Skip to content

chore: sync workflow templates - #5819

Closed
stranske wants to merge 2 commits into
phase-3from
sync/workflows-delivery
Closed

chore: sync workflow templates#5819
stranske wants to merge 2 commits into
phase-3from
sync/workflows-delivery

Conversation

@stranske

@stranske stranske commented Aug 12, 2026

Copy link
Copy Markdown
Owner

Sync Summary

Files Updated

  • autofix.yml: Autofix workflow - automatically fixes lint/format issues
  • agents-issue-intake.yml: Issue intake - processes new issues for agent assignment
  • agents-80-pr-event-hub.yml: PR event hub - consolidates PR meta, bot comments, and verify-to-issue handlers
  • agents-81-gate-followups.yml: Gate followups hub - consolidates keepalive and autofix followups
  • agents-keepalive-sweep.yml: Keepalive sweep (Codex bootstrap for #1687 #2267) - periodic level-based resync; dispatches the loop for open agent PRs so silent zero-commit stalls resurface
  • agents-73-codex-belt-conveyor.yml: Codex belt conveyor - orchestrates belt worker execution and handles completion
  • agents-issue-optimizer.yml: Issue optimizer - LangChain-based issue formatting and optimization (Phase 1)
  • agents-issue-format-guard.yml: Issue format guard - validates issues on open/edit/reopen, hold/exemption-label changes, and manual dispatch against AGENT_ISSUE_FORMAT, while durable/wontfix and bot issues remain exempt. Pause and needs-human labels hold dispatch. Any invalid non-exempt issue change on those triggers clears stale agents:formatted state, and hold removal revalidates on resume. Non-conforming unheld work gets agents:format so the optimizer repairs it. Requires .github/scripts/issue_format.py.
  • agents-auto-label.yml: Auto-label - suggests/applies labels based on semantic matching (Phase 5A)
  • agents-auto-pilot.yml: Auto-pilot - end-to-end automation orchestrator (format → optimize → agent → verify)
  • maint-coverage-guard.yml: Coverage guard - daily baseline monitoring with automatic issue creation
  • sync_dev_dependencies.py: Syncs dev dependency versions from autofix-versions.env to pyproject.toml
  • issue_format.py: Pure-stdlib validator for AGENT_ISSUE_FORMAT compliance. Single fleet definition of agent-processable; used by agents-issue-format-guard.yml and callable directly by local filers to pre-flight before gh issue create (non-zero exit = unfit). Do not fork per repo.
  • requirements-llm.txt: Pinned LLM dependencies - exact-sync guarded for agent workflows
  • check_deliberate_break.py: Opt-in Gate helper that proves named deliberate-break acceptance tests fail against the base implementation
  • registry.yml: Agent registry - source of truth for agent keys and runner workflow mapping
  • source_context.js: Classifies PR workflow source context for issue, local, automation, sync, Dependabot, review follow-up, and direct GitHub work
  • keepalive_loop.js: Core keepalive loop logic
  • keepalive_challenge_due.js: Selects due automation-owned authority challenges for the hourly keepalive sweep
  • keepalive_state.js: Keepalive state management
  • github-api-with-retry.js: GitHub API retry wrapper with exponential backoff and pagination support - required by agents-auto-pilot.yml
  • error_classifier.js: Classifies CI errors for agent handling
  • runtime_ac_merge_guard.js: Blocks external merge lanes for PRs that require local Orchestrator runtime acceptance checks
  • sync_pr_lease_contract.js: Validates generated delivery lifecycle records and exact-head seals
  • gate_summary.py: Gate summary renderer - generates PR gate check summary
  • issue_formatter.py: Issue formatter - converts raw text to AGENT_ISSUE_TEMPLATE format
  • task_validator.py: Task validator - refines generated issue tasks for actionability
  • path-classifier/ (1 files): Classifies changed PR paths for path-aware expensive job gating
  • AGENT_ISSUE_FORMAT.md: Format specification for agent-compatible issues
  • SETUP_CHECKLIST.md: Consumer repo setup checklist. Includes the default_workflow_permissions=write step in section 3.3.1 that prevents a Gate startup_failure on fresh consumers (see [readiness] probe #2157). Synced so it no longer drifts across the fleet.
  • WORKFLOW_USER_GUIDE.md: Workflow user guide - explains the CI/agent system for repo consumers

Files Skipped

  • pr-00-gate.yml: File exists and sync_mode is create_only
  • ci.yml: File exists and sync_mode is create_only
  • renovate.json: File exists and sync_mode is create_only
  • cross-repo-smoke.yml: File exists and sync_mode is create_only
  • AGENTS.md: Repo keeps historical Agents.md casing to avoid case-only path conflicts
  • llm_slots.json: None

Review Checklist

  • CI passes with updated workflows
  • No repo-specific customizations were overwritten

Source: stranske/Workflows
Source SHA: 7974faff890b5fd12a08f37385bbcd0ffb995f8f
Template hash: 6e44aca703f4
Consumer-sync plan ID: sha256:6e44aca703f4149dcc61e7f34fabc7b31d2f5c5e7dac44b4c9f9fec458fcc4b2
Sync phase: promote
Sync branch: sync/workflows-delivery
Consumer repo: stranske/Trend_Model_Project
Manifest: .github/sync-manifest.yml

autofix: false

@stranske stranske added sync Automated sync from Workflows automated Automated sync from Workflows sync:delivery-staging Generated delivery is mutable and must not merge labels Aug 12, 2026
@cursor

cursor Bot commented Aug 12, 2026

Copy link
Copy Markdown

Bugbot is not enabled for your account, so this pull request was not reviewed.

Enable Bugbot in the Cursor dashboard to get automatic reviews on future PRs.

@coderabbitai

coderabbitai Bot commented Aug 12, 2026

Copy link
Copy Markdown

Important

Review skipped

Auto reviews are limited based on label configuration.

🚫 Excluded labels (none allowed) (7)
  • sync
  • workflow:source-sync
  • workflow:source-maintenance
  • consumer-sync
  • integration-sync
  • workflows-sync
  • template-sync

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: ASSERTIVE

Plan: Pro

Run ID: 10f32a5a-c0f8-4659-8917-328d19b99132

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review

Comment @coderabbitai help to get the list of available commands.

@stranske
stranske marked this pull request as ready for review August 12, 2026 02:54

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 0242ae8c7d

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment thread scripts/langchain/issue_formatter.py
@stranske
stranske marked this pull request as draft August 13, 2026 01:56
@stranske
stranske force-pushed the sync/workflows-delivery branch 2 times, most recently from 64ac217 to c7d4e47 Compare August 13, 2026 03:14
@stranske
stranske marked this pull request as ready for review August 13, 2026 03:23
@stranske

Copy link
Copy Markdown
Owner Author

@coderabbitai review

@coderabbitai

coderabbitai Bot commented Aug 13, 2026

Copy link
Copy Markdown
⚠️ Action not completed

Review rate limited.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: c7d4e47adf

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment thread .github/workflows/agents-issue-optimizer.yml
@stranske
stranske marked this pull request as draft August 13, 2026 15:36
@stranske
stranske force-pushed the sync/workflows-delivery branch from c7d4e47 to 25a4232 Compare August 13, 2026 15:36
@stranske
stranske marked this pull request as ready for review August 13, 2026 15:46

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 25a4232612

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment thread .github/actions/path-classifier/classify.js
Comment thread .github/scripts/keepalive_challenge_due.js
@stranske
stranske marked this pull request as draft August 13, 2026 19:28
Automated sync from stranske/Workflows
Template hash: 6e44aca703f4

Changes synced from sync-manifest.yml
@stranske
stranske force-pushed the sync/workflows-delivery branch from 25a4232 to fdfe2c6 Compare August 13, 2026 19:29
@stranske
stranske marked this pull request as ready for review August 13, 2026 22:33

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: fdfe2c6ce3

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment on lines +293 to +297
try {
if (!isBootstrapAddition(baseSha, headSha, relativeContractPath)) {
return null;
}
const source = readBootstrapContract(headSha, relativeContractPath);

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Fetch the bootstrap head before reading its contract

For the first stable-delivery rollout, the base lacks this contract, but the pr-00-gate.yml detect job uses the default shallow actions/checkout and fetchBaseRef fetches only the base branch/base SHA. Consequently the exact pull_request.head.sha is not normally present locally, so both isBootstrapAddition(baseSha, headSha, ...) and readBootstrapContract(headSha, ...) fail and the classifier reports the contract as unavailable. Fresh evidence beyond the earlier bootstrap review is the actual checkout/fetch path: no command fetches the head SHA before this branch executes. Fetch the exact head SHA before checking the add-only diff.

Useful? React with 👍 / 👎.

Comment on lines +3220 to +3224
const migrateSummaryWriter = Boolean(
commentId &&
trustedSummaryAuthor &&
(existingSummaryAuthor !== trustedSummaryAuthor || existingSummaryAuthorType !== 'bot'),
);

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Reject untrusted state instead of re-signing it

When the latest comment containing a keepalive state marker was posted by an arbitrary PR commenter, loadKeepaliveState still returns its state; this branch merely notices that its author differs from the selected App and then creates a new App-owned summary containing the inherited previousState. That launders attacker-controlled attention data into a comment trusted by keepalive_challenge_due.js, allowing a later sweep on an agent:needs-attention PR to treat the forged challenge as automation state. Only migrate state from the known legacy writer, and discard state loaded from any other author.

Useful? React with 👍 / 👎.

…main

Byte-for-byte propagate the five consumer-managed paths from merged
Workflows PR #3083 so verifier drift evidence can clear for #3060.
@stranske-automation-bot

Copy link
Copy Markdown
Collaborator

Closing this generated delivery as no longer current.
delivery_reason: desired_tree_mismatch
delivery_disposition: superseded
next_command: close-or-refresh-delivery

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

automated Automated sync from Workflows sync:delivery-staging Generated delivery is mutable and must not merge sync Automated sync from Workflows

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants