feat: add prompt input for custom automation runs

README.md

@@ -285,10 +285,44 @@ To leave comments and approvals on your PRs, Droid needs a GitHub token. There a
 
 ### Core Inputs
 
-| Input             | Purpose                                                                                                |
-| ----------------- | ------------------------------------------------------------------------------------------------------ |
-| `factory_api_key` | **Required.** Grants Droid Exec permission to run via Factory.                                         |
-| `github_token`    | Optional override if you prefer a custom GitHub App/token. By default the installed app token is used. |
+| Input             | Purpose                                                                                                                                                                                                                                                                                                  |
+| ----------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| `factory_api_key` | **Required.** Grants Droid Exec permission to run via Factory.                                                                                                                                                                                                                                           |
+| `github_token`    | Optional override if you prefer a custom GitHub App/token. By default the installed app token is used.                                                                                                                                                                                                   |
+| `prompt`          | Custom automation task. When set, Droid Exec runs this prompt directly on automation events (`schedule`, `workflow_dispatch`, `repository_dispatch`, `workflow_run`) and on PR/issue events that carry no `@droid` command and no automatic-review flags. Used by Factory-managed Custom CI automations. |
+| `droid_args`      | Additional arguments passed to the Droid CLI (e.g. `-m <model>` to pick the model for a custom `prompt` run).                                                                                                                                                                                            |
+
+### Custom Automations
+
+Run an arbitrary task on a schedule (or manual dispatch) by passing a `prompt`:
+
+```yaml
+name: Code Consolidation
+on:
+  workflow_dispatch: {}
+  schedule:
+    - cron: "0 16 * * 1-5"
+permissions:
+  contents: write
+  pull-requests: write
+  issues: write
+  id-token: write
+  actions: read
+jobs:
+  run:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v5
+      - uses: Factory-AI/droid-action@main
+        with:
+          factory_api_key: ${{ secrets.FACTORY_API_KEY }}
+          prompt: |
+            Find duplicated code across the repository, consolidate it,
+            and open a pull request with the changes.
+          droid_args: "-m claude-fable-5"
+```
+
+Explicit `@droid` commands and the `automatic_review` / `automatic_security_review` flows always take precedence; the `prompt` only runs when no command or review flow claimed the event. Workflows created from the Factory Automations UI (Custom template) generate this shape automatically.
 
 ### Review Configuration
 

action.yml

@@ -30,6 +30,10 @@ inputs:
     description: "Droid Exec settings as JSON string or path to settings JSON file"
     required: false
     default: ""
+  prompt:
+    description: "Custom automation task prompt. When set, Droid Exec runs this prompt directly on automation events (schedule, workflow_dispatch, repository_dispatch, workflow_run) and on entity events that carry no @droid command and no automatic-review flags. Used by Factory-managed Custom CI automations."
+    required: false
+    default: ""
 
   # Auth configuration
   factory_api_key:
@@ -199,6 +203,7 @@ runs:
         FILL_MODEL: ${{ inputs.fill_model }}
         ADDITIONAL_PERMISSIONS: ${{ inputs.additional_permissions }}
         DROID_ARGS: ${{ inputs.droid_args }}
+        PROMPT: ${{ inputs.prompt }}
         INCLUDE_SUGGESTIONS: ${{ inputs.include_suggestions }}
         ALL_INPUTS: ${{ toJson(inputs) }}
 

src/custom-automation/index.ts

@@ -0,0 +1,86 @@
+import * as core from "@actions/core";
+import { mkdir, writeFile } from "fs/promises";
+import { checkHumanActor } from "../github/validation/actor";
+import { isEntityContext, type GitHubContext } from "../github/context";
+import { normalizeDroidArgs } from "../utils/parse-tools";
+import type { PrepareOptions, PrepareResult } from "../prepare/types";
+
+/**
+ * Custom automation mode: runs the workflow's `prompt` input directly via
+ * Droid Exec. This is the execution path for Factory-managed Custom CI
+ * automations, whose task is free text authored in the Factory Automations UI
+ * rather than an @droid command or a review flow.
+ *
+ * Triggers whenever a non-empty `prompt` input is present. Dispatch precedence
+ * lives in `src/prepare/index.ts`: explicit @droid commands and the
+ * automatic-review flags always win, so a prompt only runs when no tag/review
+ * flow claimed the event.
+ */
+export function shouldTriggerCustomAutomation(context: GitHubContext): boolean {
+  return context.inputs.prompt.trim().length > 0;
+}
+
+function describeTriggeringEvent(context: GitHubContext): string {
+  if (!isEntityContext(context)) {
+    return `a \`${context.eventName}\` event`;
+  }
+  const entityKind = context.isPR ? "pull request" : "issue";
+  return `a \`${context.eventName}\` event on ${entityKind} #${context.entityNumber}`;
+}
+
+function buildCustomAutomationPrompt(context: GitHubContext): string {
+  const { repository } = context;
+  return `You are running as a Factory custom automation inside a GitHub Actions runner.
+
+Environment:
+- Repository: ${repository.full_name} (already checked out in the working directory)
+- Triggered by: ${describeTriggeringEvent(context)}
+- The \`gh\` CLI is authenticated via the GITHUB_TOKEN environment variable.
+- This is a non-interactive environment: never wait for user input, and complete the task in this single run.
+- If your task produces code changes, create a new branch and open a pull request with \`gh\`; do not push directly to the default branch.
+
+Your task:
+
+${context.inputs.prompt.trim()}
+`;
+}
+
+export async function prepareCustomAutomationMode({
+  context,
+  octokit,
+}: PrepareOptions): Promise<PrepareResult> {
+  // Entity-triggered automations (e.g. `on: pull_request` with a prompt) keep
+  // the same actor hygiene as the tag flows: bot-authored events only run when
+  // the bot is explicitly allow-listed. Automation events (schedule /
+  // workflow_dispatch / ...) have no meaningful actor to validate.
+  if (isEntityContext(context)) {
+    await checkHumanActor(octokit.rest, context);
+  }
+
+  const promptContent = buildCustomAutomationPrompt(context);
+
+  console.log("===== CUSTOM AUTOMATION PROMPT =====");
+  console.log(promptContent);
+  console.log("====================================");
+
+  const promptDir = `${process.env.RUNNER_TEMP || "/tmp"}/droid-prompts`;
+  await mkdir(promptDir, { recursive: true });
+  await writeFile(`${promptDir}/droid-prompt.txt`, promptContent);
+
+  core.exportVariable("DROID_EXEC_RUN_TYPE", "droid-custom-automation");
+
+  // Pass user-supplied droid_args through untouched (this is how Factory's
+  // Custom CI automations carry their model selection, e.g. `-m <model>`).
+  // No tool restrictions are imposed: the task is arbitrary by design.
+  const normalizedUserArgs = normalizeDroidArgs(process.env.DROID_ARGS || "");
+  core.setOutput("droid_args", normalizedUserArgs);
+  core.setOutput("mcp_tools", "");
+
+  return {
+    branchInfo: {
+      baseBranch: "",
+      currentBranch: "",
+    },
+    mcpTools: "",
+  };
+}

