mirror of
https://github.com/alexbelgium/hassio-addons.git
synced 2026-09-14 21:59:09 +02:00
feat: automate issue triage and draft fixes
This commit is contained in:
Alexandre
654
.github/workflows/on_issues_ai.yml
vendored
Normal file
654
.github/workflows/on_issues_ai.yml
vendored
Normal file
@@ -0,0 +1,654 @@
|
||||
# yamllint disable rule:line-length
|
||||
---
|
||||
name: AI issue triage and draft fix
|
||||
|
||||
on:
|
||||
issues:
|
||||
types: [opened, reopened, labeled]
|
||||
|
||||
concurrency:
|
||||
group: ai-issue-${{ github.event.issue.number }}
|
||||
cancel-in-progress: false
|
||||
|
||||
env:
|
||||
TRIAGE_MODEL: ${{ vars.OPENAI_TRIAGE_MODEL || 'gpt-5-mini' }}
|
||||
MIN_CONFIDENCE: ${{ vars.AI_MIN_CONFIDENCE || '0.80' }}
|
||||
|
||||
jobs:
|
||||
detect_submitter:
|
||||
if: >-
|
||||
github.event.action != 'labeled' ||
|
||||
github.event.label.name == 'ai: fix-approved'
|
||||
runs-on: ubuntu-latest
|
||||
permissions:
|
||||
contents: read
|
||||
outputs:
|
||||
matched: ${{ steps.submitter.outputs.matched }}
|
||||
addon: ${{ steps.submitter.outputs.addon }}
|
||||
submitter: ${{ steps.submitter.outputs.submitter }}
|
||||
steps:
|
||||
- name: Checkout repository
|
||||
uses: actions/checkout@v7
|
||||
|
||||
- name: Detect mapped add-on submitter
|
||||
id: submitter
|
||||
env:
|
||||
ISSUE_TITLE: ${{ github.event.issue.title }}
|
||||
ISSUE_BODY: ${{ github.event.issue.body }}
|
||||
run: bash .github/scripts/find_addon_submitter.sh
|
||||
|
||||
triage:
|
||||
if: >-
|
||||
needs.detect_submitter.outputs.matched != 'true' &&
|
||||
(
|
||||
github.event.action == 'opened' ||
|
||||
github.event.action == 'reopened' ||
|
||||
(
|
||||
github.event.action == 'labeled' &&
|
||||
github.event.label.name == 'ai: fix-approved'
|
||||
)
|
||||
)
|
||||
needs: detect_submitter
|
||||
runs-on: ubuntu-latest
|
||||
permissions:
|
||||
contents: read
|
||||
issues: write
|
||||
outputs:
|
||||
addon: ${{ steps.result.outputs.addon }}
|
||||
category: ${{ steps.result.outputs.category }}
|
||||
confidence: ${{ steps.result.outputs.confidence }}
|
||||
existing_addon: ${{ steps.result.outputs.existing_addon }}
|
||||
risk: ${{ steps.result.outputs.risk }}
|
||||
steps:
|
||||
- name: Checkout repository
|
||||
uses: actions/checkout@v7
|
||||
|
||||
- name: Ensure AI labels exist
|
||||
env:
|
||||
GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
|
||||
REPO: ${{ github.repository }}
|
||||
run: |
|
||||
set -euo pipefail
|
||||
gh label create "ai: triaged" --repo "$REPO" --color "1d76db" --description "Issue classified by AI" --force
|
||||
gh label create "ai: answered" --repo "$REPO" --color "0e8a16" --description "Question answered automatically" --force
|
||||
gh label create "ai: needs-info" --repo "$REPO" --color "fbca04" --description "AI requested essential information" --force
|
||||
gh label create "ai: fix-proposed" --repo "$REPO" --color "c5def5" --description "AI recommends repository analysis" --force
