Skip to content

Enable the gated pm-github issue sync - #152

Merged
unbraind merged 3 commits into
mainfrom
chore/gated-issue-sync-and-braces-free-gates
Oct 15, 2026
Merged

unbraind merged 3 commits into
mainfrom
chore/gated-issue-sync-and-braces-free-gates

Conversation

@unbraind

@unbraind unbraind commented Oct 14, 2026 •

Copy link
Copy Markdown
Owner

Add the scheduled GitHub issue sync caller so this package's own tracker receives issue changes through the audited reusable pipeline. Before this change, the package had no active gated caller; after merge, its daily schedule is 17 3 * * * UTC, with manual dispatch available.

The caller pins unbraind/pm-github/.github/workflows/pm-github-sync.yml to a0880e9645097363824c9a560fed00fc286bbfc3 and installs the matching published package version 2026.10.13. The called workflow validates the caller identity and access, previews the complete plan, imports with --gate, verifies repeat-import idempotency and the privacy gate, then checks strict pm health before committing, pushing an automation branch, and opening a review PR. Findings or unreadable scan inputs fail closed. It does not push main.

Dependency manifests, merge-driver scripts, and thresholds are unchanged; the package has no direct fast-glob or jscpd4 devDependency. All dependencies: 0 before → 0 after. Production: 0 before → 0 after. npm ls braces is empty.

Validation:

  • npm: passed (tests 390; pass 390; fail 0; skipped 0).
  • bun: passed (tests 390; pass 390; fail 0; skipped 0).
  • npm run changelog:full and npm run changelog:check: passed after final tracker writes.
  • Caller identity check: only the reusable-workflow repository appears.
  • Skipped: actionlint is not installed and offline npm fallback is uncached.
  • Function revert regression proof: inapplicable; no TypeScript functions changed.

Exact release-gate commands:

env -u PM_PATH -u PM_AUTHOR HOME=$(mktemp -d) GIT_CONFIG_GLOBAL=/dev/null GIT_CONFIG_NOSYSTEM=1 npm run release:check
env -u PM_PATH -u PM_AUTHOR HOME=$(mktemp -d) GIT_CONFIG_GLOBAL=/dev/null GIT_CONFIG_NOSYSTEM=1 bun run release:check

Tracker: pm-brief-gp5o (proposed). The item remains in progress and its claim has been released for orchestrator verification.

Actions PR creation permission is already enabled. No workflow was dispatched, no PR was merged, and no bots were requested.

Packed consumer acceptance (accept:packed) passed in both complete release checks.

Summary by Sourcery

Enable gated synchronization of repository GitHub issues into the package’s pm tracker without changing dependencies or existing release configuration.

New Features:

  • Add a scheduled and manually triggerable GitHub issue synchronization workflow using the audited reusable pm-github pipeline.

CI:

  • Configure the issue sync caller to run daily at 03:17 UTC and use the pinned pm-github release workflow.

Chores:

  • Record the associated tracker item and synchronization history.

Summary by cubic

Adds the scheduled, SHA-pinned GitHub issue sync caller so this package's tracker receives issue changes through the audited gated pipeline. The workflow runs daily at 17:03 UTC (with manual dispatch), calls pm-github's reusable pm-github-sync.yml pinned to 3015930b351a3d9c1c03ee4a26f8404025287df7 (release 2026.10.15), and imports issues with --gate so findings fail closed.

  • The repin regenerates the changelog, dispatches the caller's required CI on the sync branch, and restricts the sync commit to an explicit scope; the caller grants actions: write for that dispatch.
  • The tracker item is tagged changed so pm-changelog files the entry under Changed rather than Removed.
  • No dependencies, merge-driver scripts, or thresholds change; npm and Bun release checks pass (390/390).

Written for commit 1c580d9. Summary will update on new commits.

