_INFERENCE_MODEL"
+      provider_env: "HERMES_PROVIDER"
+      prompt_lenses:
+        - "base-audit"
+      required_env_truthy:
+        - "HERMES_CLI_USE_AMBIENT_HOME"
+      doctor_probe_args:
+        - "--version"
+      auth: "run `hermes setup` or provider login locally; set HERMES_CLI_USE_AMBIENT_HOME=1 to opt into local Hermes auth/session state in trusted environments"
+      status: "informational Hermes Agent one-shot lane; not merge authority until calibrated"
+    review_hygiene: {}
+  local_llm:
+    provider: "openai_compatible"
+    driver: "api_model"
+    type: "audit"
+    adapter: null
+    trailer_lane: null
+    spend_policy: "local"
+    merge_authority: false
+    informational: true
+    enabled_by_default: false
+    events: []
+    token_env:
+      - "LOCAL_LLM_AUDIT_LABEL_TOKEN"
+      - "LOCAL_LLM_API_KEY"
+      - "GITHUB_TOKEN"
+    token_env_any: []
+    trigger_policy: "manual"
+    provider_config:
+      api_base_env: "LOCAL_LLM_API_BASE"
+      model_env: "LOCAL_LLM_MODEL"
+      bot_authors_env: "LOCAL_LLM_BOT_AUTHORS"
+      default_api_base: "http://localhost:1234/v1"
+      profile_env: "LOCAL_LLM_PROFILE"
+      profiles:
+        qwen3-coder-next-lmstudio:
+          api_base: "http://localhost:1234/v1"
+          model: "qwen/qwen3-coder-next"
+          context_window: "128000"
+          endpoint: "lmstudio"
+        gemma4-ollama:
+          api_base: "http://localhost:11434/v1"
+          model: "gemma4:e4b-mlx"
+          context_window: "128000"
+          endpoint: "ollama"
+      status: "informational calibration lane, not merge authority"
+    review_hygiene: {}
+  qodo:
+    provider: "qodo"
+    driver: "saas_event"
+    type: "audit"
+    adapter: "qodo"
+    trailer_lane: null
+    spend_policy: "paid"
+    merge_authority: false
+    informational: true
+    enabled_by_default: false
+    events:
+      - "issue_comment"
+    token_env:
+      - "QODO_AUDIT_LABEL_TOKEN"
+      - "GITHUB_TOKEN"
+    token_env_any: []
+    trigger_policy: "manual"
+    provider_config:
+      bot_authors:
+        - "qodo-code-review[bot]"
+        - "qodo-code-review"
+      spend_policy: "never trigger automatically from generated workflows"
+    review_hygiene: {}
+profiles:
+  recommended:
+    description: "Fast path for most teams; two local CLI peers plus an always-on advisory SaaS reviewer."
+    lanes:
+      - "codex"
+      - "claude_audit"
+      - "gitar"
+    source: "repo"
+  public_oss:
+    description: "Public repository starter; use recommended today, swap Gitar for CodeRabbit once the CodeRabbit adapter lands."
+    lanes:
+      - "codex"
+      - "claude_audit"
+      - "gitar"
+    source: "repo"
+  deep_review:
+    description: "Higher-scrutiny private repository profile; Greptile remains opt-in and informational to avoid surprise spend."
+    lanes:
+      - "codex"
+      - "claude_audit"
+      - "greptile"
+    source: "repo"
+  privacy:
+    description: "Experimental low-cost/private calibration floor; local LLM is informational only until false-positive rates are measured."
+    lanes:
+      - "local_llm"
+    source: "repo"
+  tool_lane:
+    description: "Optional local tool-lane proof; Aider stays manual and informational until its review adapter is calibrated."
+    lanes:
+      - "aider"
+    source: "repo"
+  third_peer:
+    description: "Optional third local CLI reviewer calibration profile; Google and Hermes CLI lanes stay informational until catch rate and false positives are measured."
+    lanes:
+      - "antigravity_cli"
+      - "gemini_cli"
+      - "hermes_cli"
+    source: "repo"
+  cli_research:
+    description: "Optional local CLI and protocol research profile; use for on-demand review capture, not routine merge gates."
+    lanes:
+      - "antigravity_cli"
+      - "gemini_cli"
+      - "hermes_cli"
+      - "coderabbit_cli"
+      - "acp_bridge"
+    source: "repo"
+  saas_research:
+    description: "Optional manually triggered SaaS reviewer calibration profile; use for capture and value reports, not merge gates."
+    lanes:
+      - "cursor_bugbot"
+      - "qodo"
+    source: "repo"

