refactor(ci): move deploy input to build.yml, use deploy-intent artifact

build.yml now owns the deploy decision via workflow_dispatch choice input:
  - "-" (default): no deploy
  - "agentcore": deploy agentcore after build

Build always writes a deploy-intent.json artifact encoding the decision:
  - push to main: intent = compute_type (deploy)
  - workflow_dispatch with choice: intent = selected value
  - pull_request: intent = "labels" (defer to deploy.yml label check)
  - anything else: intent = "-" (no deploy)

deploy.yml simplified to a pure consumer:
  - Removes workflow_dispatch trigger (single entry point is build.yml)
  - Downloads deploy-intent.json from triggering build run
  - Reads intent: "-" = skip, "labels" = check PR labels, else = deploy

Part of #73 Phase 3.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: scottschreckengaust

.github/workflows/build.yml

@@ -6,91 +6,73 @@ on:
   workflow_run:
     workflows: [build]
     types: [completed]
-  workflow_dispatch:
-    inputs:
-      compute_type:
-        description: "Compute type to deploy"
-        required: true
-        type: choice
-        options:
-          - all
-          - agentcore
 permissions: {}
 jobs:
   resolve-targets:
-    if: >-
-      github.event_name == 'workflow_dispatch' ||
-      github.event.workflow_run.conclusion == 'success'
+    if: github.event.workflow_run.conclusion == 'success'
     runs-on: ubuntu-latest
     permissions:
       actions: read
       pull-requests: read
     outputs:
       matrix: ${{ steps.targets.outputs.matrix }}
       has_targets: ${{ steps.targets.outputs.has_targets }}
-      run_id: ${{ steps.targets.outputs.run_id }}
+      run_id: ${{ github.event.workflow_run.id }}
     steps:
+      - name: Download deploy intent
+        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
+        with:
+          name: deploy-intent
+          run-id: ${{ github.event.workflow_run.id }}
+          github-token: ${{ github.token }}
+
       - name: Resolve deploy targets
         id: targets
         env:
           GH_TOKEN: ${{ github.token }}
-          EVENT_NAME: ${{ github.event_name }}
-          HEAD_BRANCH: ${{ github.event.workflow_run.head_branch }}
-          BUILD_EVENT_TYPE: ${{ github.event.workflow_run.event }}
           REPO: ${{ github.repository }}
           PR_NUMBER_FROM_EVENT: ${{ github.event.workflow_run.pull_requests[0].number }}
-          WORKFLOW_RUN_ID: ${{ github.event.workflow_run.id }}
-          DISPATCH_COMPUTE_TYPE: ${{ inputs.compute_type }}
         run: |
           ALL_TYPES='["agentcore"]'
+          INTENT=$(jq -r '.deploy' deploy-intent.json)
+          echo "Deploy intent from build: $INTENT"
 
-          # workflow_dispatch: use input choice
-          if [[ "$EVENT_NAME" == "workflow_dispatch" ]]; then
-            if [[ "$DISPATCH_COMPUTE_TYPE" == "all" ]]; then
-              echo "matrix=$ALL_TYPES" >> "$GITHUB_OUTPUT"
-            else
-              echo "matrix=[\"$DISPATCH_COMPUTE_TYPE\"]" >> "$GITHUB_OUTPUT"
-            fi
-            echo "has_targets=true" >> "$GITHUB_OUTPUT"
-            # Find the latest successful build run for this branch
-            RUN_ID=$(gh api "repos/$REPO/actions/workflows/build.yml/runs?branch=$(git branch --show-current 2>/dev/null || echo main)&status=success&per_page=1" --jq '.workflow_runs[0].id // empty')
-            echo "run_id=${RUN_ID}" >> "$GITHUB_OUTPUT"
-            exit 0
-          fi
-
-          # workflow_run context from here on
-          echo "run_id=${WORKFLOW_RUN_ID}" >> "$GITHUB_OUTPUT"
-
-          # Push to main or workflow_dispatch on build always deploys all
-          if [[ "$HEAD_BRANCH" == "main" && ("$BUILD_EVENT_TYPE" == "push" || "$BUILD_EVENT_TYPE" == "workflow_dispatch") ]]; then
-            echo "matrix=$ALL_TYPES" >> "$GITHUB_OUTPUT"
-            echo "has_targets=true" >> "$GITHUB_OUTPUT"
-            exit 0
-          fi
-
-          # For PRs, look up labels via API
-          if [[ -z "$PR_NUMBER_FROM_EVENT" ]]; then
-            echo "matrix=[]" >> "$GITHUB_OUTPUT"
-            echo "has_targets=false" >> "$GITHUB_OUTPUT"
-            exit 0
-          fi
+          case "$INTENT" in
+            -)
+              echo "matrix=[]" >> "$GITHUB_OUTPUT"
+              echo "has_targets=false" >> "$GITHUB_OUTPUT"
+              ;;
+            labels)
+              # PR-triggered build — check labels
+              if [[ -z "$PR_NUMBER_FROM_EVENT" ]]; then
+                echo "matrix=[]" >> "$GITHUB_OUTPUT"
+                echo "has_targets=false" >> "$GITHUB_OUTPUT"
+                exit 0
+              fi
 
-          LABELS=$(gh api "repos/$REPO/pulls/$PR_NUMBER_FROM_EVENT" --jq '[.labels[].name]')
+              LABELS=$(gh api "repos/$REPO/pulls/$PR_NUMBER_FROM_EVENT" --jq '[.labels[].name]')
 
-          if echo "$LABELS" | jq -e 'index("deploy:*")' > /dev/null 2>&1; then
-            echo "matrix=$ALL_TYPES" >> "$GITHUB_OUTPUT"
-            echo "has_targets=true" >> "$GITHUB_OUTPUT"
-          elif echo "$LABELS" | jq -e '[.[] | select(startswith("deploy:"))] | length > 0' > /dev/null 2>&1; then
-            TYPES=$(echo "$LABELS" | jq -c '[.[] | select(startswith("deploy:")) | ltrimstr("deploy:")]')
-            echo "matrix=$TYPES" >> "$GITHUB_OUTPUT"
-            echo "has_targets=true" >> "$GITHUB_OUTPUT"
-          elif echo "$LABELS" | jq -e 'index("deploy")' > /dev/null 2>&1; then
-            echo "matrix=$ALL_TYPES" >> "$GITHUB_OUTPUT"
-            echo "has_targets=true" >> "$GITHUB_OUTPUT"
-          else
-            echo "matrix=[]" >> "$GITHUB_OUTPUT"
-            echo "has_targets=false" >> "$GITHUB_OUTPUT"
-          fi
+              if echo "$LABELS" | jq -e 'index("deploy:*")' > /dev/null 2>&1; then
+                echo "matrix=$ALL_TYPES" >> "$GITHUB_OUTPUT"
+                echo "has_targets=true" >> "$GITHUB_OUTPUT"
+              elif echo "$LABELS" | jq -e '[.[] | select(startswith("deploy:"))] | length > 0' > /dev/null 2>&1; then
+                TYPES=$(echo "$LABELS" | jq -c '[.[] | select(startswith("deploy:")) | ltrimstr("deploy:")]')
+                echo "matrix=$TYPES" >> "$GITHUB_OUTPUT"
+                echo "has_targets=true" >> "$GITHUB_OUTPUT"
+              elif echo "$LABELS" | jq -e 'index("deploy")' > /dev/null 2>&1; then
+                echo "matrix=$ALL_TYPES" >> "$GITHUB_OUTPUT"
+                echo "has_targets=true" >> "$GITHUB_OUTPUT"
+              else
+                echo "matrix=[]" >> "$GITHUB_OUTPUT"
+                echo "has_targets=false" >> "$GITHUB_OUTPUT"
+              fi
+              ;;
+            *)
+              # Specific compute_type from push-to-main or workflow_dispatch
+              echo "matrix=[\"$INTENT\"]" >> "$GITHUB_OUTPUT"
+              echo "has_targets=true" >> "$GITHUB_OUTPUT"
+              ;;
+          esac
 
   deploy:
     needs: resolve-targets