View guided diff Turn on auto-fix

@sourcery-ai

sourcery-ai Bot commented Oct 14, 2026

Copy link
Copy Markdown

Sorry @unbraind, you've used your own review budget of 250,000 diff characters for the last 7 days.

You can request another review in 8 minutes by commenting @sourcery-ai review. Upgrade to get a review now.

@greptile-apps greptile-apps Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Your trial has ended. Reactivate Greptile to resume code reviews.

@coderabbitai

coderabbitai Bot commented Oct 14, 2026 •

Copy link
Copy Markdown

Review in Change Stack →

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration
  • Configuration used: Organization UI
  • Review profile: ASSERTIVE
  • Plan: Advanced
  • Run ID: 2824cad8-94df-4eea-83e9-d9a7ab472c7f
📥 Commits

Reviewing files that changed from the base of the PR and between 3f4d700 and 1c580d9.

📒 Files selected for processing: 3
  • .agents/pm/chores/pm-brief-gp5o.toon
  • .agents/pm/history/pm-brief-gp5o.jsonl
  • .github/workflows/pm-github-sync.yml

Included review availability: This review used your included allowance. Your plan provides up to 1 included review per hour; 0 remain after this review.

Summary by CodeRabbit

  • Chores
    • Added scheduled automation that synchronizes GitHub issues daily, with an option to run it manually.
    • Added release-check and audit tracking for the workflow.

Walkthrough

Adds a GitHub Actions workflow that runs the pinned pm-github reusable workflow on a schedule or manual dispatch. Chore records capture the plan, status, target files, release checks, and audit notes.

Changes

GitHub Issue Sync

Layer / File(s) Summary
Sync workflow and tracking
.github/workflows/pm-github-sync.yml, .agents/pm/chores/pm-brief-gp5o.toon, .agents/pm/history/pm-brief-gp5o.jsonl
The workflow runs daily at 03:17 UTC or by manual dispatch, passes version 2026.10.15 to a SHA-pinned reusable workflow, and declares repository permissions. The chore record and history track the plan, status, release checks, and audit notes.

Priority: ⬇️ Low

Estimated code review effort: 2 (Simple) | ~10 minutes

Change: Feature

Merge Risk: ⚪ Minimal · up to 1c580

The scheduled and manual sync is scoped to a gated automation branch and its CI workflow; no merge-blocking risk is evident. Its first GitHub run remains unverified and can receive ordinary operational validation.

Pre-merge checks: Passed 5
Passed Passed checks: 5 passed
Check name Status Explanation
Title check Passed The title clearly and concisely describes the main change: enabling the gated pm-github issue synchronization workflow.
Description check Passed The description directly explains the scheduled and manually triggered issue-sync workflow, its gating behavior, pinned reusable workflow, validation, and unchanged dependencies.
Docstring Coverage Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check Passed Check skipped because no linked issues were found for this pull request.
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Commit to this branch
  • Create a new PR
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@sourcery-ai

sourcery-ai Bot commented Oct 14, 2026

Copy link
Copy Markdown
Reviewer's guide (collapsed on small PRs)

Reviewer's Guide

Enables this repository’s gated GitHub issue synchronization through a commit-pinned reusable workflow, with a daily schedule and manual dispatch while preserving the existing dependency, merge-driver, and threshold configuration. The reusable pipeline performs preview, gated import, idempotency/privacy checks, health validation, and automation-branch PR creation without pushing directly to main; release checks and packed-consumer acceptance passed under both npm and bun.