|
||||
gh label create "ai: fix-approved" --repo "$REPO" --color "5319e7" --description "Maintainer approved an automated fix attempt" --force
|
||||
gh label create "ai: fixing" --repo "$REPO" --color "0052cc" --description "Automated fix attempt is running" --force
|
||||
gh label create "ai: pr-created" --repo "$REPO" --color "0e8a16" --description "Automated draft pull request created" --force
|
||||
gh label create "ai: maintainer-review" --repo "$REPO" --color "d93f0b" --description "Maintainer review is required" --force
|
||||
gh label create "ai: new-addon-request" --repo "$REPO" --color "ededed" --description "New add-on request; never implemented automatically" --force
|
||||
gh label create "ai-generated" --repo "$REPO" --color "bfdadc" --description "Changes generated with AI assistance" --force
|
||||
|
||||
- name: Triage issue with structured output
|
||||
id: result
|
||||
env:
|
||||
OPENAI_API_KEY: ${{ secrets.OPENAI_API_KEY }}
|
||||
ISSUE_AUTHOR: ${{ github.event.issue.user.login }}
|
||||
ISSUE_BODY: ${{ github.event.issue.body }}
|
||||
ISSUE_NUMBER: ${{ github.event.issue.number }}
|
||||
ISSUE_TITLE: ${{ github.event.issue.title }}
|
||||
run: |
|
||||
set -euo pipefail
|
||||
test -n "$OPENAI_API_KEY"
|
||||
|
||||
issue_body="${ISSUE_BODY:0:20000}"
|
||||
addon_catalog="$(
|
||||
find . -mindepth 2 -maxdepth 2 -type f \
|
||||
\( -name config.yaml -o -name config.json \) -printf '%h\n' |
|
||||
sed 's#^./##' | sort -u |
|
||||
jq -Rsc 'split("\n") | map(select(length > 0))'
|
||||
)"
|
||||
|
||||
jq -n \
|
||||
--arg model "$TRIAGE_MODEL" \
|
||||
--arg instructions "$(cat .github/ai/triage-prompt.md)" \
|
||||
--arg author "$ISSUE_AUTHOR" \
|
||||
--arg body "$issue_body" \
|
||||
--arg number "$ISSUE_NUMBER" \
|
||||
--arg title "$ISSUE_TITLE" \
|
||||
--argjson addon_catalog "$addon_catalog" \
|
||||
--slurpfile schema .github/ai/triage-schema.json \
|
||||
'{
|
||||
model: $model,
|
||||
store: false,
|
||||
max_output_tokens: 1200,
|
||||
reasoning: {effort: "low"},
|
||||
instructions: $instructions,
|
||||
input: (
|
||||
"Repository issue #" + $number + "\n" +
|
||||
"Author: " + $author + "\n" +
|
||||
"Title: " + $title + "\n\n" +
|
||||
"Existing add-on directories:\n" +
|
||||
($addon_catalog | tojson) + "\n\n" +
|
||||
"Body:\n" + $body
|
||||
),
|
||||
text: {
|
||||
format: {
|
||||
type: "json_schema",
|
||||
name: "issue_triage",
|
||||
strict: true,
|
||||
schema: $schema[0]
|
||||
}
|
||||
}
|
||||
}' > "$RUNNER_TEMP/openai-request.json"
|
||||
|
||||
curl --fail-with-body --retry 3 --max-time 120 \
|
||||
-H "Authorization: Bearer $OPENAI_API_KEY" \
|
||||
-H "Content-Type: application/json" \
|
||||
https://api.openai.com/v1/responses \
|
||||
--data-binary "@$RUNNER_TEMP/openai-request.json" \
|
||||
> "$RUNNER_TEMP/openai-response.json"
|
||||
|
||||
jq -r '
|
||||
[
|
||||
.output[]? |
|
||||
select(.type == "message") |
|
||||
.content[]? |
