Add GitHub Actions workflow for MCP agent session backfill

[kentcdodds]

Summary

• Adds workflow_dispatch job to dry-run/execute the MCP Agent session ownership backfill against production using existing Cloudflare + maintenance secrets.
• Documents the Actions path and corrects the worker script name to kody-production.
• Follow-up cleanup tracked in Cleanup: remove MCP agent session one-shot backfill tooling after production marker #1051.

Test plan

• Trigger dry-run via gh workflow run backfill-mcp-agent-sessions.yml -f mode=dry-run
• Review uploaded audit artifact (no no_owner / ownership conflicts / failures)
• Re-run with -f mode=execute
• Confirm account deletion is no longer blocked by the backfill marker

Made with Cursor

Summary by CodeRabbit

• New Features

  • Added a manually triggered workflow for backfilling MCP agent sessions.
  • Supports dry-run and execute modes, configurable deployment settings, audit summaries, and downloadable audit reports.

• Documentation

  • Added instructions for using the preferred workflow.
  • Updated local dry-run and execution guidance, including required environment settings and review steps.

[kentcdodds]

Merged and dry-run triggered on main. Cleanup tracked in #1051.

[cursor]

Cursor Bugbot has reviewed your changes using default effort and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit 5485103. Configure here.}

[cursor]

Audit artifact skipped on failure

Medium Severity

AUDIT_PATH is written to GITHUB_ENV only after npm run backfill:mcp-agent-sessions succeeds. In execute mode, runMcpAgentSessionBackfill writes the audit file then exits with an error when failures remain, so later steps gated on env.AUDIT_PATH skip summarize and upload even though the audit JSON exists on the runner.

Additional Locations (1)

• .github/workflows/backfill-mcp-agent-sessions.yml#L76-L125

 

^{Reviewed by Cursor Bugbot for commit 5485103. Configure here.}

[coderabbitai]

Caution

Review failed

The pull request is closed.

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: 18352769-c7e8-40df-aa86-a18bee3245be

📥 Commits

Reviewing files that changed from the base of the PR and between f0d0b2b and 5485103.

📒 Files selected for processing (2)

• .github/workflows/backfill-mcp-agent-sessions.yml
• docs/contributing/mcp-agent-session-backfill.md

---

📝 Walkthrough

Walkthrough

Adds a manually triggered GitHub Actions workflow for MCP agent session backfills, including dry-run/execute modes, audit summarization, and artifact upload. Updates contributor documentation with workflow usage, environment requirements, and kody-production CLI commands.

Changes

MCP agent session backfill

Layer / File(s)	Summary
Backfill workflow and audit handling .github/workflows/backfill-mcp-agent-sessions.yml	Adds manual inputs, concurrency control, dependency setup, credential validation, conditional execution, audit JSON summarization, and 30-day artifact upload.
Backfill operating instructions docs/contributing/mcp-agent-session-backfill.md	Documents the preferred dry-run workflow, audit review process, required local environment, and updated local commands using kody-production.

Estimated code review effort: 3 (Moderate) | ~20 minutes

Sequence Diagram(s)

sequenceDiagram
  participant Operator
  participant GitHubActions
  participant BackfillCLI
  participant Worker
  participant AuditArtifact
  Operator->>GitHubActions: Dispatch mode, origin, and worker script
  GitHubActions->>BackfillCLI: Run backfill command with credentials and arguments
  BackfillCLI->>Worker: Paginate objects and call ownership RPC
  Worker-->>BackfillCLI: Return session ownership data
  BackfillCLI-->>GitHubActions: Write audit JSON
  GitHubActions->>AuditArtifact: Summarize and upload audit JSON

Loading

✨ Finishing Touches 💡 1

🛠️ Fix failing CI checks 💡

• Fix failing CI checks

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch ops/mcp-agent-session-backfill-workflow

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}