ci: run all PR and merge workflows on preview branch (#1023)

* ci: run all PR and merge workflows on preview branch

Add preview to branch triggers for: build-and-test, lint, codeql,
e2e-tests, e2e-tests-full, pr-tarball, pr-size, pr-title. Also fix
hardcoded refs to main in e2e-tests-full checkout steps and schema-check
diff base.

* fix: address CI failures on preview branch

- Fix 2 integ tests that assume agent-first create behavior: add
  --framework Strands to stay on agent path (dry-run, missing options)
- Fix prettier formatting in 7 files
- Remove internal plans/specs/evo docs from preview branch

Author: tejaskash

.github/workflows/build-and-test.yml

@@ -2,17 +2,17 @@ name: Build and Test
 
 on:
   push:
-    branches: ['main']
+    branches: ['main', 'preview']
   pull_request:
-    branches: ['main']
+    branches: ['main', 'preview']
 
 permissions:
   contents: read
 
 # Cancel in-progress runs for PRs; never cancel runs on main (merges should not abort each other)
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
-  cancel-in-progress: ${{ github.ref != 'refs/heads/main' }}
+  cancel-in-progress: ${{ github.ref != 'refs/heads/main' && github.ref != 'refs/heads/preview' }}
 
 jobs:
   build:

.github/workflows/codeql.yml

@@ -2,16 +2,16 @@ name: CodeQL
 
 on:
   push:
-    branches: ['main']
+    branches: ['main', 'preview']
   pull_request:
-    branches: ['main']
+    branches: ['main', 'preview']
   pull_request_target:
-    branches: ['main']
+    branches: ['main', 'preview']
 
 # Cancel in-progress runs for PRs; never cancel runs on main (merges should not abort each other)
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
-  cancel-in-progress: ${{ github.ref != 'refs/heads/main' }}
+  cancel-in-progress: ${{ github.ref != 'refs/heads/main' && github.ref != 'refs/heads/preview' }}
 
 jobs:
   analyze:

.github/workflows/e2e-tests-full.yml

@@ -8,7 +8,7 @@ on:
   schedule:
     - cron: '0 14 * * 1' # Every Monday at 9 AM EST (14:00 UTC)
   push:
-    branches: [main]
+    branches: [main, preview]
 
 concurrency:
   group: e2e-${{ github.event.pull_request.number || github.ref }}
@@ -30,7 +30,7 @@ jobs:
     steps:
       - uses: actions/checkout@v6
         with:
-          ref: main
+          ref: ${{ github.sha }}
       - uses: actions/setup-node@v6
         with:
           node-version: '20.x'
@@ -86,7 +86,7 @@ jobs:
     steps:
       - uses: actions/checkout@v6
         with:
-          ref: ${{ github.event_name == 'workflow_dispatch' && github.ref || 'main' }}
+          ref: ${{ github.sha }}
       - uses: actions/setup-node@v6
         with:
           node-version: '20.x'

.github/workflows/e2e-tests.yml

@@ -6,7 +6,7 @@ on:
         description: 'AWS region for deployment'
         default: 'us-east-1'
   pull_request_target:
-    branches: [main]
+    branches: [main, preview]
 
 concurrency:
   group: e2e-${{ github.event.pull_request.number || github.ref }}

.github/workflows/lint.yml

@@ -2,17 +2,17 @@ name: Quality and Safety Checks
 
 on:
   push:
-    branches: ['main']
+    branches: ['main', 'preview']
   pull_request:
-    branches: ['main']
+    branches: ['main', 'preview']
 
 permissions:
   contents: read
 
 # Cancel in-progress runs for PRs; never cancel runs on main (merges should not abort each other)
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
-  cancel-in-progress: ${{ github.ref != 'refs/heads/main' }}
+  cancel-in-progress: ${{ github.ref != 'refs/heads/main' && github.ref != 'refs/heads/preview' }}
 
 jobs:
   setup:
@@ -109,7 +109,7 @@ jobs:
           fetch-depth: 0
       - name: Reject schema changes outside release PRs
         run: |
-          if git diff --name-only origin/main...HEAD | grep -q '^schemas/agentcore\.schema\.v[0-9]*\.json$'; then
+          if git diff --name-only origin/${{ github.base_ref || github.ref_name }}...HEAD | grep -q '^schemas/agentcore\.schema\.v[0-9]*\.json$'; then
             echo ""
             echo "❌ schemas/ must not be modified directly."
             echo "The JSON schema is served live from the repo — changes are released automatically."

.github/workflows/pr-size.yml

@@ -4,7 +4,7 @@ name: PR Size Check and Label
 # Safe because this workflow only reads PR metadata — it never checks out untrusted code.
 on:
   pull_request_target:
-    branches: [main]
+    branches: [main, preview]
 
 jobs:
   label-size:

.github/workflows/pr-tarball.yml

@@ -1,7 +1,7 @@
 name: PR Tarball
 on:
   pull_request_target:
-    branches: [main]
+    branches: [main, preview]
 
 permissions:
   contents: write

.github/workflows/pr-title.yml

@@ -2,7 +2,7 @@ name: Validate PR Title
 
 on:
   pull_request_target:
-    branches: [main]
+    branches: [main, preview]
     types: [opened, edited, synchronize, reopened]
 
 permissions: