chore: sync workflow templates

[stranske]

Sync Summary

Files Updated

• autofix.yml: Autofix workflow - automatically fixes lint/format issues
• agents-issue-intake.yml: Issue intake - processes new issues for agent assignment
• agents-80-pr-event-hub.yml: PR event hub - consolidates PR meta, bot comments, and verify-to-issue handlers
• agents-81-gate-followups.yml: Gate followups hub - consolidates keepalive and autofix followups
• agents-keepalive-sweep.yml: Keepalive sweep (#2267) - periodic level-based resync; dispatches the loop for open agent PRs so silent zero-commit stalls resurface
• agents-keepalive-loop-reporter.yml: Keepalive reporter - posts summary when keepalive run fails or cancels
• agents-71-codex-belt-dispatcher.yml: Codex belt dispatcher - selects issues and creates agent branches for work
• agents-72-codex-belt-worker.yml: Codex belt worker - executes agent on issues with full prompt and context
• agents-72-codex-belt-worker-dispatch.yml: Codex belt worker dispatch wrapper - allows workflow_dispatch for the worker
• agents-73-codex-belt-conveyor.yml: Codex belt conveyor - orchestrates belt worker execution and handles completion
• agents-autofix-dispatcher.yml: Autofix dispatch bridge - acknowledges legacy Gate repository_dispatch events; agents-81-gate-followups handles repair work
• agents-verifier.yml: Verifier - validates agent work meets acceptance criteria
• list-llm-models.yml: List LLM Models - helper to show available models for verifier
• agents-issue-optimizer.yml: Issue optimizer - LangChain-based issue formatting and optimization (Phase 1)
• agents-verify-to-new-pr.yml: Verify to new PR - creates follow-up issue and immediately dispatches auto-pilot to prepare a replacement PR (bridge inlined)
• agents-auto-label.yml: Auto-label - suggests/applies labels based on semantic matching (Phase 5A)
• agents-capability-check.yml: Capability check - pre-flight agent feasibility gate (Phase 3A)
• agents-decompose.yml: Task decomposition - breaks large issues into sub-tasks (Phase 3B)
• agents-dedup.yml: Duplicate detection - flags similar open issues (Phase 3C)
• agents-guard.yml: Agents guard - enforces agents workflow protections (Health 45)
• agents-pr-health.yml: PR health scanner - periodic conflict resolution and failing check re-dispatch
• agents-auto-pilot.yml: Auto-pilot - end-to-end automation orchestrator (format → optimize → agent → verify)
• agents-weekly-metrics.yml: Weekly metrics - aggregates auto-pilot, keepalive, autofix and verifier metrics into summary reports
• maint-coverage-guard.yml: Coverage guard - daily baseline monitoring with automatic issue creation
• maint-76-claude-code-review.yml: Claude Code review (opt-in) - runs only on labeled PRs or manual dispatch
• reusable-pr-context.yml: Reusable PR context workflow - centralized PR data fetching via GraphQL
• backplane-conformance.yml: Backplane conformance caller stub - calls reusable-backplane-conformance.yml@main to validate a repo's emitted run-contract/v1 envelope (producer) or ingested object (consumer). No-op for non-participants (opt-in). Template lives under templates/consumer-repo/.github/workflows/.
• keepalive_next_task.md: Keepalive prompt - instructs Codex on next task in PR
• autofix_from_ci_failure.md: Autofix prompt - instructs Codex to fix CI/Gate failures
• fix_ci_failures.md: CI fix prompt - general CI failure resolution instructions
• fix_bot_comments.md: Bot comments prompt - instructs Codex to address bot review comments
• verifier_acceptance_check.md: Verifier prompt - acceptance criteria validation
• fix_merge_conflicts.md: Conflict resolution prompt - instructs Codex to resolve merge conflicts
• sync_dev_dependencies.py: Syncs dev dependency versions from autofix-versions.env to pyproject.toml
• check_agents_md_freshness.py: Warns when the generated Orchestrator AGENTS.md playbook section cites stale repo paths or commands
• resolve_mypy_pin.py: Resolves mypy version pinning - required by reusable CI workflow
• requirements-llm.txt: Pinned LLM dependencies - exact-sync guarded for agent workflows
• coverage_trend.py: Generates coverage trend summaries - required by reusable CI workflow
• coverage_guard.py: Checks coverage guard artifacts - required by maint-coverage-guard.yml
• init.py: Tools package marker for Python helpers imported by synced workflows
• ci_failure_triage.py: Classifies CI failure logs - required by pr-00-gate.yml summary generation
• post_ci_summary.py: Builds consolidated Gate summary comments - required by pr-00-gate.yml
• state_fingerprint.py: Computes workflow state fingerprints for unchanged-state skip gates
• check_deliberate_break.py: Opt-in Gate helper that proves named deliberate-break acceptance tests fail against the base implementation
• reference_packs.py: Validates and resolves reference pack configuration for shared runner prompt assembly
• orchestrator_skill.py: Validates and resolves exported Orchestrator skill context for remote Codex lanes
• runner_lib/ (3 files): Shared runner prompt assembly, output parsing, and dispatch debounce helpers
• aggregate_agent_metrics.py: Aggregates downloaded weekly agent metrics - required by agents-weekly-metrics.yml
• coverage_history_append.py: Appends coverage data to history file - required by reusable CI workflow
• ci_metrics.py: Collects CI metrics for dashboard - required by reusable CI workflow
• ci_history.py: Manages CI history data - required by reusable CI workflow
• ci_coverage_delta.py: Computes coverage delta between runs - required by reusable CI workflow
• reusable_ci_scope.py: Selects changed-input reusable CI scenarios - required by reusable CI workflows
• sync_test_dependencies.py: Syncs test dependency pins - required by reusable CI workflow
• check_test_dependencies.sh: Checks test dependencies match - required by reusable CI workflow
• autopilot_step_timer.py: Emits step timing timestamps for auto-pilot workflows - required by agents-auto-pilot.yml
• autopilot_metrics_collector.py: Collects and appends structured auto-pilot metrics to NDJSON log - required by agents-auto-pilot.yml
• decode_raw_input.py: Decodes raw input from ChatGPT connector
• parse_chatgpt_topics.py: Parses ChatGPT conversation into issue topics
• fallback_split.py: Fallback topic splitting when parsing fails
• detect-changes.js: Detects changed files for CI path-based filtering
• agents-guard.js: Health 45 agents guard logic used by the workflow protections
• coverage-normalize.js: Normalizes coverage data across different report formats
• maint-post-ci.js: Post-CI maintenance tasks and cleanup
• gate-docs-only.js: Gate check for docs-only changes to skip full CI
• checkout_source.js: Source checkout utilities for CI workflows
• package.json: Node package manifest for .github scripts (vendored minimatch)
• registry.yml: Agent registry - source of truth for agent keys and runner workflow mapping
• agent_registry.js: Agent registry helper - loads registry and resolves agent key from labels
• agent_delegation_policy.js: Agent delegation policy - system-driven routing for agent:auto label
• minimatch/ (53 files): Vendored minimatch dependency for .github scripts
• brace-expansion/ (13 files): Vendored brace-expansion dependency (transitive dep of minimatch)
• balanced-match/ (13 files): Vendored balanced-match dependency (transitive dep of brace-expansion)
• issue_pr_locator.js: Locates PRs associated with issues
• source_context.js: Classifies PR workflow source context for issue, local, automation, sync, Dependabot, review follow-up, and direct GitHub work
• issue_context_utils.js: Utilities for issue context extraction
• terminal_disposition.js: Machine-readable terminal disposition records and source summaries
• terminal_disposition_coverage.js: Warning-only terminal disposition source coverage preflight
• bot_comment_auth_coverage.js: Warning-only bot-comment App auth coverage preflight
• coverage_monitor_summary.js: Machine-readable weekly coverage monitor checkpoint
• weekly_metrics_artifacts.js: Bounded weekly metrics artifact selection contract
• weekly_metrics_download_manifest.js: Weekly metrics artifact download and extraction manifest contract
• issue_scope_parser.js: Parses issue scope and requirements
• keepalive_instruction_template.js: Generates keepalive instructions for Codex
• keepalive_loop.js: Core keepalive loop logic
• token_load_balancer.js: Dynamic token load balancer for API rate limit management
• keepalive_prompt_routing.js: Prompt routing logic for keepalive - determines which prompt template to use
• keepalive_state.js: Keepalive state management
• timeout_config.js: Timeout configuration parser for keepalive - required by keepalive_loop.js
• keepalive_guard_utils.js: Guard utilities for keepalive state protection
• keepalive_contract.js: Keepalive contract definitions and validation
• keepalive_gate.js: Gate evaluation logic for keepalive workflow
• keepalive_worker_gate.js: Worker gate logic for keepalive workflow
• keepalive_orchestrator_gate_runner.js: Orchestrator gate runner for keepalive
• keepalive_post_work.js: Post-work handling for keepalive rounds
• keepalive_prompt_composer.js: Composes prompts for keepalive Codex calls