|
||||
select(.type == "output_text") |
|
||||
.text
|
||||
] | join("")
|
||||
' "$RUNNER_TEMP/openai-response.json" > "$RUNNER_TEMP/triage.json"
|
||||
|
||||
jq -e '
|
||||
(.category | type == "string") and
|
||||
(.confidence | type == "number") and
|
||||
(.risk | type == "string") and
|
||||
(.summary | type == "string") and
|
||||
(.response | type == "string") and
|
||||
(.missing_information | type == "array")
|
||||
' "$RUNNER_TEMP/triage.json" > /dev/null
|
||||
|
||||
category="$(jq -r '.category' "$RUNNER_TEMP/triage.json")"
|
||||
addon="$(jq -r '.addon // ""' "$RUNNER_TEMP/triage.json")"
|
||||
existing_addon=false
|
||||
if [[ -n "$addon" && "$addon" != */* && "$addon" != "." && "$addon" != ".." ]] &&
|
||||
[[ -f "$addon/config.yaml" || -f "$addon/config.json" ]]; then
|
||||
existing_addon=true
|
||||
fi
|
||||
|
||||
echo "addon=$addon" >> "$GITHUB_OUTPUT"
|
||||
echo "category=$category" >> "$GITHUB_OUTPUT"
|
||||
echo "confidence=$(jq -r '.confidence' "$RUNNER_TEMP/triage.json")" >> "$GITHUB_OUTPUT"
|
||||
echo "existing_addon=$existing_addon" >> "$GITHUB_OUTPUT"
|
||||
echo "risk=$(jq -r '.risk' "$RUNNER_TEMP/triage.json")" >> "$GITHUB_OUTPUT"
|
||||
|
||||
- name: Publish triage result
|
||||
if: github.event.action == 'opened' || github.event.action == 'reopened'
|
||||
env:
|
||||
EXISTING_ADDON: ${{ steps.result.outputs.existing_addon }}
|
||||
GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
|
||||
ISSUE_ACTION: ${{ github.event.action }}
|
||||
ISSUE_AUTHOR: ${{ github.event.issue.user.login }}
|
||||
ISSUE_NUMBER: ${{ github.event.issue.number }}
|
||||
ISSUE_UPDATED_AT: ${{ github.event.issue.updated_at }}
|
||||
REPO: ${{ github.repository }}
|
||||
REPOSITORY_OWNER: ${{ github.repository_owner }}
|
||||
run: |
|
||||
set -euo pipefail
|
||||
|
||||
marker="<!-- ai-triage:${ISSUE_UPDATED_AT} -->"
|
||||
existing="$(
|
||||
gh issue view "$ISSUE_NUMBER" --repo "$REPO" --json comments |
|
||||
jq --arg marker "$marker" \
|
||||
'[.comments[] | select(.body | contains($marker))] | length'
|
||||
)"
|
||||
[[ "$existing" -eq 0 ]] || exit 0
|
||||
|
||||
category="$(jq -r '.category' "$RUNNER_TEMP/triage.json")"
|
||||
confidence="$(jq -r '.confidence' "$RUNNER_TEMP/triage.json")"
|
||||
risk="$(jq -r '.risk' "$RUNNER_TEMP/triage.json")"
|
||||
summary="$(jq -r '.summary' "$RUNNER_TEMP/triage.json")"
|
||||
response="$(jq -r '.response' "$RUNNER_TEMP/triage.json")"
|
||||
|
||||
confident=false
|
||||
if awk -v confidence="$confidence" -v minimum="$MIN_CONFIDENCE" \
|
||||
'BEGIN { exit !(confidence >= minimum) }'; then
|
||||
confident=true
|
||||
fi
|
||||
|
||||
labels=("ai: triaged")
|
||||
heading="### AI triage"
|
||||
body="$response"
|
||||
|
||||
if [[ "$confident" != true ]]; then
|
||||
labels+=("ai: maintainer-review")
|
||||
body="**Low-confidence assessment (${confidence}):** ${summary}
|
||||
|
||||
A maintainer should review this issue before any automated action."
