Move actions commands to internal tool

Moved actions-build, actions-validate, and actions-clean commands out of the main gh-aw CLI into an internal development tool:

- Created internal/tools/actions-build/main.go as lightweight CLI dispatcher
- Removed action commands from cmd/gh-aw/main.go (no longer in end-user CLI)
- Updated Makefile to invoke internal tool: go run ./internal/tools/actions-build
- Updated specs/actions.md to document internal tool architecture
- Commands remain available via Makefile: make actions-build, etc.

These are development-only commands not intended for end users, so they belong in an internal tool rather than the main CLI.

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Author: Copilot

Makefile

@@ -174,17 +174,17 @@ clean:
 .PHONY: actions-build
 actions-build:
 	@echo "Building all actions..."
-	@go run ./cmd/gh-aw actions-build
+	@go run ./internal/tools/actions-build build
 
 .PHONY: actions-validate
 actions-validate:
 	@echo "Validating action.yml files..."
-	@go run ./cmd/gh-aw actions-validate
+	@go run ./internal/tools/actions-build validate
 
 .PHONY: actions-clean
 actions-clean:
 	@echo "Cleaning action artifacts..."
-	@go run ./cmd/gh-aw actions-clean
+	@go run ./internal/tools/actions-build clean
 
 # Check Node.js version
 .PHONY: check-node-version

actions/setup-safe-inputs/index.js

@@ -300,43 +300,6 @@ var versionCmd = &cobra.Command{
 	},
 }
 
-var actionsBuildCmd = &cobra.Command{
-	Use:   "actions-build",
-	Short: "Build all custom GitHub Actions from source",
-	Long: `Build all custom GitHub Actions by bundling JavaScript dependencies.
-
-This command processes actions in the actions/ directory, reads their source files from src/,
-embeds required JavaScript dependencies from pkg/workflow/js/, and generates bundled index.js files.
-
-The build process uses the same bundler infrastructure used for workflow compilation.`,
-	RunE: func(cmd *cobra.Command, args []string) error {
-		return cli.ActionsBuildCommand()
-	},
-}
-
-var actionsValidateCmd = &cobra.Command{
-	Use:   "actions-validate",
-	Short: "Validate action.yml files",
-	Long: `Validate all action.yml files in the actions/ directory.
-
-Checks that each action.yml contains required fields (name, description, runs)
-and uses the correct runtime (node20).`,
-	RunE: func(cmd *cobra.Command, args []string) error {
-		return cli.ActionsValidateCommand()
-	},
-}
-
-var actionsCleanCmd = &cobra.Command{
-	Use:   "actions-clean",
-	Short: "Clean generated action files",
-	Long: `Remove generated index.js files from all actions in the actions/ directory.
-
-This is useful for starting fresh or before rebuilding all actions.`,
-	RunE: func(cmd *cobra.Command, args []string) error {
-		return cli.ActionsCleanCommand()
-	},
-}
-
 func init() {
 	// Add command groups to root command
 	rootCmd.AddGroup(&cobra.Group{
@@ -538,9 +501,6 @@ Use "` + constants.CLIExtensionPrefix + ` help all" to show help for all command
 	statusCmd.GroupID = "development"
 	mcpServerCmd.GroupID = "development"
 	mcpGatewayCmd.GroupID = "development"
-	actionsBuildCmd.GroupID = "development"
-	actionsValidateCmd.GroupID = "development"
-	actionsCleanCmd.GroupID = "development"
 
 	// Execution Commands
 	runCmd.GroupID = "execution"
@@ -574,9 +534,6 @@ Use "` + constants.CLIExtensionPrefix + ` help all" to show help for all command
 	rootCmd.AddCommand(mcpCmd)
 	rootCmd.AddCommand(mcpServerCmd)
 	rootCmd.AddCommand(mcpGatewayCmd)
-	rootCmd.AddCommand(actionsBuildCmd)
-	rootCmd.AddCommand(actionsValidateCmd)
-	rootCmd.AddCommand(actionsCleanCmd)
 	rootCmd.AddCommand(prCmd)
 	rootCmd.AddCommand(versionCmd)
 }

actions/setup-safe-outputs/index.js

@@ -0,0 +1,40 @@
+package main
+
+import (
+	"fmt"
+	"os"
+
+	"github.com/githubnext/gh-aw/pkg/cli"
+)
+
+func main() {
+	if len(os.Args) < 2 {
+		fmt.Fprintln(os.Stderr, "Usage: actions-build <command>")
+		fmt.Fprintln(os.Stderr, "")
+		fmt.Fprintln(os.Stderr, "Commands:")
+		fmt.Fprintln(os.Stderr, "  build     Build all custom GitHub Actions")
+		fmt.Fprintln(os.Stderr, "  validate  Validate all action.yml files")
+		fmt.Fprintln(os.Stderr, "  clean     Remove generated index.js files")
+		os.Exit(1)
+	}
+
+	command := os.Args[1]
+	var err error
+
+	switch command {
+	case "build":
+		err = cli.ActionsBuildCommand()
+	case "validate":
+		err = cli.ActionsValidateCommand()
+	case "clean":
+		err = cli.ActionsCleanCommand()
+	default:
+		fmt.Fprintf(os.Stderr, "Unknown command: %s\n", command)
+		os.Exit(1)
+	}
+
+	if err != nil {
+		fmt.Fprintln(os.Stderr, err)
+		os.Exit(1)
+	}
+}

cmd/gh-aw/main.go

@@ -48,13 +48,26 @@ Create a custom actions system that:
 
 ```
 ┌─────────────────────────────────────────────────────────┐
-│                    Makefile Targets                      │
+│                    Makefile Interface                    │
 │  ┌────────────────────────────────────────────────────┐ │
-│  │  actions-build  │  actions-validate  │  actions-clean│ │
+│  │  make actions-build  │  make actions-validate     │ │
+│  │  make actions-clean                                │ │
 │  └────────────────────────────────────────────────────┘ │
 └─────────────────────────────────────────────────────────┘
                           │
-                          ▼ (go run ./cmd/gh-aw)
+                          ▼ (go run internal/tools/actions-build)
+┌─────────────────────────────────────────────────────────┐
+│         internal/tools/actions-build/main.go             │
+│              (Internal Development Tool)                 │
+│  ┌────────────────────────────────────────────────────┐ │
+│  │  Simple CLI dispatcher for:                        │ │
+│  │  • build command                                   │ │
+│  │  • validate command                                │ │
+│  │  • clean command                                   │ │
+│  └────────────────────────────────────────────────────┘ │
+└─────────────────────────────────────────────────────────┘
+                          │
+                          ▼
 ┌─────────────────────────────────────────────────────────┐
 │            pkg/cli/actions_build_command.go              │
 │              (Pure Go Implementation)                    │
@@ -92,15 +105,15 @@ Create a custom actions system that:
 
 ### Component Responsibilities
 
-#### 1. Makefile Targets (`Makefile`)
-- Entry points for action management: `actions-build`, `actions-validate`, `actions-clean`
-- Invokes Go commands directly using `go run ./cmd/gh-aw`
+#### 1. Makefile Interface (`Makefile`)
+- Primary entry point for building actions: `make actions-build`, `make actions-validate`, `make actions-clean`
+- Invokes internal tool via `go run ./internal/tools/actions-build <command>`
 - Project-specific development commands (not end-user CLI)
 
-#### 2. CLI Command Registration (`cmd/gh-aw/main.go`)
-- Cobra command definitions for actions commands
-- Integrated into `gh aw` command hierarchy under "Development Commands" group
-- Commands delegate to `pkg/cli/actions_build_command.go`
+#### 2. Internal Tool (`internal/tools/actions-build/main.go`)
+- Lightweight CLI dispatcher for development-only commands
+- Not part of the main `gh aw` CLI (which is for end users)
+- Routes commands to appropriate functions in `pkg/cli`
 
 #### 3. Build System Implementation (`pkg/cli/actions_build_command.go`)
 - **Pure Go implementation** - No JavaScript build scripts
@@ -541,13 +554,13 @@ The CI runs when:
 #### Key Files to Know
 
 - `pkg/cli/actions_build_command.go` - **Pure Go build system** (no JavaScript)
+- `internal/tools/actions-build/main.go` - Internal CLI tool dispatcher (development only)
 - `pkg/workflow/js.go` - JavaScript source map and embedded files
-- `cmd/gh-aw/main.go` - CLI command definitions (invoked by Makefile)
 - `Makefile` - Primary interface for building actions (`make actions-build`)
 - `.github/workflows/ci.yml` - CI validation
 - `actions/README.md` - Actions documentation
 
-**Important**: Build process is 100% Go code. No `scripts/build-actions.js` or similar JavaScript build scripts exist.
+**Important**: Build process is 100% Go code. No `scripts/build-actions.js` or similar JavaScript build scripts exist. Commands are invoked via Makefile, which runs the internal tool at `internal/tools/actions-build`.
 
 #### Debugging Tips