src/entrypoints/collect-inputs.ts

@@ -21,6 +21,7 @@ export function collectActionInputsPresence(): void {
     factory_api_key: "",
     github_token: "",
     droid_args: "",
+    prompt: "",
     max_turns: "",
     use_sticky_comment: "false",
     experimental_allowed_domains: "",

src/entrypoints/prepare.ts

@@ -11,6 +11,7 @@ import { checkWritePermissions } from "../github/validation/permissions";
 import { createOctokit } from "../github/api/client";
 import { parseGitHubContext, isEntityContext } from "../github/context";
 import { shouldTriggerTag } from "../tag";
+import { shouldTriggerCustomAutomation } from "../custom-automation";
 import { prepare } from "../prepare";
 import { collectActionInputsPresence } from "./collect-inputs";
 
@@ -42,8 +43,10 @@ async function run() {
       }
     }
 
-    // Check trigger conditions
-    const containsTrigger = shouldTriggerTag(context);
+    // Check trigger conditions: @droid tag / automatic review flows, or a
+    // custom automation `prompt` input (Factory Custom CI automations).
+    const containsTrigger =
+      shouldTriggerTag(context) || shouldTriggerCustomAutomation(context);
 
     console.log(`Trigger result: ${containsTrigger}`);
 

src/github/context.ts

@@ -98,6 +98,12 @@ type BaseContext = {
     securityNotifyTeam: string;
     securityScanSchedule: boolean;
     securityScanDays: number;
+    /**
+     * Custom automation task prompt (the `prompt` action input). When set,
+     * Droid Exec runs it directly instead of the tag/review flows for events
+     * that carry no explicit @droid command.
+     */
+    prompt: string;
   };
 };
 
@@ -161,6 +167,7 @@ export function parseGitHubContext(): GitHubContext {
         1,
         parseInt(process.env.SECURITY_SCAN_DAYS ?? "7", 10) || 7,
       ),
+      prompt: process.env.PROMPT ?? "",
     },
   };
 

src/github/utils/command-parser.test.ts

@@ -35,6 +35,7 @@ const baseContext: Omit<ParsedGitHubContext, "eventName" | "payload"> = {
     securityNotifyTeam: "",
     securityScanSchedule: false,
     securityScanDays: 7,
+    prompt: "",
   },
   entityNumber: 1,
   isPR: true,

src/prepare/index.ts

@@ -3,12 +3,32 @@
  */
 
 import type { PrepareOptions, PrepareResult } from "./types";
-import { prepareTagExecution } from "../tag";
+import { shouldTriggerTag, prepareTagExecution } from "../tag";
+import {
+  shouldTriggerCustomAutomation,
+  prepareCustomAutomationMode,
+} from "../custom-automation";
 
 export async function prepare(options: PrepareOptions): Promise<PrepareResult> {
   const { context } = options;
 
-  console.log(`Preparing tag execution for event: ${context.eventName}`);
+  // Explicit @droid commands and the automatic-review flags always win; the
+  // custom automation prompt only runs when no tag/review flow claimed the
+  // event (schedule / workflow_dispatch runs, or entity events with no
+  // command).
+  if (shouldTriggerTag(context)) {
+    console.log(`Preparing tag execution for event: ${context.eventName}`);
+    return prepareTagExecution(options);
+  }
 
-  return prepareTagExecution(options);
+  if (shouldTriggerCustomAutomation(context)) {
+    console.log(
+      `Preparing custom automation execution for event: ${context.eventName}`,
+    );
+    return prepareCustomAutomationMode(options);
+  }
+
+  throw new Error(
+    `No execution mode matched event: ${context.eventName}. This indicates a trigger-detection bug in the prepare entrypoint.`,
+  );
 }

test/create-prompt.test.ts

@@ -34,6 +34,7 @@ describe("prepareContext", () => {
       securityNotifyTeam: "",
       securityScanSchedule: false,
       securityScanDays: 7,
+      prompt: "",
     },
   } as const;
 

test/create-prompt/templates/security-report-prompt.test.ts

@@ -45,6 +45,7 @@ describe("generateSecurityReportPrompt", () => {
         securityNotifyTeam: "@org/security-team",
         securityScanSchedule: false,
         securityScanDays: 7,
+        prompt: "",
       },
     },
   };