Sequence diagram for the gated GitHub issue sync

sequenceDiagram
    participant Scheduler as Schedule or manual dispatch
    participant Caller as Repository sync caller
    participant Pipeline as Pinned pm-github reusable workflow
    participant Tracker as Package pm tracker
    participant GitHub as GitHub repository

    Scheduler->>Caller: Trigger workflow
    Caller->>Pipeline: Call pm-github-sync.yml@a0880e9645097363824c9a560fed00fc286bbfc3
    Pipeline->>Pipeline: Validate caller identity and access
    Pipeline->>GitHub: Preview complete sync plan
    Pipeline->>Tracker: Import with --gate
    Pipeline->>Tracker: Verify repeat-import idempotency and privacy gate
    Pipeline->>Pipeline: Check strict pm health
    Pipeline->>GitHub: Push automation branch and open review PR
Loading

File-Level Changes

Change Details Files
Add a pinned, scheduled reusable-workflow caller for gated GitHub issue synchronization.
  • Run daily at 03:17 UTC or on manual dispatch.
  • Delegate to the audited pm-github workflow at a commit-pinned revision.
  • Pass the matching published pm-github package version.
  • Grant only contents, pull-request, and issue permissions required by the workflow.
.github/workflows/pm-github-sync.yml
Record the tracked chore and its execution history.
  • Add the pm tracker chore definition.
  • Add JSONL history documenting the tracker activity and verification state.
.agents/pm/chores/pm-brief-gp5o.toon
.agents/pm/history/pm-brief-gp5o.jsonl

Tips and commands

Interacting with Sourcery

  • Trigger a new review: Comment @sourcery-ai review on the pull request.
  • Continue discussions: Reply directly to Sourcery's review comments.
  • Generate a GitHub issue from a review comment: Ask Sourcery to create an
    issue from a review comment by replying to it. You can also reply to a
    review comment with @sourcery-ai issue to create an issue from it.
  • Generate a pull request title: Write @sourcery-ai anywhere in the pull
    request title to generate a title at any time. You can also comment
    @sourcery-ai title on the pull request to (re-)generate the title at any time.
  • Generate a pull request summary: Write @sourcery-ai summary anywhere in
    the pull request body to generate a PR summary at any time exactly where you
    want it. You can also comment @sourcery-ai summary on the pull request to
    (re-)generate the summary at any time.
  • Generate reviewer's guide: Comment @sourcery-ai guide on the pull
    request to (re-)generate the reviewer's guide at any time.
  • Resolve all Sourcery comments: Comment @sourcery-ai resolve on the
    pull request to resolve all Sourcery comments. Useful if you've already
    addressed all the comments and don't want to see them anymore.
  • Dismiss all Sourcery reviews: Comment @sourcery-ai dismiss on the pull
    request to dismiss all existing Sourcery reviews. Especially useful if you
    want to start fresh with a new review - don't forget to comment
    @sourcery-ai review to trigger a new review!

Customizing Your Experience

Access your dashboard to:

  • Enable or disable review features such as the Sourcery-generated pull request
    summary, the reviewer's guide, and others.
  • Change the review language.
  • Add, remove or edit custom review instructions.
  • Adjust other review settings.

Getting Help

…under Changed

The item title names the braces-chain removal, which pm-changelog's title
fallback filed under Removed although the entry enables a workflow (CodeRabbit
on pm-review#11). The changed tag is the author-controlled strong signal.
The reusable workflow at 2026.10.15 (tag commit 3015930) regenerates the
caller's changelog, dispatches the caller's required CI on the sync branch
(bot PRs park at action_required), and restricts the sync commit to an
explicit scope (pm-github#122). The caller grants actions: write for that
dispatch. ci.yml workflow_dispatch present: yes.

@greptile-apps greptile-apps Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Your trial has ended. Reactivate Greptile to resume code reviews.

@unbraind

Copy link
Copy Markdown
Owner Author

@coderabbitai full review

Please review head 1c580d9, including outside-diff findings.

@coderabbitai

coderabbitai Bot commented Oct 15, 2026 •

Copy link
Copy Markdown
✅ Action performed

Full review finished.

@unbraind
unbraind merged commit 8246224 into main Oct 15, 2026
12 checks passed
@unbraind
unbraind deleted the chore/gated-issue-sync-and-braces-free-gates branch October 15, 2026 14:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant