Repository navigation
chore: sync actions from gh-aw@v0.92.5 - #282
Merged
Merged
Conversation
Contributor
There was a problem hiding this comment.
🟡 Changes recommended
Missing runtime dependencies and Claim-delivery verification failures block approval.
5 open issues
What changed in this PR
Automated sync of Actions runtime components from gh-aw v0.92.5.
Changes:
- Consolidates JSONL parsing and schema validation.
- Updates issue reporting, redaction, and diagnostics.
- Revises Claim delivery verification, signed pushes, and Pi/Copilot integration.
| File | Summary |
|---|---|
setup/sh/start_safe_outputs_server.sh |
Removes forced debug logging. |
setup/sh/start_mcp_scripts_server.sh |
Updates validation dependencies and logging. |
setup/sh/start_cli_proxy.sh |
Captures bounded, redacted startup diagnostics. |
setup/sh/install_copilot_cli.sh |
Applies minimum-version constraints to explicit versions. |
setup/sh/conclude_threat_detection.sh |
Handles explicit skips before invoking detection. |
setup/setup.sh |
Updates runtime bundles. Critical (1 vote): Both server bundles omit work_queue_native_creation_delivery.cjs, causing MODULE_NOT_FOUND when verification runs. |
setup/session_parsers.go |
Updates embedded dependencies. Critical (8 votes): Missing work_queue_native_creation_delivery.cjs breaks the dependency test and extracted parser bundles. |
setup/session_parsers_test.go |
Extends dependency checks to JSON imports. |
setup/md/agent_failure_issue.md |
Reorganizes failure reports and debugging guidance. |
setup/js/working_set_metrics.cjs |
Uses shared JSONL iteration. |
setup/js/workflow_job_durations.cjs |
Consolidates metadata validation. |
setup/js/work_queue_restore_memory.cjs |
Shares memory-record parsing. |
setup/js/work_queue_resource_scope_checks.cjs |
Tests signed-push authorization. |
setup/js/work_queue_replay.cjs |
Updates bounded transaction parsing. Nit (1 vote, optional): Each ledger line is parsed twice; bounded-line iteration would avoid the redundant parse. |
setup/js/work_queue_prepare_claim_adapter.cjs |
Resolves native repository authority before preparation. |
setup/js/work_queue_logging.cjs |
Shares debug filtering and diagnostic logging. |
setup/js/work_queue_issues_checks.cjs |
Supplies complete issue-creation fixtures. |
setup/js/work_queue_issues_acceptance_checks.cjs |
Updates issue-creation acceptance fixtures. |
setup/js/work_queue_issue_api.cjs |
Renders issue inputs before creation. |
setup/js/work_queue_intents.cjs |
Lazily iterates bounded intent records. |
setup/js/work_queue_git_effects.cjs |
Adds scoped Git-effect authorization. |
setup/js/work_queue_effect_client.cjs |
Extends target resolution and commit accounting. |
setup/js/work_queue_delivery.cjs |
Routes native creation verification. Critical (1 vote): Validation rejects producer fields including base_branch and patch transport, leaving genuine PR deliveries unsettled and failing workers. |
setup/js/work_queue_claim_scope.cjs |
Raises concrete effect-target capacity. |
setup/js/work_queue_claim_scope_checks.cjs |
Uses shared JSONL parsing in checks. |
setup/js/work_queue_claim_adapter_checks.cjs |
Tests repository authority and terminal Claims. |
setup/js/unified_session.cjs |
Shares record parsing and line diagnostics. |
setup/js/unified_session_render.cjs |
Shares summary-input parsing. |
setup/js/unified_session_payload.cjs |
Preserves raw experiment assignment maps. |
setup/js/trace_graders.cjs |
Shares bounded JSONL parsing. |
setup/js/testdata/copilot_sdk_web_fetch_contract.json |
Enables safe-output MCP capabilities in the fixture. |
setup/js/steering_helpers.cjs |
Lazily filters steering records. |
setup/js/smoke_model_routing_assertions.cjs |
Shares JSONL validation diagnostics. |
setup/js/session_cli.cjs |
Iterates and validates session records. |
setup/js/scripts/validate_session.cjs |
Updates framing and compact-JSON checks. |
setup/js/schema-validation.cjs |
Generalizes validation and diagnostic controls. |
setup/js/sanitize_content.cjs |
Canonicalizes publication text and exports alias expansion. |
setup/js/sanitize_content_core.cjs |
Adds bounded, repeated text canonicalization. |
setup/js/safeoutputs_cli.cjs |
Shares safe-output record scanning. |
setup/js/safe_outputs_handlers.cjs |
Uses the renamed schema-validation module. |
setup/js/safe_output_type_validator.cjs |
Uses shared schema validation. |
