chore: sync workflow templates

[stranske]

Sync Summary

Files Updated

• agents-weekly-metrics.yml: Weekly metrics - aggregates auto-pilot, keepalive, autofix and verifier metrics into summary reports
• bot_comment_auth_coverage.js: Warning-only bot-comment App auth coverage preflight
• weekly_metrics_artifacts.js: Bounded weekly metrics artifact selection contract

Files Skipped

• pr-00-gate.yml: File exists and sync_mode is create_only
• ci.yml: File exists and sync_mode is create_only
• dependabot.yml: File exists and sync_mode is create_only
• llm_slots.json: None

---

Review Checklist

• CI passes with updated workflows
• No repo-specific customizations were overwritten

Source: stranske/Workflows
Manifest: .github/sync-manifest.yml

[stranske-keepalive]

⚠️ Action Required: Unable to determine source issue for PR #895. The PR title, branch name, or body must contain the issue number (e.g. #123, branch: issue-123, or the hidden marker ).

[agents-workflows-bot]

🤖 Keepalive Loop Status

PR #895 | Agent: Codex | Iteration 0/5

Current State

Metric	Value
Iteration progress	[----------] 0/5
Action	wait (missing-agent-label)
Disposition	skipped (transient)
Gate	cancelled
Tasks	0/7 complete
Timeout	45 min (default)
Timeout usage	1m elapsed (2%, 44m remaining)
Keepalive	❌ disabled
Autofix	❌ disabled

🔍 Failure Classification

| Error type | infrastructure |
| Error category | resource |
| Suggested recovery | Confirm the referenced resource exists (repo, PR, branch, workflow, or file). |

[agents-workflows-bot]

Keepalive Work Log (click to expand)

#	Time (UTC)	Agent	Action	Result	Files	Tasks	Progress	Commit	Gate
0	2026-04-25 21:08:59	Codex	wait (missing-agent-label-transient)	skipped	—	0	0/7	—	—
0	2026-04-25 21:10:23	Codex	wait (missing-agent-label-transient)	skipped	—	0	0/7	—	cancelled
0	2026-04-25 21:13:09	Codex	wait (missing-agent-label-transient)	skipped	—	0	0/7	—	success
0	2026-04-25 21:13:42	Codex	wait (missing-agent-label-transient) retry	skipped	—	0	0/7	—	cancelled

[Copilot]

Pull request overview

Syncs workflow templates from stranske/Workflows, updating the weekly metrics workflow and its supporting scripts to standardize Node setup and tighten artifact-selection / bot-comment auth coverage preflight behavior.

Changes:

• Update agents-weekly-metrics workflow to use actions/setup-node and refine coverage hard-block reporting.
• Tighten weekly metrics artifact family classification for bot-comment auth coverage artifacts using explicit regex patterns.
• Expand bot-comment auth coverage preflight to better track input parsing/reading stats and refine hard-block eligibility behavior.

Reviewed changes

Copilot reviewed 3 out of 3 changed files in this pull request and generated 1 comment.

File	Description
.github/workflows/agents-weekly-metrics.yml	Switches to explicit Node setup and adds wrapper allowed-auth env var; improves hard-block error annotation text.
.github/scripts/weekly_metrics_artifacts.js	Moves bot-comment auth coverage artifacts from prefix-based family detection to bounded regex-based detection.
.github/scripts/bot_comment_auth_coverage.js	Enforces stricter input file contract, adds richer summary stats, and refactors component policy overrides / enforcement logic.

[Copilot]

In summarizeOrganicEvidence(), when organic checks are enabled (required_events/components configured) but records.length === 0, the function returns status 'no-data' with an empty blockers list. This makes enforcement.blockers omit any indication that required organic evidence is missing, unlike the partial-data path which emits missing-organic-* blockers. Consider emitting at least one blocker (e.g., 'organic-evidence-no-data') or populating missing-organic blockers even in the no-records case so the overall summary explains why organic evidence is failing/no-data.

Suggested change

	return {
	schema: 'workflows-bot-comment-auth-organic-evidence/v1',
	required_events: requiredEvents,
	required_components: components,
	expected_mode: expectedMode === 'unknown' ? '' : expectedMode,
	event_counts: eventCounts,
	blockers: [],
	const blockers = organicChecksDisabled ? [] : ['organic-evidence-no-data'];
	return {
	schema: 'workflows-bot-comment-auth-organic-evidence/v1',
	required_events: requiredEvents,
	required_components: components,
	expected_mode: expectedMode === 'unknown' ? '' : expectedMode,
	event_counts: eventCounts,
	blockers,

[stranske]

Superseded by newer Workflows sync PR #920 (sync/workflows-daec38e5dbf4). Closing this duplicate sync lane so review and verification can focus on the latest template hash.