• autopilot_metrics.js: AutoPilot metrics collection and reporting
• auto_pilot_transitions.js: Auto-pilot transition contract and next-step helper
• github-api-with-retry.js: GitHub API retry wrapper with exponential backoff and pagination support - required by agents-auto-pilot.yml
• sync_tracker_state/ (1 files): Shared durable tracker and open PR state helpers for consumer sync workflows
• github-rate-limited-wrapper.js: Transparent rate-limit proxy - wraps all github.rest.* calls with automatic retry and token switching
• prompt_injection_guard.js: Security guard against prompt injection attacks
• prompt_integrity_guard.js: Integrity validation for prompts
• error_classifier.js: Classifies CI errors for agent handling
• error_diagnostics.js: Diagnostic utilities for error analysis
• failure_comment_formatter.js: Formats failure comments for PR status updates
• conflict_detector.js: Conflict detector - identifies merge conflicts for targeted resolution
• merge_manager.js: Manages PR merge operations
• runtime_ac_merge_guard.js: Blocks external merge lanes for PRs that require local Orchestrator runtime acceptance checks
• comment-dedupe.js: Deduplicates bot comments on issues/PRs
• bot-comment-dismiss.js: Collects ignored bot review comments for auto-dismiss handling
• bot-comment-handler.js: Bot comment handler logic - processes bot review comments for dispatch
• autofix_emit_report.py: Emits autofix report - required by reusable-18-autofix.yml
• gate_summary.py: Gate summary renderer - generates PR gate check summary
• should-post-review.js: Evaluates whether a progress review comment should be posted
• keepalive_review_guard.js: Guards against posting empty/null progress review comments
• post_completion_comment.js: Posts completion comments on PRs
• verifier_ci_query.js: Queries CI status for verifier workflow
• verifier_issue_formatter.js: Formats issues for verifier output
• verifier_verdict_json.py: Extracts structured post-merge verifier verdict JSON without trusting diff text
• agents_orchestrator_resolve.js: Resolves agent orchestrator state
• agents_pr_meta_keepalive.js: PR metadata handling for keepalive
• agents_pr_meta_orchestrator.js: PR metadata orchestrator logic
• agents_pr_meta_update_body.js: Updates PR body with agent metadata
• agents_verifier_context.js: Context gathering for agent verifier
• agents_dispatch_summary.js: Summarizes agent dispatch operations
• agents_belt_scan.js: Scans agent belt for available tools
• api_client.py: Shared GitHub API client used by synced Python automation scripts
• issue_optimizer.py: Issue optimizer - analyzes issues and suggests improvements
• structured_output.py: Shared structured output helpers for LangChain workflows
• trace_utils.py: Shared LangSmith trace metadata helpers for LangChain workflows
• _llm_client.py: Shared LangChain chat-client construction (get_llm_client/get_llm_clients)
• verifier_config.py: Shared verifier prompt budgets, schema-repair policy, and terminal artifact validation
• checklist_utils.py: Shared checklist parsing helpers for issue and follow-up generation
• issue_formatter.py: Issue formatter - converts raw text to AGENT_ISSUE_TEMPLATE format
• issue_pr_context.py: Issue/PR context assembly helper with shared token budget caps
• issue_dedup.py: Issue deduplication - finds similar open issues
• injection_guard.py: Prompt injection guard - validates prompts before LLM submission
• progress_reviewer.py: Progress reviewer - evaluates agent progress for keepalive rounds
• context_extractor.py: Context extractor - extracts relevant context from issues/PRs
• semantic_matcher.py: Semantic matcher - vector similarity for issues/labels
• capability_check.py: Capability check - pre-flight agent feasibility assessment
• task_decomposer.py: Task decomposer - breaks large issues into sub-tasks
• task_validator.py: Task validator - refines generated issue tasks for actionability
• label_matcher.py: Label matcher - suggests labels based on semantic matching
• pr_verifier.py: PR verifier - validates PR changes against acceptance criteria
• integration_layer.py: Integration layer - coordinates LangChain components
• topic_splitter.py: Topic splitter - splits conversations into discrete issues
• format_issue.md: Prompt template for LLM-based issue formatting
• analyze_issue.md: Prompt template for issue analysis/optimization
• apply_suggestions.md: Prompt template for applying optimization suggestions
• context_extract.md: Prompt template for context extraction
• decompose_task.md: Prompt template for task decomposition
• pr_evaluation.md: Prompt template for PR evaluation/verification
• refine_tasks.md: Prompt template for task refinement and validation
• verdict_extract.py: Verdict extractor - parses verification verdicts from LLM output
• verdict_policy.py: Verdict policy engine - applies pass/fail rules to verification results
• llm_provider.py: LLM provider configuration - GitHub Models and OpenAI client setup
• langchain_client.py: LangChain client builder - multi-provider client with slot-based fallback and configuration
• llm_registry.py: LLM model registry helper - shared slot/model selection and blocked-model enforcement
• embedding_provider.py: Embedding provider registry used by synced semantic matching helpers
• validate_run_contract.py: Validates a repo's emitted run-contract/v1 run envelope (producer/bridge) or ingested satellite object (consumer) against the canonical Workflows schemas + opt-in participant registry. Offline/deterministic; opt-in skip for non-participants. Synced so participants can validate locally and the reusable conformance gate can invoke it.
• agents-guard.js: Guards against unauthorized agent workflow file changes
• pr-context-graphql.js: GraphQL PR context fetcher - reduces 4+ REST calls to 1 GraphQL call
• github-api-cache.js: Shared cache utilities for GitHub API requests used by PR context scripts
• github-api-cache-client.js: Client wrapper for cached GitHub API requests
• AGENT_INSTRUCTIONS.md: Agent instructions - base instructions for all Codex runs
• copilot-instructions.md: Repository-specific instructions for GitHub Copilot
• copilot-skills/ (4 files): Copilot skill definitions - patterns for CI, GitHub ops, etc.
• keepalive-instruction.md: Keepalive instruction template - directives for Codex on each round
• PULL_REQUEST_TEMPLATE.md: Pull request template with Workflow Source fields for direct GitHub and non-issue work
• path-classification.yml: Path classification config used by the path-classifier composite action
• agent-event-eligibility/ (2 files): Agent event eligibility action - early no-op gate for agent workflows
• setup-api-client/ (2 files): Unified API client setup - installs @octokit deps and exports all load balancer tokens
• resolve-default-branch/ (2 files): Resolves repository default branches for Workflows dual-checkout patterns
• export-load-balancer-tokens/ (1 files): Export load balancer tokens action - required by reusable-10-ci-python.yml (deprecated, use setup-api-client)
• path-classifier/ (2 files): Classifies changed PR paths for path-aware expensive job gating
• artifact-cache/ (2 files): Restores, discovers, and caches workflow artifacts by daily, weekly, or run window
• AGENT_ISSUE_FORMAT.md: Format specification for agent-compatible issues
• CI_SYSTEM_GUIDE.md: Guide to the CI system for agents
• LABELS.md: Label definitions and usage
• CODEX_TOKEN_REFRESH.md: Codex OAuth token refresh guide
• AGENTS.md: Context file for agents and coding assistants
• CLAUDE.md: Context file for Claude/AI assistants
• agent-runner-output.md: Agent runner output contract specification - required for implementing new agent runners
• SETUP_CHECKLIST.md: Consumer repo setup checklist. Includes the default_workflow_permissions=write step in section 3.3.1 that prevents a Gate startup_failure on fresh consumers (see #2157). Synced so it no longer drifts across the fleet.
• tokens.css: Design-system theme tokens (theme-air/theme-paper + density axis). Override tokens in an app stylesheet loaded after this; do not fork.
• components.css: Design-system component layer (.ds): panels/appbar/kpis/tables/fields + presentation-state patterns (.notice, .empty-state, .badge, .skeleton).
• ds_streamlit.py: Streamlit adapter for the design system (inject_theme/empty_state/notice/error/translate_error/dev_note/availability_badge/humanize_id) so Streamlit apps consume the same presentation patterns.
• PRESENTATION_PATTERNS.md: The presentation-patterns standard (P1-P6): the rule behind each pattern + per-app-type application + the finding->pattern map from the 2026-06 UX-Review fleet baseline.
• README.md: Design-system usage guide: how to apply the theme + components/kit per app type.
• model_registry.json: Model registry - available LLM models and their capabilities
• .gitattributes: Git attributes - merge strategies to prevent pr_body.md conflicts
• agent_task.yml: Agent task issue template - structured format for agent-compatible issues
• config.yml: Issue template chooser config - controls which templates appear in the UI
• WORKFLOW_USER_GUIDE.md: Workflow user guide - explains the CI/agent system for repo consumers