setup/js/safe_output_summary.cjs |
Links unsuccessful outcomes to debugging guidance. |
setup/js/safe_output_redaction.cjs |
Preserves JSONL framing during redaction. |
setup/js/safe_output_handler_manager.cjs |
Fails workers with unsettled deliveries. |
setup/js/run_validate_workflows.cjs |
Uses structured issue publication. |
setup/js/run_operation_update_upgrade.cjs |
Renders upgrade notification issues consistently. |
setup/js/run_evals.cjs |
Shares line iteration and prefixed-record parsing. |
setup/js/run_activity_report.cjs |
Uses structured report publication. |
setup/js/report_footer.cjs |
Builds typed attribution and expiration footers. |
setup/js/report_failed_jobs.cjs |
Uses structured failure-issue publication. |
setup/js/render_evals_summary.cjs |
Reads evaluation records lazily. |
setup/js/redact_cli_proxy_diagnostics.cjs |
Redacts and bounds proxy diagnostics. |
setup/js/read_buffer.cjs |
Uses incremental JSONL message parsing. |
setup/js/push_to_pull_request_branch.cjs |
Renders fallback issues before creation. |
setup/js/push_signed_commits.cjs |
Bounds changes and scopes Git mutations. Critical (1 vote): New-branch git_ref effects lack independently verified delivery receipts, preventing Claim settlement despite successful readbacks. |
setup/js/push_ledger_changes.cjs |
Uses shared schema validation. |
setup/js/push_experiment_state.cjs |
Shares JSONL merge parsing. |
setup/js/pick_experiment.cjs |
Shares experiment-state parsing. |
setup/js/pi_workflow_skills.cjs |
Manages explicit workflow skill arguments. |
setup/js/pi_subagent_extension.cjs |
Loads workflow skills and bounds streamed records. |
setup/js/pi_session_export.cjs |
Shares session-header parsing. |
setup/js/pi_runtime.cjs |
Stages explicit inline skill selections. |
setup/js/pi_rpc_driver.cjs |
Passes workflow skills to RPC sessions. |
setup/js/pi_agent_core_driver.cjs |
Supplies explicit SDK skill paths. |
setup/js/parse_token_usage.cjs |
Persists model attribution. Moderate (1 vote, recommended fix): Malformed sandbox model-selection logs fail the step and skip token summaries, AIC output, and agent_usage.json; attribution should warn independently. |
setup/js/parse_threat_detection_results.cjs |
Reuses decoded threat-log records. |
setup/js/parse_pydantic_log.cjs |
Shares framed and plaintext record iteration. |
setup/js/parse_mcp_gateway_log.cjs |
Consolidates gateway JSONL parsing. |
setup/js/parse_goose_log.cjs |
Shares record parsing and warning positions. |
setup/js/parse_copilot_log.cjs |
Shares transformed debug-record parsing. |
setup/js/parse_agy_log.cjs |
Shares filtered event parsing. |
setup/js/mount_mcp_as_cli.cjs |
Shares SSE payload decoding. |
setup/js/model_attribution.cjs |
Lazily reads model-routing records. |
setup/js/missing_issue_helpers.cjs |
Uses structured issue publication. |
setup/js/merge_ledger_transactions.cjs |
Streams ledger audit records. |
setup/js/memory_schema_contract.cjs |
Shares depth limits and schema diagnostics. |
setup/js/mcp_server_core.cjs |
Separates diagnostics from filtered debug logging. |
setup/js/mcp_scripts_mcp_server_http.cjs |
Uses the renamed validation module. |
setup/js/mcp_logger.cjs |
Adds namespace filtering. Moderate (1 vote, optional): CI runner debug flags cannot enable MCP debug logs after forced DEBUG removal; recognize runner debug settings. |
setup/js/mcp_http_server_runner.cjs |
Keeps startup error summaries visible. |
setup/js/mcp_cli_bridge.cjs |
Renames audit files and shares SSE parsing. |
setup/js/log_parser_shared.cjs |
Consolidates mixed-log and preview parsing. |
setup/js/log_parser_bootstrap.cjs |
Shares record counting and result detection. |
setup/js/load_experiment_state_from_repo.cjs |
Shares experiment-state validation parsing. |
setup/js/linear_create_issue.cjs |
Normalizes rendered issue content and limits. |
setup/js/ledger_transactions.cjs |
Uses shared schema validation. |
setup/js/ledger_store.cjs |
Shares record parsing while retaining integrity checks. |
setup/js/ledger_builtin.cjs |
Uses shared schema validation. |
setup/js/jira_handlers.cjs |
Normalizes and redacts literal Jira text. |
setup/js/issue_report.cjs |
Centralizes structured issue rendering and publication. |
setup/js/intent_probe.cjs |
Recognizes field-specific exploratory placeholders. |
setup/js/handle_noop_message.cjs |
Uses structured parent-issue publication. |
setup/js/handle_detection_runs.cjs |
Uses structured detection-issue publication. |
setup/js/handle_create_pr_error.cjs |
Renders new PR-error issues. |
setup/js/generate_usage_activity_summary.cjs |
Consolidates usage-log iteration. |
setup/js/generate_observability_summary.cjs |
Shares observability-record parsing. |
setup/js/gateway_difc_filtered.cjs |
Streams filtered gateway records. |
setup/js/friction_cost_metrics.cjs |
Shares invocation parsing and rejection counting. |
setup/js/finish_work_queue_claim.cjs |
Shares strict finish-intent iteration. |
setup/js/failure_report.cjs |
Builds typed failure reports and evidence sections. |
setup/js/extract_inline_skills.cjs |
Records extracted Pi skills in a manifest. |
setup/js/evaluate_outcomes.cjs |
Reads outcome manifests lazily. |
setup/js/engine_log_parser.cjs |
Extracts terminal results without splitting entire logs. |
setup/js/detection_mask_state.cjs |
Persists detection masks in runner-private state. |
setup/js/detect_agent_errors.cjs |
Links detected failures to debugging guidance. |
setup/js/daily_aic_workflow_helpers.cjs |
Shares accounting-record parsing. |
setup/js/daily_aic_repo_memory_ledger.cjs |
Streams accounting ledger entries. |
setup/js/daily_aic_cache_helpers.cjs |
Shares cache parsing and pruning iteration. |
setup/js/create_steering_issue.cjs |
Uses structured steering-issue publication. |
setup/js/create_pull_request.cjs |
Captures native delivery evidence. Critical (2 votes): Claim-scoped signed pushes to new branches record uncovered git_ref effects, rejecting successful PR delivery; include independently verified branch-ref receipts. |
setup/js/create_ledger_projection.cjs |
Uses shared schema validation. |
setup/js/create_forecast_issue.cjs |
Uses structured forecast-issue publication. |
setup/js/copilot_session.cjs |
Shares malformed-record detection. |
setup/js/copilot_model_selection.cjs |
Separates model observation from metadata persistence. |
setup/js/copilot_harness.cjs |
Shares content-filter event scanning. |
setup/js/collect_ndjson_output.cjs |
Shares parsing while retaining repair and sanitization. |
setup/js/codex_harness.cjs |
Reuses decoded watchdog events and error records. |
setup/js/claude_runtime.cjs |
Shares session and failure-evidence parsing. |
setup/js/check_workflow_recompile_needed.cjs |
Uses structured notification-issue publication. |
setup/js/check_version_updates.cjs |
Renders blocked-version issues before publication. |
setup/js/check_daily_aic_workflow_guardrail.cjs |
Shares cached accounting-record iteration. |
setup/js/build_checkout_manifest.cjs |
Preserves merged subprocess environment variables. |
setup/js/apply_samples.cjs |
Streams parsed MCP response events. |
setup/js/ai_credits_context.cjs |
Reuses decoded accounting and rejection records. |
setup/js/agent_execution.cjs |
Shares error-evidence record parsing. |
setup/js/agent_error_patterns.cjs |
Shares unsupported-tool error scanning. |
setup/js/add_mask_redaction.cjs |
Preserves record framing during mask-aware redaction. |
Review effort: Max
| repo: itemRepo, | ||
| head_repo: pushRepo, | ||
| }; | ||
| return await capturePullRequestDelivery( |
Comment on lines
+828
to
+832
| await withGitClaimEffects({ github: githubClient, repository: `${owner}/${repo}`, branch, paths }, () => | ||
| githubClient.rest.git.createRef({ | ||
| owner, | ||
| repo, | ||
| ref: `refs/heads/${branch}`, |
| const { claim, message, result, github } = options; | ||
| // PR creation/branch updates also need pinned commit/tree evidence, not merely a visible PR. | ||
| if (["create_pull_request", "update_pull_request"].includes(message.type)) return { verified: false }; | ||
| if (["create_discussion", "create_pull_request"].includes(message.type)) return require("./work_queue_native_creation_delivery.cjs").verifyNativeCreationDelivery(options); |
| // | ||
| //go:embed js/session_cli.cjs js/unified_session.cjs js/unified_session_payload.cjs js/unified_session_render.cjs | ||
| //go:embed js/steering_helpers.cjs js/jsonl_helpers.cjs | ||
| //go:embed js/schema-validation.cjs js/json_schema_validation.cjs js/memory_schema_contract.cjs |
| "jsonl_helpers.cjs" | ||
| "schema-validation.cjs" | ||
| "json_schema_validation.cjs" | ||
| "memory_schema_contract.cjs" |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Automated sync of actions from gh-aw at
v0.92.5.