max-sixty__worktrunk/.github/workflows/tend-ci-fix.yaml

# Generated by tend 0.2.7. Regenerate with: uvx tend@latest init
#
# Do not edit this file directly — it will be overwritten on regeneration.
# To customize behavior, edit the relevant skill (for example,
# `running-tend`) in this repo's .claude/skills/ directory, or open an issue at
# https://github.com/max-sixty/tend/issues for changes that need to
# happen upstream in the tend-ci-runner plugin.

name: tend-ci-fix
on:
  workflow_run:
    workflows: ["ci", "coverage", "affected", "publish-docs", "nightly"]
    types: [completed]
    branches: ["main"]

jobs:
  fix-ci:
    if: github.repository_owner == 'max-sixty' && contains(fromJSON('["failure", "cancelled"]'), github.event.workflow_run.conclusion)
    concurrency:
      # A red branch fails every push that follows, each on its own commit, so
      # one session per branch — not per commit — is what collapses the burst.
      # The watched workflow is in the key too: a red `publish-site` must not
      # starve behind a stream of red `ci`. Never cancel — a running session
      # may already have pushed a branch or opened a PR. Default queue depth
      # is right: the newest failure replaces the pending one.
      group: ${{ github.workflow }}-${{ github.event.workflow_run.name }}-${{ github.event.workflow_run.head_branch }}
      cancel-in-progress: false
    runs-on: ubuntu-24.04
    environment:
      name: tend
      deployment: false
    permissions:
      contents: write
      pull-requests: write
      actions: read
    steps:
      - name: Check whether tend is enabled
        id: tend_enabled
        env:
          GH_TOKEN: ${{ github.token }}
        run: |
          gh api \
            -H "Accept: application/vnd.github.raw+json" \
            "repos/$GITHUB_REPOSITORY/contents/.config/tend.yaml" \
            > "$RUNNER_TEMP/tend.yaml"
          ruby - "$RUNNER_TEMP/tend.yaml" <<'RUBY' >> "$GITHUB_OUTPUT"
          # Inspect the parsed YAML node so the extra YAML 1.1 boolean words (yes/no/on/off)
          # do not diverge from the YAML 1.2 parser used by `tend init`.
          require "psych"

          path = ARGV.fetch(0)
          documents = Psych.parse_stream(File.read(path, mode: "r:bom|utf-8")).children
          unless documents.length == 1
            abort "tend config must contain exactly one YAML document"
          end

          mapping = documents.first.root
          unless mapping.is_a?(Psych::Nodes::Mapping)
            abort "tend config must contain a YAML mapping"
          end

          def has_yaml_merge_key?(node)
            case node
            when Psych::Nodes::Mapping
              node.children.each_slice(2).any? do |key, value|
                (key.is_a?(Psych::Nodes::Scalar) && key.plain && key.value == "<<") ||
                  has_yaml_merge_key?(key) || has_yaml_merge_key?(value)
              end
            when Psych::Nodes::Sequence
              node.children.any? { |value| has_yaml_merge_key?(value) }
            else
              false
            end
          end

          if has_yaml_merge_key?(mapping)
            abort "tend config: YAML merge keys (<<) are not supported"
          end

          matches = mapping.children.each_slice(2).select do |key, _value|
            key.is_a?(Psych::Nodes::Scalar) && key.value == "enabled"
          end
          abort "tend config: enabled must appear at most once" if matches.length > 1

          value = matches.dig(0, 1)
          enabled = true
          if value
            bool_tag = value.respond_to?(:tag) && value.tag == "tag:yaml.org,2002:bool"
            literal = value.value.downcase if value.is_a?(Psych::Nodes::Scalar)
            unless value.is_a?(Psych::Nodes::Scalar) &&
                (value.plain || bool_tag) &&
                ["true", "false"].include?(literal)
              abort "tend config: enabled must be true or false"
            end
            enabled = literal == "true"
          end

          puts "enabled=#{enabled}"

          unless enabled
            warn "::notice title=Tend disabled::The tend config sets enabled: false; skipping this job"
          end
          RUBY
      - uses: actions/checkout@v7
        if: steps.tend_enabled.outputs.enabled == 'true'
        with:
          ref: main
          fetch-depth: 0
          fetch-tags: true
          token: ${{ secrets.TEND_BOT_TOKEN }}

      - uses: ./.github/actions/tend-setup
        if: steps.tend_enabled.outputs.enabled == 'true'

      - uses: max-sixty/tend/claude@0.2.7
        if: steps.tend_enabled.outputs.enabled == 'true'
        with:
          github_token: ${{ secrets.TEND_BOT_TOKEN }}
          claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
          anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
          bot_name: worktrunk-bot
          model: opus
          checkout_mode: base
          base_branch: ${{ github.event.repository.default_branch }}
          sandbox_setup: |2
            mkdir -p ~/.local/bin
            uv tool install --quiet pre-commit
            for t in cargo-insta cargo-nextest pre-commit nu nix; do command -v "$t" >/dev/null || { echo "::error::tend sandbox is missing $t; see Sandbox toolchain in .github/CLAUDE.md"; exit 1; }; done
          prompt: |2
            /tend-ci-runner:ci-fix ${{ github.event.workflow_run.id }}
            - Run URL: ${{ github.event.workflow_run.html_url }}
            - Conclusion: ${{ github.event.workflow_run.conclusion }}
            - Commit: ${{ github.event.workflow_run.head_sha }}
            - Commit message: ${{ github.event.workflow_run.head_commit.message }}