|
||||
else
|
||||
case "$category" in
|
||||
question)
|
||||
if [[ "$(jq -r '.safe_to_answer_automatically' "$RUNNER_TEMP/triage.json")" == true ]]; then
|
||||
labels+=("ai: answered")
|
||||
else
|
||||
labels+=("ai: maintainer-review")
|
||||
fi
|
||||
;;
|
||||
missing_information)
|
||||
heading="### Additional information required"
|
||||
labels+=("ai: needs-info")
|
||||
missing="$(
|
||||
jq -r '
|
||||
if (.missing_information | length) == 0 then
|
||||
""
|
||||
else
|
||||
"\n\n**Needed:**\n" +
|
||||
(.missing_information | map("- " + .) | join("\n"))
|
||||
end
|
||||
' "$RUNNER_TEMP/triage.json"
|
||||
)"
|
||||
body="${response}${missing}"
|
||||
;;
|
||||
bug)
|
||||
labels+=("bug" "ai: fix-proposed")
|
||||
body="**Assessment:** ${summary}
|
||||
|
||||
**Estimated risk:** ${risk}
|
||||
|
||||
${response}"
|
||||
if [[ "$ISSUE_AUTHOR" == "$REPOSITORY_OWNER" ]]; then
|
||||
labels+=("ai: fixing")
|
||||
body="${body}
|
||||
|
||||
Repository analysis and a draft fix attempt will start automatically because the issue was opened by the repository owner."
|
||||
else
|
||||
body="${body}
|
||||
|
||||
A maintainer can approve repository analysis and an automated draft fix attempt by adding the \`ai: fix-approved\` label."
|
||||
fi
|
||||
;;
|
||||
improvement)
|
||||
labels+=("enhancement")
|
||||
if [[ "$EXISTING_ADDON" == true ]]; then
|
||||
labels+=("ai: fix-proposed" "ai: fixing")
|
||||
body="**Assessment:** ${summary}
|
||||
|
||||
**Estimated risk:** ${risk}
|
||||
|
||||
${response}
|
||||
|
||||
This targets an existing add-on, so repository analysis and a validated draft fix attempt will start automatically."
|
||||
else
|
||||
labels+=("ai: maintainer-review")
|
||||
body="${response}
|
||||
|
||||
The referenced add-on directory could not be verified, so no automated implementation will start."
|
||||
fi
|
||||
;;
|
||||
new_addon_request)
|
||||
labels+=("enhancement" "ai: new-addon-request" "ai: maintainer-review")
|
||||
body="${response}
|
||||
|
||||
New add-on requests are never accepted or implemented automatically by this workflow. A maintainer must review the proposal manually."
|
||||
;;
|
||||
unsupported | spam)
|
||||
labels+=("ai: maintainer-review")
|
||||
;;
|
||||
esac
|
||||
fi
|
||||
|
||||
body="${marker}
|
||||
${heading}
|
||||
|
||||
${body}
|
||||
|
||||
<sub>Automated classification using \`${TRIAGE_MODEL}\`; confidence ${confidence}.</sub>"
|
||||
|
||||
for label in "${labels[@]}"; do
|
||||
if ! gh issue edit "$ISSUE_NUMBER" --repo "$REPO" --add-label "$label"; then
|
||||
if [[ "$label" == "bug" || "$label" == "enhancement" ]]; then
|
||||
echo "Optional repository label '$label' does not exist; continuing." >&2
|
||||
else
|
||||
exit 1
|
||||
fi
|
||||
fi
|
||||
done
|
||||
gh issue comment "$ISSUE_NUMBER" --repo "$REPO" --body "$body"
|
||||
|
||||
codex_fix:
|
||||
if: >-
|
||||
always() &&
|
||||
needs.detect_submitter.result == 'success' &&
|
||||
needs.detect_submitter.outputs.matched != 'true' &&
|
||||
needs.triage.result == 'success' &&
|
||||
fromJSON(needs.triage.outputs.confidence) >=
|
||||
fromJSON(vars.AI_MIN_CONFIDENCE || '0.80') &&
|
||||
(
|
||||
(
|
||||
needs.triage.outputs.category == 'improvement' &&
|
||||
needs.triage.outputs.existing_addon == 'true'
|
||||
) ||
|
||||
(
|
||||
needs.triage.outputs.category == 'bug' &&
|
||||
(
|
||||
(
|
||||
github.event.action == 'labeled' &&
|
||||
github.event.label.name == 'ai: fix-approved'
|
||||
) ||
|
||||
(
|
||||
(github.event.action == 'opened' || github.event.action == 'reopened') &&
|
||||
github.event.issue.user.login == github.repository_owner
|
||||
)
|
||||
)
|
||||
)
|
||||
)
|
||||
needs: [detect_submitter, triage]
|
||||
runs-on: ubuntu-latest
|
||||
permissions:
|
||||
contents: read
|
||||
issues: read
|
||||
pull-requests: read
|
||||
outputs:
|
||||
addon: ${{ steps.prepare.outputs.addon }}
|
||||
branch: ${{ steps.prepare.outputs.branch }}
|
||||
category: ${{ steps.prepare.outputs.category }}
|
||||
existing_pr: ${{ steps.prepare.outputs.existing_pr }}
|
||||
steps:
|
||||
- name: Checkout repository
|
||||
uses: actions/checkout@v7
|
||||
with:
|
||||
fetch-depth: 0
|
||||
persist-credentials: false
|
||||
|
||||
- name: Check for an existing pull request
|
||||
id: prepare
|
||||
env:
|
||||
GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
|
||||
ISSUE_NUMBER: ${{ github.event.issue.number }}
|
||||
REPO: ${{ github.repository }}
|
||||
TRIAGE_ADDON: ${{ needs.triage.outputs.addon }}
|
||||
TRIAGE_CATEGORY: ${{ needs.triage.outputs.category }}
|
||||
run: |
|
||||
set -euo pipefail
|
||||
branch="ai/issue-${ISSUE_NUMBER}"
|
||||
existing_pr="$(
|
||||
gh pr list --repo "$REPO" --state open --head "$branch" \
|
||||
--json url --jq '.[0].url // ""'
|
||||
)"
|
||||
echo "addon=$TRIAGE_ADDON" >> "$GITHUB_OUTPUT"
|
||||
echo "branch=$branch" >> "$GITHUB_OUTPUT"
|
||||
echo "category=$TRIAGE_CATEGORY" >> "$GITHUB_OUTPUT"
|
||||
echo "existing_pr=$existing_pr" >> "$GITHUB_OUTPUT"
|
||||
|
||||
- name: Build isolated issue context
|
||||
if: steps.prepare.outputs.existing_pr == ''
|
||||
env:
|
||||
GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
|
||||
ISSUE_NUMBER: ${{ github.event.issue.number }}
|
||||
REPO: ${{ github.repository }}
|
||||
TRIAGE_ADDON: ${{ needs.triage.outputs.addon }}
|
||||
TRIAGE_CATEGORY: ${{ needs.triage.outputs.category }}
|
||||
TRIAGE_RISK: ${{ needs.triage.outputs.risk }}
|
||||
run: |
|
||||
set -euo pipefail
|
||||
gh issue view "$ISSUE_NUMBER" --repo "$REPO" \
|
||||
--json number,title,body,author,comments,labels,url |
|
||||
jq \
|
||||
--arg addon "$TRIAGE_ADDON" \
|
||||
--arg category "$TRIAGE_CATEGORY" \
|
||||
--arg risk "$TRIAGE_RISK" \
|
||||
'. + {automation_triage: {addon: $addon, category: $category, risk: $risk}}' \
|
||||
> ai-issue-context.json
|
||||
cp .github/ai/fix-prompt.md codex-prompt.md
|
||||
|
||||
- name: Run Codex
|
||||
id: codex
|
||||
if: steps.prepare.outputs.existing_pr == ''
|
||||
uses: openai/codex-action@v1
|
||||
with:
|
||||
openai-api-key: ${{ secrets.OPENAI_API_KEY }}