code_mower/templates/reviewer-spend.example.json

@@ -0,0 +1,28 @@
+{
+  "profiles": {
+    "codex-audit": {
+      "cost_usd": 0.0,
+      "notes": "Set to the incremental cost you want attributed to this calibration batch."
+    },
+    "claude-audit": {
+      "cost_usd": 0.0,
+      "notes": "Use your team's billing export or a conservative estimate."
+    },
+    "gemini-cli": {
+      "cost_usd": 0.42,
+      "notes": "Example value only. Replace with the cost of the run-results batch."
+    },
+    "coderabbit-cli": {
+      "cost_usd": 0.0,
+      "notes": "Often a wrapper around account-level billing; record incremental cost if known."
+    },
+    "qwen3-coder-next-lmstudio": {
+      "cost_usd": 0.0,
+      "notes": "Local model run; track hardware or opportunity cost separately if useful."
+    },
+    "gemma4-ollama": {
+      "cost_usd": 0.0,
+      "notes": "Local model run; track hardware or opportunity cost separately if useful."
+    }
+  }
+}

code_mower/templates/reviewer-value-report.example.md

@@ -0,0 +1,20 @@
+# Code Mower Reviewer Value Report
+
+Corpus: `small-known-pr-pilot`
+Items: 5
+Adjudicated evidence: 0
+Finding evidence: 0
+Run dispositions: 0
+Reviewer runs: 1
+
+| Reviewer | Runs | Useful | Negative | Useful rate | Known-clean pass | Known-blocked caught/missed | Infra errors | Input gaps | Cost | Sec/run | Cost/useful | Policy | Recommended role |
+| --- | ---: | ---: | ---: | ---: | ---: | --- | ---: | ---: | ---: | ---: | ---: | --- | --- |
+| `codex-audit` | 1 | 0 | 0 |  | 1 | 0/0 | 0 | 0 | 0.0 | 120.0 |  | `informational` | `informational` |
+
+## Recommendations
+- codex-audit: collect human dispositions before comparing reviewer accuracy.
+
+## Policy Reasons
+- `codex-audit`: `informational` / `informational` / `manual_or_calibration_only` - needs at least 10 adjudicated findings; needs at least 2 known-clean zero-blocker runs; useful-rate below selective-trigger threshold
+
+_Caveat: This is a policy recommendation from calibration evidence, not an automatic repository merge-rule change._

code_mower/templates/workflows/private-standalone-shadow.yml.j2

@@ -0,0 +1,106 @@
+name: Code Mower standalone shadow
+
+on:
+  pull_request:
+    paths:
+      - "tools/code_mower"
+      - "tools/code_mower_standalone_shadow.sh"
+      - "tools/code_mower_standalone_pin.env"
+      - "tools/code_mower_*.py"
+      - "tools/CODE_MOWER*.md"
+      - "code-mower*.yml"
+      - ".github/workflows/code-mower-standalone-shadow.yml"
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+env:
+  FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: "true"
+  CODE_MOWER_STANDALONE_REPO_URL: {{ code_mower_standalone_repo_url | default('https://github.com/OWNER/code-mower.git', true) }}
+  CODE_MOWER_STANDALONE_PACKAGE_REPO_URL: {{ code_mower_standalone_package_repo_url | default('git+ssh://git@github.com/OWNER/code-mower.git', true) }}
+  CODE_MOWER_STANDALONE_REINSTALL: "1"
+  CODE_MOWER_BOOTSTRAP_PYTHON: python3
+
+jobs:
+  shadow:
+    if: github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    steps:
+      - name: Check out product repo
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10
+        with:
+          persist-credentials: false
+
+      - name: Configure Code Mower deploy key
+        shell: bash
+        env:
+          CODE_MOWER_STANDALONE_DEPLOY_KEY: {% raw %}${{ secrets.CODE_MOWER_STANDALONE_DEPLOY_KEY }}{% endraw %}
+        run: |
+          set -euo pipefail
+          if [ -z "${CODE_MOWER_STANDALONE_DEPLOY_KEY}" ]; then
+            echo "::error::Missing CODE_MOWER_STANDALONE_DEPLOY_KEY. Add a read-only deploy key for the configured Code Mower standalone repository to this repository's Actions secrets."
+            exit 1
+          fi
+          install -m 700 -d ~/.ssh
+          printf '%s\n' "${CODE_MOWER_STANDALONE_DEPLOY_KEY}" > ~/.ssh/code_mower_standalone
+          chmod 600 ~/.ssh/code_mower_standalone
+          ssh-keyscan github.com > ~/.ssh/known_hosts
+          cat > ~/.ssh/config <<'EOF'
+          Host github.com
+            IdentityFile ~/.ssh/code_mower_standalone
+            IdentitiesOnly yes
+            StrictHostKeyChecking yes
+          EOF
+          chmod 600 ~/.ssh/config
+
+      - name: Run standalone wrapper shadow proof
+        shell: bash
+        run: |
+          set -euo pipefail
+          mkdir -p .code-mower
+          tools/code_mower --version
+          tools/code_mower doctor --easy --json | tee .code-mower/standalone-doctor.json
+          tools/code_mower migration wrapper-rehearsal \
+            --repo-path "$GITHUB_WORKSPACE" \
+            --local-command "env CODE_MOWER_USE_LOCAL=1 tools/code_mower" \
+            --package-command "tools/code_mower" \
+            --timeout 120 \
+            --json | tee .code-mower/standalone-wrapper-rehearsal.json
+          code_mower_ref="${CODE_MOWER_STANDALONE_REF:-}"
+          if [ -z "${code_mower_ref}" ]; then
+            code_mower_ref="$(sed -n 's/^CODE_MOWER_STANDALONE_REF="\([^"]*\)"/\1/p' tools/code_mower_standalone_pin.env)"
+          fi
+          if [ -z "${code_mower_ref}" ]; then
+            echo "::error::tools/code_mower_standalone_pin.env does not define CODE_MOWER_STANDALONE_REF"
+            exit 1
+          fi
+          if [ "${code_mower_ref}" = "<pin-a-reviewed-code-mower-commit-or-tag>" ]; then
+            echo "::error::replace the placeholder CODE_MOWER_STANDALONE_REF before package-install rehearsal"
+            exit 1
+          fi
+          if [ "${CODE_MOWER_STANDALONE_PACKAGE_REPO_URL:-}" = "" ] || [ "${CODE_MOWER_STANDALONE_PACKAGE_REPO_URL}" = "git+ssh://git@github.com/OWNER/code-mower.git" ]; then
+            echo "::error::replace CODE_MOWER_STANDALONE_PACKAGE_REPO_URL with a pip-installable Code Mower package source"
+            exit 1
+          fi
+          package_spec="${CODE_MOWER_STANDALONE_PACKAGE_REPO_URL}@${code_mower_ref}"
+          tools/code_mower migration package-install-rehearsal \
+            --package-spec "$package_spec" \
+            --repo-path "$GITHUB_WORKSPACE" \
+            --local-command "env CODE_MOWER_USE_LOCAL=1 tools/code_mower" \
+            --work-dir "$GITHUB_WORKSPACE/.code-mower/package-install-rehearsal" \
+            --timeout 180 \
+            --json | tee .code-mower/package-install-rehearsal.json
+
+      - name: Upload shadow proof artifacts
+        if: always()
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
+        with:
+          name: code-mower-standalone-shadow
+          path: |
+            .code-mower/standalone-doctor.json
+            .code-mower/standalone-wrapper-rehearsal.json
+            .code-mower/package-install-rehearsal.json
+          if-no-files-found: ignore
+          retention-days: 7

