Migrate actions build to Go using bundler infrastructure

- Created pkg/cli/actions_build_command.go with Go-based build commands
- Implemented ActionsBuildCommand, ActionsValidateCommand, ActionsCleanCommand
- Reuses workflow bundler and script registry infrastructure from pkg/workflow
- Added CLI commands: actions-build, actions-validate, actions-clean
- Updated Makefile to use Go commands instead of Node.js script
- Removed scripts/build-actions.js JavaScript build script
- Added safe_outputs_tools.json to GetJavaScriptSources() map
- Updated actions/README.md documentation

The build system now leverages the same infrastructure as workflow compilation,
eliminating duplicate bundling logic and providing better integration.

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Author: Copilot

.github/workflows/release.lock.yml

@@ -172,19 +172,19 @@ clean:
 
 # Actions management targets
 .PHONY: actions-build
-actions-build:
+actions-build: build
 	@echo "Building all actions..."
-	node scripts/build-actions.js build
+	./gh-aw actions-build
 
 .PHONY: actions-validate
-actions-validate:
+actions-validate: build
 	@echo "Validating action.yml files..."
-	node scripts/build-actions.js validate
+	./gh-aw actions-validate
 
 .PHONY: actions-clean
-actions-clean:
+actions-clean: build
 	@echo "Cleaning action artifacts..."
-	node scripts/build-actions.js clean
+	./gh-aw actions-clean
 
 # Check Node.js version
 .PHONY: check-node-version

Makefile

@@ -31,26 +31,41 @@ Copies safe-inputs MCP server files to the agent environment. This action embeds
 
 ## Building Actions
 
-Actions are built using the build tooling in `scripts/build-actions.js`. The build process:
+Actions are built using the Go-based build system that reuses the bundler and script registry infrastructure from the workflow compiler.
+
+The build process:
 
 1. Reads source files from `actions/{action-name}/src/`
 2. Identifies and embeds required JavaScript dependencies from `pkg/workflow/js/`
-3. Bundles everything into `actions/{action-name}/index.js`
-4. Validates `action.yml` files
+3. Uses the same bundler infrastructure as workflow compilation
+4. Bundles everything into `actions/{action-name}/index.js`
+5. Validates `action.yml` files
 
 ### Build Commands
 
 ```bash
 # Build all actions (generates index.js files)
 make actions-build
+# or
+gh aw actions-build
 
 # Validate action.yml files
 make actions-validate
+# or
+gh aw actions-validate
 
+# Clean generated files
 # Clean generated files
 make actions-clean
+# or
+gh aw actions-clean
 ```
 
+The build system uses:
+- **Bundler Infrastructure**: Same JavaScript bundler used for workflow compilation (`pkg/workflow/bundler.go`)
+- **Script Registry**: Centralized registry for managing JavaScript sources (`pkg/workflow/script_registry.go`)
+- **Embedded Sources**: All JavaScript files from `pkg/workflow/js/` via `GetJavaScriptSources()`
+
 ## Development Guidelines
 
 ### Creating a New Action
@@ -103,8 +118,8 @@ make actions-clean
    run();
    ```
 
-4. **Update build-actions.js:**
-   Add the action to the `dependencyMap` in `scripts/build-actions.js` to specify which JavaScript files from `pkg/workflow/js/` should be embedded.
+4. **Update dependency mapping:**
+   Add the action to the dependency map in `pkg/cli/actions_build_command.go` to specify which JavaScript files from `pkg/workflow/js/` should be embedded.
 
 5. **Build and test:**
    ```bash

actions/README.md

@@ -300,6 +300,43 @@ var versionCmd = &cobra.Command{
 	},
 }
 
+var actionsBuildCmd = &cobra.Command{
+	Use:   "actions-build",
+	Short: "Build all custom GitHub Actions from source",
+	Long: `Build all custom GitHub Actions by bundling JavaScript dependencies.
+
+This command processes actions in the actions/ directory, reads their source files from src/,
+embeds required JavaScript dependencies from pkg/workflow/js/, and generates bundled index.js files.
+
+The build process uses the same bundler infrastructure used for workflow compilation.`,
+	RunE: func(cmd *cobra.Command, args []string) error {
+		return cli.ActionsBuildCommand()
+	},
+}
+
+var actionsValidateCmd = &cobra.Command{
+	Use:   "actions-validate",
+	Short: "Validate action.yml files",
+	Long: `Validate all action.yml files in the actions/ directory.
+
+Checks that each action.yml contains required fields (name, description, runs)
+and uses the correct runtime (node20).`,
+	RunE: func(cmd *cobra.Command, args []string) error {
+		return cli.ActionsValidateCommand()
+	},
+}
+
+var actionsCleanCmd = &cobra.Command{
+	Use:   "actions-clean",
+	Short: "Clean generated action files",
+	Long: `Remove generated index.js files from all actions in the actions/ directory.
+
+This is useful for starting fresh or before rebuilding all actions.`,
+	RunE: func(cmd *cobra.Command, args []string) error {
+		return cli.ActionsCleanCommand()
+	},
+}
+
 func init() {
 	// Add command groups to root command
 	rootCmd.AddGroup(&cobra.Group{
@@ -501,6 +538,9 @@ Use "` + constants.CLIExtensionPrefix + ` help all" to show help for all command
 	statusCmd.GroupID = "development"
 	mcpServerCmd.GroupID = "development"
 	mcpGatewayCmd.GroupID = "development"
+	actionsBuildCmd.GroupID = "development"
+	actionsValidateCmd.GroupID = "development"
+	actionsCleanCmd.GroupID = "development"
 
 	// Execution Commands
 	runCmd.GroupID = "execution"
@@ -534,6 +574,9 @@ Use "` + constants.CLIExtensionPrefix + ` help all" to show help for all command
 	rootCmd.AddCommand(mcpCmd)
 	rootCmd.AddCommand(mcpServerCmd)
 	rootCmd.AddCommand(mcpGatewayCmd)
+	rootCmd.AddCommand(actionsBuildCmd)
+	rootCmd.AddCommand(actionsValidateCmd)
+	rootCmd.AddCommand(actionsCleanCmd)
 	rootCmd.AddCommand(prCmd)
 	rootCmd.AddCommand(versionCmd)
 }