Redesign Discord notification infrastructure by robbykap · Pull Request #7 · BYU-CS-Course-Ops/utils

robbykap · 2026-03-31T05:39:09Z

Summary

Redesigns Discord notifications into a shared message-oriented system, keeps PyPI on the embed path, and upgrades Canvas and Docker notifications to a cleaner hybrid layout with a compact metadata embed plus markdown body content.

What changed

Canvas and Docker notifications now send a colored metadata embed plus markdown sections for status, review items, published items, failed images, errors, and run links
Discord delivery now supports ordered webhook messages, plain-text section chunking, legacy embed chunking, and first-chunk embed retention for hybrid messages
Reusable course workflows now require course_name and course_url, pass github.ref_name, and support utils_ref for smoke testing reusable workflows safely
Notification dependencies now install markdowndata anywhere shared formatting is used
PyPI/OIDC work from this PR branch stays intact while using the newer shared notification message model

Downstream PRs

PyPI OIDC PRs

Merge these alongside the utils OIDC changes:

Repo	PR	Status
mdx-canvas	#133	OIDC migration
markdowndata	#7	OIDC migration
byu_pytest_utils	#52	OIDC migration

Course workflow input PRs

These add the new required course_name and course_url inputs to caller workflows before the updated reusable course workflows land on main:

Repo	PR	Status
CS235-course-content	#256	Add required course notification inputs
CS110-course-content	#56	Add required course notification inputs
CS312-course-content	#215	Add required course notification inputs
CS301R-Agent-Engineering-Course-Content	#40	Add required course notification inputs

Test harness

testkapua/testing-repo was updated directly on main and used for end-to-end Canvas and Docker smoke tests.

Caller changes required

PyPI workflows

The poetry_publish.yaml workflow uses trusted publishers instead of username/password secrets.

Configure a trusted publisher on PyPI for each package repo
Add workflow-level permissions: id-token: write
Remove pypi_user and pypi_password from caller workflow secrets

Canvas / Docker workflows

Canvas and Docker callers now need these required inputs:

with:
  course_id: "235"
  course_name: "CS 235 Spring 2025"
  course_url: "https://byu.instructure.com/courses/12345"

utils_ref remains optional and is only intended for smoke tests against a non-main utils branch.

Verified

Canvas notification — end-to-end tested via testkapua/testing-repo with the hybrid embed + markdown layout
Docker notification — end-to-end tested via testkapua/testing-repo on both workflow_dispatch and push-triggered change paths
Course notification formatting and chunking — PYTHONPATH=. pytest -q passes with 25 tests
Legacy PyPI embed chunking coverage remains in place
OIDC publish — still needs trusted publishers configured on real package repos

Post-merge checklist

Merge the PyPI OIDC caller PRs: mdx-canvas#133, markdowndata#7, byu_pytest_utils#52
Merge the course caller PRs: CS235-course-content#256, CS110-course-content#56, CS312-course-content#215, CS301R-Agent-Engineering-Course-Content#40
Remove PYPI_USER and PYPI_PASSWORD secrets from the package repos after OIDC migration
Retest a real package publish after trusted publishers are configured

This reverts commit c61eb59.

- Canvas: Add course name/link, resource type summary counts, move Content to Review above Deployed Content for skimmability - Docker: Add course name/link, summary counts, move Failed Images above Updated Images - PyPi: Add PyPI package link, version transition display (old -> new), migrate to OIDC trusted publishers (pypa/gh-action-pypi-publish) - Fix check_toml.yaml to explicitly output uped_toml=false on failure - Fix docker_automation.yaml uses: path to full repo reference - Fix github.ref -> github.ref_name for clean branch display - Quote all CLI args in send-pypi-notification action - Expose pypi_version output from check_toml workflow - Add shared helpers: build_resource_summary, resource_count_fields, course_info_field - Add pypi_name column to style.md for URL generation Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

All composite action uses: references were still pointing to canvas-notification-updates instead of this branch. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

- Use jq '// empty' to avoid outputting literal "null" string - Only pass icon_url to set_author when it's truthy - Prevents Discord 400 errors from invalid author icon URLs Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Reusable workflows (workflow_call) don't support workflow-level permissions. Move id-token: write to the poetry-publish job that needs it for OIDC trusted publisher auth. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

The ./ relative path resolves to the calling repo, not this repo, causing startup_failure when called cross-repo. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

check_toml.yaml doesn't declare any secrets, so inherit may cause validation issues on the nested reusable workflow call. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Nested reusable workflow calls across repos cause startup_failure. Inlining eliminates the nesting and removes duplicated poetry install/build steps that ran in both jobs. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

All utils repo checkouts now specify the branch ref so the notifications package is available. PyPI version query uses jq '// empty' to avoid passing literal 'null' strings. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

The notifications package imports markdowndata for style parsing, but it wasn't being installed in pip install steps. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Calling workflows must also grant id-token: write permission for the trusted publisher flow to work. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Replace claude/wonderful-lovelace refs with main for all workflow checkout steps and composite action references. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Document the PyPI OIDC trusted publisher migration, add optional course_info_path/global_args_path to Docker example, and include post-merge cleanup notes. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Replace pypi_user/pypi_password secrets with OIDC trusted publisher authentication. Add permissions: id-token: write at workflow level as required by the reusable workflow in BYU-CS-Course-Ops/utils. See: BYU-CS-Course-Ops/utils#7

The push trigger is temporarily removed to prevent failed workflow runs on merge. Re-enable it after: 1. BYU-CS-Course-Ops/utils#7 is merged 2. A trusted publisher is configured on pypi.org for this repo

robbykap · 2026-04-01T19:55:52Z

Superseded by new PR from codex-plain-text-notifications branch

robbykap and others added 26 commits February 13, 2026 12:16

Major refactor for notification system

6ed7a0a

Fix action paths

27aa6c6

Update mdxcanvas_automation.yaml

963d88b

Fix paths

c61eb59

Revert "Fix paths"

9ad268b

This reverts commit c61eb59.

Update mdxcanvas_automation.yaml

71fea04

Update mdxcanvas_automation.yaml

9c33d8e

Update mdxcanvas_automation.yaml

fee6ec8

Update mdxcanvas_automation.yaml

3e2fb33

Update mdxcanvas_automation.yaml

0009f21

Update formatting_utils.py

191a83a

Update formatting_utils.py

3e3834b

Update formatting_utils.py

7d94cf4

Fix action references to use claude/wonderful-lovelace branch

f57e22e

All composite action uses: references were still pointing to canvas-notification-updates instead of this branch. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Handle null avatar URLs gracefully

d99d6b9

- Use jq '// empty' to avoid outputting literal "null" string - Only pass icon_url to set_author when it's truthy - Prevents Discord 400 errors from invalid author icon URLs Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Move permissions from workflow level to job level

2e5e4ee

Reusable workflows (workflow_call) don't support workflow-level permissions. Move id-token: write to the poetry-publish job that needs it for OIDC trusted publisher auth. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Fix nested reusable workflow: use full repo ref for check_toml.yaml

a8d697f

The ./ relative path resolves to the calling repo, not this repo, causing startup_failure when called cross-repo. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Remove secrets: inherit from nested check_toml call

e925267

check_toml.yaml doesn't declare any secrets, so inherit may cause validation issues on the nested reusable workflow call. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Test: remove permissions block to debug startup_failure

865e68a

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Fix utils checkout refs and null PyPI version handling

2c43a7a

All utils repo checkouts now specify the branch ref so the notifications package is available. PyPI version query uses jq '// empty' to avoid passing literal 'null' strings. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Add markdowndata dependency to all notification workflow steps

8e0a7ca

The notifications package imports markdowndata for style parsing, but it wasn't being installed in pip install steps. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Restore id-token: write permission for OIDC PyPI publishing

3d0cd73

Calling workflows must also grant id-token: write permission for the trusted publisher flow to work. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Update all branch refs to @main for production

1d87c4e

Replace claude/wonderful-lovelace refs with main for all workflow checkout steps and composite action references. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Update README with OIDC migration guide and new workflow inputs

6871369

Document the PyPI OIDC trusted publisher migration, add optional course_info_path/global_args_path to Docker example, and include post-merge cleanup notes. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

robbykap mentioned this pull request Apr 1, 2026

Migrate PyPI publishing to OIDC trusted publishers BYU-CS-Course-Ops/mdx-canvas#133

Open

This was referenced Apr 1, 2026

Migrate PyPI publishing to OIDC trusted publishers BYU-CS-Course-Ops/markdowndata#7

Open

Migrate PyPI publishing to OIDC trusted publishers BYU-CS-Course-Ops/byu_pytest_utils#52

Open

robbykap added 7 commits April 1, 2026 12:10

Update .gitignore

7b7ccaf

Redesign course notifications as plain text

38f5f4a

Fix reusable workflow checkout refs

556616a

Add explicit utils_ref for reusable workflow tests

1508b63

Install markdowndata for course notifications

a0b4b37

Polish Discord course notification layout

0ddf516

Merge updated Discord notification fixes

7b00ab6

robbykap closed this Apr 1, 2026

robbykap deleted the claude/wonderful-lovelace branch April 1, 2026 19:56

robbykap mentioned this pull request Apr 1, 2026

Redesign Discord notification system with rich embeds #8

Merged

8 tasks

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Redesign Discord notification infrastructure#7

Redesign Discord notification infrastructure#7
robbykap wants to merge 33 commits intomainfrom
claude/wonderful-lovelace

robbykap commented Mar 31, 2026 •

edited

Loading

Uh oh!

robbykap commented Apr 1, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

robbykap commented Mar 31, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary

What changed

Downstream PRs

PyPI OIDC PRs

Course workflow input PRs

Test harness

Caller changes required

PyPI workflows

Canvas / Docker workflows

Verified

Post-merge checklist

Uh oh!

robbykap commented Apr 1, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

robbykap commented Mar 31, 2026 •

edited

Loading