sourceos-shell/.github/workflows/agentic-shell.yml at main · SourceOS-Linux/sourceos-shell · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
name: agentic-shell

on:
  pull_request:
    paths:
      - 'schemas/agentic-task.schema.json'
      - 'schemas/agentic-workset.schema.json'
      - 'schemas/agentic-evidence-packet.schema.json'
      - 'schemas/agentic-recommended-action.schema.json'
      - 'examples/agentic-shell/**'
      - 'scripts/validate_agentic_shell.py'
      - '.github/workflows/agentic-shell.yml'
  push:
    branches:
      - main
    paths:
      - 'schemas/agentic-task.schema.json'
      - 'schemas/agentic-workset.schema.json'
      - 'schemas/agentic-evidence-packet.schema.json'
      - 'schemas/agentic-recommended-action.schema.json'
      - 'examples/agentic-shell/**'
      - 'scripts/validate_agentic_shell.py'
      - '.github/workflows/agentic-shell.yml'
  workflow_dispatch:

permissions:
  contents: read

jobs:
  validate:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: actions/setup-python@v5
        with:
          python-version: '3.11'
      - run: python -m pip install jsonschema
      - name: Validate positive examples
        run: python scripts/validate_agentic_shell.py
      - name: Assert high-risk-without-approval fixture fails (approval model bites)
        run: |
          if python scripts/validate_agentic_shell.py \
              examples/agentic-shell/negative/agentic-recommended-action.high-risk-no-approval.fail.json; then
            echo 'negative fixture unexpectedly passed: high-risk action without approval'
            exit 1
          fi
      - name: Assert waiting-for-approval-without-requirements fixture fails
        run: |
          if python scripts/validate_agentic_shell.py \
              examples/agentic-shell/negative/agentic-task.waiting-approval-empty.fail.json; then
            echo 'negative fixture unexpectedly passed: waiting_for_approval without approvalRequirements'
            exit 1
          fi