|
||||
prompt-file: codex-prompt.md
|
||||
output-file: codex-result.md
|
||||
sandbox: workspace-write
|
||||
safety-strategy: drop-sudo
|
||||
allow-users: "*"
|
||||
model: ${{ vars.OPENAI_FIX_MODEL }}
|
||||
effort: high
|
||||
|
||||
- name: Package proposed patch
|
||||
if: steps.prepare.outputs.existing_pr == ''
|
||||
run: |
|
||||
set -euo pipefail
|
||||
test -f codex-result.md
|
||||
cp codex-result.md "$RUNNER_TEMP/codex-result.md"
|
||||
rm -f ai-issue-context.json codex-prompt.md codex-result.md
|
||||
git add -A
|
||||
git diff --cached --binary --full-index > "$RUNNER_TEMP/ai.patch"
|
||||
git reset
|
||||
cp "$RUNNER_TEMP/ai.patch" ai.patch
|
||||
cp "$RUNNER_TEMP/codex-result.md" codex-result.md
|
||||
|
||||
- name: Upload proposed patch
|
||||
if: steps.prepare.outputs.existing_pr == ''
|
||||
uses: actions/upload-artifact@v4
|
||||
with:
|
||||
name: ai-issue-${{ github.event.issue.number }}-${{ github.run_id }}
|
||||
path: |
|
||||
ai.patch
|
||||
codex-result.md
|
||||
if-no-files-found: error
|
||||
retention-days: 3
|
||||
|
||||
report_codex_failure:
|
||||
if: always() && needs.codex_fix.result == 'failure'
|
||||
needs: codex_fix
|
||||
runs-on: ubuntu-latest
|
||||
permissions:
|
||||
issues: write
|
||||
steps:
|
||||
- name: Report failed automated analysis
|
||||
env:
|
||||
GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
|
||||
ISSUE_NUMBER: ${{ github.event.issue.number }}
|
||||
REPO: ${{ github.repository }}
|
||||
RUN_URL: https://github.com/${{ github.repository }}/actions/runs/${{ github.run_id }}
|
||||
run: |
|
||||
set -euo pipefail
|
||||
for label in "ai: fix-approved" "ai: fix-proposed" "ai: fixing"; do
|
||||
gh issue edit "$ISSUE_NUMBER" --repo "$REPO" \
|
||||
--remove-label "$label" || true
|
||||
done
|
||||
gh issue edit "$ISSUE_NUMBER" --repo "$REPO" \
|
||||
--add-label "ai: maintainer-review"
|
||||
gh issue comment "$ISSUE_NUMBER" --repo "$REPO" --body \
|
||||
"### Automated analysis failed
|
||||
|
||||
The automated repository analysis did not complete, so no pull request was created. A maintainer should review the issue and the [workflow run](${RUN_URL})."
|
||||
|
||||
publish_fix:
|
||||
if: >-
|
||||
always() &&
|
||||
needs.codex_fix.result == 'success' &&
|
||||
needs.codex_fix.outputs.existing_pr == ''
|
||||
needs: codex_fix
|
||||
runs-on: ubuntu-latest
|
||||
permissions:
|
||||
contents: write
|
||||
issues: write
|
||||
pull-requests: write
|
||||
steps:
|
||||
- name: Checkout repository
|
||||
uses: actions/checkout@v7
|
||||
with:
|
||||
fetch-depth: 0
|
||||
persist-credentials: false
|
||||
|
||||
- name: Download proposed patch
|
||||
uses: actions/download-artifact@v4
|
||||
with:
|
||||
name: ai-issue-${{ github.event.issue.number }}-${{ github.run_id }}
|
||||
|
||||
- name: Apply patch
|
||||
run: |
|
||||
set -euo pipefail
|
||||
if [[ -s ai.patch ]]; then
|
||||
git apply --index --3way ai.patch
|
||||
fi
|
||||
rm -f ai.patch codex-result.md
|
||||
|
||||
- name: Restore Codex report
|
||||
uses: actions/download-artifact@v4
|
||||
with:
|
||||
name: ai-issue-${{ github.event.issue.number }}-${{ github.run_id }}
|
||||
path: ${{ runner.temp }}/ai-result
|
||||
|
||||
- name: Ensure publication labels exist
|
||||
env:
|
||||
GH_TOKEN: ${{ secrets.AI_PR_TOKEN || secrets.GITHUB_TOKEN }}
|
||||
REPO: ${{ github.repository }}
|
||||
run: |
|
||||
set -euo pipefail
|
||||
gh label create "ai: maintainer-review" --repo "$REPO" --color "d93f0b" --description "Maintainer review is required" --force
|
||||
gh label create "ai: pr-created" --repo "$REPO" --color "0e8a16" --description "Automated draft pull request created" --force
|
||||
gh label create "ai-generated" --repo "$REPO" --color "bfdadc" --description "Changes generated with AI assistance" --force
|
||||
|
||||
- name: Validate proposed patch
|
||||
id: validation
|
||||
env:
|
||||
AI_EXPECTED_ADDON: ${{ needs.codex_fix.outputs.addon }}
|
||||
AI_MAX_CHANGED_FILES: ${{ vars.AI_MAX_CHANGED_FILES || '25' }}
|
||||
AI_MAX_CHANGED_LINES: ${{ vars.AI_MAX_CHANGED_LINES || '2000' }}
|
||||
AI_REQUEST_CATEGORY: ${{ needs.codex_fix.outputs.category }}
|
||||
run: |
|
||||
set -o pipefail
|
||||
bash .github/scripts/validate_ai_patch.sh origin/master 2>&1 |
|
||||
tee "$RUNNER_TEMP/ai-validation.log"
|
||||
|
||||
- name: Report validation failure
|
||||
if: failure() && steps.validation.outcome == 'failure'
|
||||
env:
|
||||
GH_TOKEN: ${{ secrets.AI_PR_TOKEN || secrets.GITHUB_TOKEN }}
|
||||
ISSUE_NUMBER: ${{ github.event.issue.number }}
|
||||
REPO: ${{ github.repository }}
|
||||
RUN_URL: https://github.com/${{ github.repository }}/actions/runs/${{ github.run_id }}
|
||||
run: |
|
||||
set -euo pipefail
|
||||
report="$(cat "$RUNNER_TEMP/ai-result/codex-result.md" 2>/dev/null || true)"
|
||||
validation="$(tail -n 80 "$RUNNER_TEMP/ai-validation.log" 2>/dev/null || true)"
|
||||
body="### Automated fix blocked by validation
|
||||
|
||||
${report}
|
||||
|
||||
<details>
|
||||
<summary>Validation output</summary>
|
||||
|
||||
\`\`\`text
|
||||
${validation}
|
||||
\`\`\`
|
||||
</details>
|
||||
|
||||
[Open the workflow run](${RUN_URL})"
|
||||
for label in "ai: fix-approved" "ai: fix-proposed" "ai: fixing"; do
|
||||
gh issue edit "$ISSUE_NUMBER" --repo "$REPO" \
|
||||
--remove-label "$label" || true
|
||||
done
|
||||
gh issue edit "$ISSUE_NUMBER" --repo "$REPO" \
|
||||
--add-label "ai: maintainer-review"
|
||||
gh issue comment "$ISSUE_NUMBER" --repo "$REPO" --body "$body"
|
||||
|
||||
- name: Report no safe change
|
||||
if: steps.validation.outputs.has_changes == 'false'
|
||||
env:
|
||||
GH_TOKEN: ${{ secrets.AI_PR_TOKEN || secrets.GITHUB_TOKEN }}
|
||||
ISSUE_NUMBER: ${{ github.event.issue.number }}
|
||||
REPO: ${{ github.repository }}
|
||||
run: |
|
||||
set -euo pipefail
|
||||
report="$(cat "$RUNNER_TEMP/ai-result/codex-result.md")"
|
||||
body="### Automated repository analysis
|
||||
|
||||
${report}
|
||||
|
||||
No draft pull request was created because Codex produced no repository change."
