Fix runner workspace publication parent

Author: chubes4

.github/scripts/run-agent-task/runner-workspace-publisher.mjs

@@ -41,7 +41,7 @@ export async function publishRunnerWorkspace({ request, changedFiles, publicatio
     tree.push({ path: relativePath, mode: changed.mode, type: "blob", sha: string(blob.sha) })
   }
   const nextTree = await api("POST", "/git/trees", { base_tree: string(baseCommit.tree?.sha), tree })
-  const commit = await api("POST", "/git/commits", { message: string(config.commit_message || request.workload?.label || "Apply agent task changes"), tree: string(nextTree.sha), parents: [parent] })
+  const commit = await api("POST", "/git/commits", { message: string(config.commit_message || request.workload?.label || "Apply agent task changes"), tree: string(nextTree.sha), parents: [baseSha] })
   if (existing) await api("PATCH", `/git/refs/heads/${head.split("/").map(encodeURIComponent).join("/")}`, { sha: string(commit.sha), force: false })
   else await api("POST", "/git/refs", { ref: `refs/heads/${head}`, sha: string(commit.sha) })
   const pulls = await api("GET", `/pulls?state=open&head=${encodeURIComponent(`${targetRepo.split("/")[0]}:${head}`)}&base=${encodeURIComponent(base)}`)

docs/agent-task-reusable-workflow.md

@@ -106,11 +106,11 @@ package file is mounted into or visible from the agent workspace.
 
 The repository's native-loop and PHP runtime-package tests execute generated
 PHP with narrow WordPress and native agent-registry shims. The non-skippable
-Playground integration additionally boots the agent registry and OpenAI
-provider path with a local HTTP interceptor. Its deterministic three-turn
-fixture reads and edits a seeded sandbox workspace, verifies provider tool
-outputs, and captures the canonical changed-files manifest and patch without
-network access or provider billing.
+deterministic WordPress Playground end-to-end test additionally boots the
+agent registry and OpenAI provider path with a local HTTP interceptor. Its
+three-turn fixture reads and edits a seeded sandbox workspace, verifies
+provider tool outputs, and captures the canonical changed-files manifest and
+patch without network access or provider billing.
 
 To run the optional cross-repository package coverage, use a Docs Agent checkout
 pinned to commit `3da1b8076359db9bf9f4ee7dadcc3932c080ed71`, which contains

tests/agent-task-reusable-workflow.test.ts

@@ -95,7 +95,7 @@ assert.match(docs, /wp-codebox\/reusable-workflow-interface\/v1/)
 assert.match(docs, /run-agent-task-reusable-workflow-interface\.v1\.json/)
 assert.match(docs, /WP_CODEBOX_DIR/)
 assert.match(docs, /Runtime Coverage/)
-assert.match(docs, /not a WordPress Playground end-to-end test/)
+assert.match(docs, /deterministic WordPress Playground end-to-end test/)
 assert.doesNotMatch(docs.slice(0, docs.indexOf("## Runtime Coverage")), /docs-agent|wp-codebox\/docs-agent-runner-recipe\/v1|recipe_path|recipe_json|wp_codebox_ref|datamachine|data machine|data-machine|agents api|sandbox mounts|ability ids|provider internals|homeboy|require_app_token/i)
 
 const tmp = await mkdtemp(join(tmpdir(), "wp-codebox-agent-task-workflow-"))

tests/runner-workspace-publisher.test.mjs

@@ -30,6 +30,8 @@ function fetchMock(existing = false) {
   const result = await publishRunnerWorkspace({ request, changedFiles: ["README.md"], publicationFiles, token: "secret", fetchImpl: mock.fetch })
   assert.equal(result.pull_request.opened, true)
   assert(mock.calls.some(([, method]) => method === "POST"))
+  const commitRequest = mock.calls.find(([url, method]) => new URL(url).pathname.endsWith("/git/commits") && method === "POST")
+  assert.deepEqual(commitRequest?.[2]?.parents, ["base"], "new branch commits must use the base branch head as their parent")
 }
 {
   const mock = fetchMock(true)
@@ -39,6 +41,8 @@ function fetchMock(existing = false) {
   const treeRequest = mock.calls.find(([url, method]) => new URL(url).pathname.endsWith("/git/trees") && method === "POST")
   assert.equal(treeRequest?.[2]?.base_tree, "prior-tree", "existing branch publication must extend its current tree")
   assert.deepEqual(treeRequest?.[2]?.tree, [{ path: "README.md", mode: "100644", type: "blob", sha: "blob" }], "the prior branch tree remains the base while only approved changed files are replaced")
+  const commitRequest = mock.calls.find(([url, method]) => new URL(url).pathname.endsWith("/git/commits") && method === "POST")
+  assert.deepEqual(commitRequest?.[2]?.parents, ["old"], "existing branch commits must use the existing branch head as their parent")
 }
 await assert.rejects(() => publishRunnerWorkspace({ request: { ...request, runner_workspace: { ...request.runner_workspace, repo: "other/repo" } }, changedFiles: ["README.md"], publicationFiles, token: "secret", fetchImpl: fetchMock().fetch }), /not authorized/)
 await assert.rejects(() => publishRunnerWorkspace({ request, changedFiles: ["README.md"], publicationFiles, token: "", fetchImpl: fetchMock().fetch }), /No GitHub token/)