cloudflare__vinext/.github/workflows/nextjs-tracker.yml

name: Next.js Tracker

on:
  schedule:
    - cron: "0 8 * * *" # daily at 08:00 UTC
  workflow_dispatch:
    inputs:
      since_hours:
        description: "How many hours back to look for commits (default: 24)"
        required: false
        default: "24"
      dry_run:
        description: "Dry run: print what issues would be opened without creating them"
        type: boolean
        required: false
        default: false

concurrency:
  group: nextjs-tracker
  cancel-in-progress: true

jobs:
  track:
    if: github.repository_owner == 'cloudflare'
    runs-on: ubuntu-latest
    timeout-minutes: 30
    permissions:
      id-token: write
      contents: read
      issues: write
    steps:
      - name: Checkout repository
        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
        with:
          persist-credentials: false

      - uses: ./.github/actions/setup

      - name: Fetch recent Next.js canary commits
        id: commits
        env:
          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          SINCE_HOURS: ${{ github.event.inputs.since_hours || '24' }}
        run: |
          HOURS="$SINCE_HOURS"
          SINCE=$(date -u -d "${HOURS} hours ago" +%Y-%m-%dT%H:%M:%SZ)

          echo "Fetching Next.js canary commits since $SINCE"

          # Fetch commit list only (messages + metadata). The agent will fetch
          # full diffs via gh api for any commits it finds potentially relevant,
          # rather than us pre-fetching all of them upfront.
          gh api \
            "repos/vercel/next.js/commits?sha=canary&since=${SINCE}&per_page=100" \
            --jq '[.[] | {
              sha: .sha,
              message: .commit.message,
              author: .commit.author.name,
              date: .commit.author.date,
              url: .html_url
            }]' > /tmp/nextjs-commits.json

          COUNT=$(jq length /tmp/nextjs-commits.json)
          echo "Found $COUNT commits"

          if [ "$COUNT" -eq 0 ]; then
            echo "has_commits=false" >> "$GITHUB_OUTPUT"
          else
            echo "has_commits=true" >> "$GITHUB_OUTPUT"
          fi

      - name: Build tracker prompt
        id: build_prompt
        if: steps.commits.outputs.has_commits == 'true'
        env:
          DRY_RUN_INPUT: ${{ github.event.inputs.dry_run || 'false' }}
        run: |
          DRY_RUN="$DRY_RUN_INPUT"
          COMMITS=$(cat /tmp/nextjs-commits.json)

          if [ "$DRY_RUN" = "true" ]; then
            MODE_INSTRUCTION="You are running in DRY RUN mode. DO NOT create any GitHub issues. Instead, print a structured report to stdout."
            ACTION_INSTRUCTION="Print each relevant change in this format:

          ---
          WOULD OPEN ISSUE: <title>
          Priority: Breaking | Important | Minor
          Commits: <sha(s)>
          Summary: <2-3 sentences>
          Files affected in vinext: <file paths>
          ---

          At the end, print: \"X relevant changes found out of Y total commits. Z issues would be opened.\""
          else
            MODE_INSTRUCTION="Create GitHub issues for relevant changes."
            ACTION_INSTRUCTION="Follow your agent configuration exactly:
          - Check for duplicate open issues before creating new ones
          - Use the exact issue format specified in your config
          - Apply the label nextjs-tracking to every issue
          - If nothing is relevant, do nothing"
          fi

          {
            echo 'prompt<<PROMPT_DELIM'
            cat << PROMPT_EOF
          ${MODE_INSTRUCTION}

          HERE ARE THE COMMITS (already fetched, do not read any files):

          ${COMMITS}

          INSTRUCTIONS:
          1. Triage each commit from its message. Skip obvious non-relevant commits (docs, turbopack, tests, version bumps, telemetry, CLI-only, lint/format).
          2. For potentially relevant commits, fetch the full diff: gh api repos/vercel/next.js/commits/<sha>
          3. Classify and act.

          ${ACTION_INSTRUCTION}

          IMPORTANT: Do NOT explore the local codebase. Do NOT read local files. Do NOT launch subagents. All context you need about vinext is in your agent configuration. Start classifying commits immediately.
          PROMPT_EOF
            echo 'PROMPT_DELIM'
          } >> "$GITHUB_OUTPUT"

      - name: Run Next.js Tracker
        if: steps.commits.outputs.has_commits == 'true'
        uses: ask-bonk/ask-bonk/github@d00cbcf581a5463f7adc2d81e470234b1727f8dd # main
        env:
          CLOUDFLARE_ACCOUNT_ID: ${{ secrets.CF_AI_GATEWAY_ACCOUNT_ID }}
          CLOUDFLARE_GATEWAY_ID: ${{ secrets.CF_AI_GATEWAY_NAME }}
          CLOUDFLARE_API_TOKEN: ${{ secrets.CF_AI_GATEWAY_TOKEN }}
          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          OPENCODE_CONFIG_CONTENT: '{"permission":{"external_directory":{"/home/runner/work/**":"allow"},"edit":"deny","question":"deny","doom_loop":"deny"}}'
        with:
          oidc_base_url: https://ask-bonk.cloudflare-exponent.workers.dev/auth
          model: "cloudflare-ai-gateway/openai/gpt-5.6-terra"
          variant: "high"
          permissions: write
          opencode_dev: true
          opencode_version: latest
          agent: nextjs-tracker
          prompt: ${{ steps.build_prompt.outputs.prompt }}

      - name: Skip (no commits)
        if: steps.commits.outputs.has_commits == 'false'
        env:
          SINCE_HOURS: ${{ github.event.inputs.since_hours || '24' }}
        run: echo "No Next.js canary commits in the last $SINCE_HOURS hours. Nothing to do."