|
||||
for label in "ai: fix-approved" "ai: fix-proposed" "ai: fixing"; do
|
||||
gh issue edit "$ISSUE_NUMBER" --repo "$REPO" \
|
||||
--remove-label "$label" || true
|
||||
done
|
||||
gh issue edit "$ISSUE_NUMBER" --repo "$REPO" \
|
||||
--add-label "ai: maintainer-review"
|
||||
gh issue comment "$ISSUE_NUMBER" --repo "$REPO" --body "$body"
|
||||
|
||||
- name: Commit and push validated patch
|
||||
if: steps.validation.outputs.has_changes == 'true'
|
||||
env:
|
||||
BRANCH: ${{ needs.codex_fix.outputs.branch }}
|
||||
GH_TOKEN: ${{ secrets.AI_PR_TOKEN || secrets.GITHUB_TOKEN }}
|
||||
ISSUE_NUMBER: ${{ github.event.issue.number }}
|
||||
run: |
|
||||
set -euo pipefail
|
||||
git config user.name "github-actions[bot]"
|
||||
git config user.email "41898282+github-actions[bot]@users.noreply.github.com"
|
||||
git fetch origin "$BRANCH:refs/remotes/origin/$BRANCH" || true
|
||||
git checkout -B "$BRANCH"
|
||||
git add -A
|
||||
git commit -m "fix: address issue #${ISSUE_NUMBER}"
|
||||
gh auth setup-git
|
||||
git push --force-with-lease --set-upstream origin "$BRANCH"
|
||||
|
||||
- name: Create draft pull request
|
||||
id: pr
|
||||
if: steps.validation.outputs.has_changes == 'true'
|
||||
env:
|
||||
BRANCH: ${{ needs.codex_fix.outputs.branch }}
|
||||
GH_TOKEN: ${{ secrets.AI_PR_TOKEN || secrets.GITHUB_TOKEN }}
|
||||
ISSUE_NUMBER: ${{ github.event.issue.number }}
|
||||
REPO: ${{ github.repository }}
|
||||
run: |
|
||||
set -euo pipefail
|
||||
report="$(cat "$RUNNER_TEMP/ai-result/codex-result.md")"
|
||||
cat > "$RUNNER_TEMP/pr-body.md" <<EOF
|
||||
## Summary
|
||||
|
||||
Automated analysis and validated minimal fix for #${ISSUE_NUMBER}.
|
||||
|
||||
${report}
|
||||
|
||||
## Safety and review
|
||||
|
||||
- The issue content was treated as untrusted input.
|
||||
- Codex had no repository write token.
|
||||
- A fresh job applied and validated the patch.
|
||||
- This pull request is intentionally a draft and will not be merged automatically.
|
||||
|
||||
Closes #${ISSUE_NUMBER}
|
||||
EOF
|
||||
|
||||
pr_url="$(
|
||||
gh pr create \
|
||||
--repo "$REPO" \
|
||||
--base master \
|
||||
--head "$BRANCH" \
|
||||
--draft \
|
||||
--title "fix: address issue #${ISSUE_NUMBER}" \
|
||||
--body-file "$RUNNER_TEMP/pr-body.md"
|
||||
)"
|
||||
echo "url=$pr_url" >> "$GITHUB_OUTPUT"
|
||||
|
||||
pr_number="${pr_url##*/}"
|
||||
gh pr edit "$pr_number" --repo "$REPO" --add-label "ai-generated"
|
||||
|
||||
- name: Update issue with analysis and pull request
|
||||
if: steps.validation.outputs.has_changes == 'true'
|
||||
env:
|
||||
GH_TOKEN: ${{ secrets.AI_PR_TOKEN || secrets.GITHUB_TOKEN }}
|
||||
ISSUE_NUMBER: ${{ github.event.issue.number }}
|
||||
PR_URL: ${{ steps.pr.outputs.url }}
|
||||
REPO: ${{ github.repository }}
|
||||
run: |
|
||||
set -euo pipefail
|
||||
report="$(cat "$RUNNER_TEMP/ai-result/codex-result.md")"
|
||||
body="### Automated fix prepared
|
||||
|
||||
${report}
|
||||
|
||||
**Draft pull request:** ${PR_URL}
|
||||
|
||||
The pull request remains in draft pending human review and CI."
|
||||
for label in "ai: fix-approved" "ai: fix-proposed" "ai: fixing"; do
|
||||
gh issue edit "$ISSUE_NUMBER" --repo "$REPO" \
|
||||
--remove-label "$label" || true
|
||||
done
|
||||
gh issue edit "$ISSUE_NUMBER" --repo "$REPO" \
|
||||
--add-label "ai: pr-created"
|
||||
gh issue comment "$ISSUE_NUMBER" --repo "$REPO" --body "$body"
|
||||
Reference in New Issue
Block a user