code_mower/templates/workflows/review-clear-stale.yml.j2

@@ -0,0 +1,83 @@
+# Code Mower workflow template: clear stale terminal audit labels on new commits.
+#
+# Defaults to the Devin lane because hosted/paid lanes are the most likely to
+# need explicit re-dispatch. Change CLEAR_STALE_LANE or generate one workflow
+# per merge-authority lane.
+name: Code Mower Clear Stale Audits
+
+on:
+  pull_request_target:
+    types: [synchronize]
+  workflow_dispatch:
+    inputs:
+      lane:
+        description: "Code Mower trailer lane, for example devin"
+        required: false
+        default: "devin"
+      pr:
+        description: "Pull request number for manual runs"
+        required: false
+      head_sha:
+        description: "Current PR head SHA for manual runs"
+        required: false
+
+permissions:
+  actions: write
+  contents: read
+  issues: write
+  pull-requests: read
+
+concurrency:
+  group: {% raw %}code-mower-clear-stale-${{ github.event.pull_request.number || github.event.inputs.pr || github.run_id }}{% endraw %}
+  cancel-in-progress: true
+
+jobs:
+  clear-stale:
+    runs-on: ubuntu-latest
+    env:
+      CLEAR_STALE_LANE: {% raw %}${{ github.event.inputs.lane || 'devin' }}{% endraw %}
+      CLEAR_STALE_PR: {% raw %}${{ github.event.pull_request.number || github.event.inputs.pr }}{% endraw %}
+      CLEAR_STALE_HEAD_SHA: {% raw %}${{ github.event.pull_request.head.sha || github.event.inputs.head_sha }}{% endraw %}
+      # Optional: dispatch the paid/hosted audit bridge directly when this
+      # command adds a fresh needs-* label. Keep unset for label-only requeue.
+      # CLEAR_STALE_DISPATCH_WORKFLOW: devin-audit-bridge.yml
+      # CLEAR_STALE_DISPATCH_REF: main
+      # CLEAR_STALE_DISPATCH_INPUTS: |
+      #   pr_number={pr}
+    steps:
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10
+        with:
+          persist-credentials: false
+
+      - name: Clear stale Code Mower audit labels
+        env:
+          GITHUB_TOKEN: {% raw %}${{ secrets.GITHUB_TOKEN }}{% endraw %}
+        run: |
+          set -euo pipefail
+
+          if [ -z "${CLEAR_STALE_PR:-}" ] || [ -z "${CLEAR_STALE_HEAD_SHA:-}" ]; then
+            echo "::notice::No PR/head SHA available for stale-label cleanup; skipping."
+            exit 0
+          fi
+
+          extra_args=()
+          if [ -n "${CLEAR_STALE_DISPATCH_WORKFLOW:-}" ]; then
+            extra_args+=(--dispatch-workflow "${CLEAR_STALE_DISPATCH_WORKFLOW}")
+          fi
+          if [ -n "${CLEAR_STALE_DISPATCH_REF:-}" ]; then
+            extra_args+=(--dispatch-ref "${CLEAR_STALE_DISPATCH_REF}")
+          fi
+          if [ -n "${CLEAR_STALE_DISPATCH_INPUTS:-}" ]; then
+            while IFS= read -r dispatch_input; do
+              [ -n "${dispatch_input}" ] || continue
+              extra_args+=(--dispatch-input "${dispatch_input}")
+            done <<< "${CLEAR_STALE_DISPATCH_INPUTS}"
+          fi
+
+          tools/code_mower clear-stale \
+            --lane "${CLEAR_STALE_LANE}" \
+            --repo "${GITHUB_REPOSITORY}" \
+            --pr "${CLEAR_STALE_PR}" \
+            --head-sha "${CLEAR_STALE_HEAD_SHA}" \
+            --json \
+            "${extra_args[@]}"