Files Skipped

• pr-00-gate.yml: File exists and sync_mode is create_only
• ci.yml: File exists and sync_mode is create_only
• renovate.json: File exists and sync_mode is create_only
• cross-repo-smoke.yml: File exists and sync_mode is create_only
• llm_slots.json: None

---

Review Checklist

• CI passes with updated workflows
• No repo-specific customizations were overwritten

Source: stranske/Workflows
Source SHA: 64a8012fcf61ffb010aed2c2f3e0e97f8766826c
Template hash: 0ab0029407c1
Sync branch: sync/workflows-0ab0029407c1
Consumer repo: stranske/Collab-Admin
Manifest: .github/sync-manifest.yml

[coderabbitai]

Warning

Review limit reached

@stranske, we couldn't start this review because you've reached your PR review rate limit.

More reviews will be available in 5 minutes and 53 seconds. Learn how PR review limits work.

To continue reviewing without waiting, enable usage-based billing in the billing tab.

⌛ How to resolve this issue?

After more reviews become available, a review can be triggered using the @coderabbitai review command as a PR comment. Alternatively, push new commits to this PR.

To avoid repeated limits, reduce automatic review volume by pausing incremental auto-reviews earlier, using label-based review opt-in, excluding WIP or generated PR titles, or requesting reviews manually when the PR is ready. If your team needs uninterrupted high-volume reviews, an organization admin can enable usage-based credits.

🚦 How do rate limits work?

CodeRabbit enforces per-developer PR review limits for each organization. Most developers receive the normal plan refill rate.

For paid Pro and Pro+ PR reviews, CodeRabbit uses adaptive limits for sustained high-volume activity. When a developer's recent PR review activity reaches the 95th percentile or higher among CodeRabbit users, the refill rate gradually slows as usage increases. The highest same-day bursts are limited more strictly.

Please see our Fair Usage Limits Policy for further information.

ℹ️ Review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Pro Plus

Run ID: 164fa30d-6355-467d-83eb-b06a432f5af2

📥 Commits

Reviewing files that changed from the base of the PR and between 49053ff and 1603944.

📒 Files selected for processing (10)

• .github/workflows/agents-guard.yml
• .github/workflows/maint-76-claude-code-review.yml
• design-system/PRESENTATION_PATTERNS.md
• design-system/README.md
• design-system/components.css
• design-system/ds_streamlit.py
• design-system/tokens.css
• scripts/langchain/progress_reviewer.py
• tools/langchain_client.py
• tools/llm_provider.py

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch sync/workflows-0ab0029407c1

---

_{Comment @coderabbitai help to get the list of available commands.}

[stranske]

Closing as superseded by newer sync workflow template PR #875 from replacement wave sync/workflows-d0d4ad2bdd25.