update agentics for latest gh-aw

Author: dsyme

workflows/agentics/shared/gh-extra-pr-tools.md

@@ -7,14 +7,11 @@ tools:
       - "git branch:*"
       - "git add:*"
       - "git commit:*"
-      - "git push:*"
-      - "gh pr create:*"
 ---
 
 ## Creating and Updating Pull Requests
 
-To create a branch, add changes to your branch and push code to GitHub, use Bash `git branch...` `git add ...`, `git commit ...`, `git push ...` etc.
+To create a branch, add changes to your branch, use Bash `git branch...` `git add ...`, `git commit ...` etc.
 
 When using `git commit`, ensure you set the author name and email appropriately. Do this by using a `--author` flag with `git commit`, for example `git commit --author "${{ github.workflow }} <github-actions[bot]@users.noreply.github.com>" ...`.
 
-To create a pull request with the changes, use Bash `gh pr create --repo ${{ github.repository }} ...` 

workflows/agentics/shared/gh-extra-read-tools.md

@@ -5,11 +5,6 @@ tools:
       Bash: 
       - "gh label list:*"
       - "gh label view:*"
-      - "gh repo view:*"
-      - "gh issue list:*"
-      - "gh issue view:*"
-      - "gh pr list:*"
-      - "gh pr view:*"
 ---
 
 ## GitHub Tools
@@ -18,9 +13,3 @@ You can use the GitHub MCP tools to perform various tasks in the repository. You
 
 - List labels: `gh label list ...`
 - View label: `gh label view <label-name> ...`
-- View repository: `gh repo view ${{ github.repository }} ...`
-- List issues: `gh issue list --label <label-name> ...`
-- View issue: `gh issue view <issue-number> ...`
-- List pull requests: `gh pr list --label <label-name> ...`
-- View pull request: `gh pr view <pr-number> ...`
-

workflows/ci-doctor.md

@@ -13,6 +13,8 @@ if: ${{ github.event.workflow_run.conclusion == 'failure' }}
 
 permissions: read-all
 
+network: defaults
+
 safe-outputs:
   create-issue:
     title-prefix: "${{ github.workflow }}"

workflows/daily-accessibility-review.md

@@ -6,10 +6,10 @@ on:
   workflow_dispatch:
   stop-after: +48h # workflow will no longer trigger after 48 hours
 
-timeout_minutes: 15
-
 permissions: read-all
 
+network: defaults
+
 safe-outputs:
   create-issue:
     title-prefix: "${{ github.workflow }}"
@@ -29,6 +29,8 @@ tools:
       WebFetch:
       WebSearch:
 
+timeout_minutes: 15
+
 steps:
   - name: Checkout repository
     uses: actions/checkout@v4

workflows/daily-dependency-updates.md

@@ -6,28 +6,25 @@ on:
         - cron: "0 2 * * 1-5"
     stop-after: +48h # workflow will no longer trigger after 48 hours. Remove this and recompile to run indefinitely
 
-timeout_minutes: 15
-
 permissions: read-all
 
+network: defaults
+
 safe-outputs:
   create-pull-request:
     draft: true
   create-issue:
     title-prefix: "${{ github.workflow }}"
 
-tools:
-  claude:
-    allowed:
-      Edit:
-      MultiEdit:
-      Write:
-      WebFetch:
-      WebSearch:
-      # Configure bash build commands here, or in .github/workflows/agentics/daily-dependency-updates.config.md or .github/workflows/agentics/build-tools.md
-      # For YOLO mode, uncomment the following line
-      #Bash:
-      #- ":*
+# Configure bash build commands here, or in .github/workflows/agentics/daily-dependency-updates.config.md or .github/workflows/agentics/build-tools.md
+# For YOLO mode, uncomment 
+# tools:
+#  claude:
+#    allowed:
+#      Bash: [ ":*" ]
+
+timeout_minutes: 15
+
 ---
 
 # Agentic Dependency Updater

workflows/daily-perf-improver.md

@@ -10,6 +10,8 @@ timeout_minutes: 30
 
 permissions: read-all
 
+network: defaults
+
 safe-outputs:
   create-issue:
     title-prefix: "${{ github.workflow }}"
@@ -22,24 +24,11 @@ safe-outputs:
 tools:
   claude:
     allowed:
-      Edit:
-      MultiEdit:
-      Write:
-      NotebookEdit:
       WebFetch:
       WebSearch:
-      KillBash:
-      BashOutput:
-      # Configure bash build commands in any of these places
-      # - this file
-      # - .github/workflows/agentics/daily-perf-improver.config.md 
-      # - .github/workflows/agentics/build-tools.md (shared).
-      #
-      # Run `gh aw compile` after editing to recompile the workflow.
-      #
-      # For YOLO mode, uncomment the following line
-      # Bash:
-      # - ":*
+      # Configure bash build commands here, or in .github/workflows/agentics/daily-dependency-updates.config.md or .github/workflows/agentics/build-tools.md
+      # For YOLO mode, uncomment 
+      # Bash: [ ":*" ]
 
 steps:
   - name: Checkout repository
@@ -195,6 +184,7 @@ Your name is ${{ github.workflow }}. Your job is to act as an agentic coder for
 @include agentics/shared/xpia.md
 
 @include agentics/shared/gh-extra-read-tools.md
+
 @include agentics/shared/gh-extra-pr-tools.md
 
 <!-- You can whitelist tools in .github/workflows/build-tools.md file -->

workflows/daily-plan.md

@@ -10,20 +10,22 @@ on:
 
 permissions: read-all
 
+network: defaults
+
 safe-outputs:
   create-issue: # needed to create the project plan issue
     title-prefix: "${{ github.workflow }}"
   update-issue: # needed to update the project plan issue if it already exists
     target: "*" # can update one single issue
     body: # can update the issue body only
 
-timeout_minutes: 15
-
 tools:
   claude:
     allowed:
       WebFetch:
       WebSearch:
+
+timeout_minutes: 15
 ---
 
 # Agentic Planner

workflows/daily-progress.md

@@ -8,6 +8,8 @@ on:
 
 timeout_minutes: 30
 
+network: defaults
+
 safe-outputs:
   create-issue:
     title-prefix: "${{ github.workflow }}"
@@ -20,14 +22,8 @@ safe-outputs:
 tools:
   claude:
     allowed:
-      Edit:
-      MultiEdit:
-      Write:
-      NotebookEdit:
       WebFetch:
       WebSearch:
-      KillBash:
-      BashOutput:
       # Configure bash build commands in any of these places
       # - this file
       # - .github/workflows/agentics/daily-progress.config.md 
@@ -36,6 +32,8 @@ tools:
       # Run `gh aw compile` after editing to recompile the workflow.
       #
       # For YOLO mode, uncomment the following line
+      # KillBash:
+      # BashOutput:
       # Bash:
       # - ":*
 

workflows/daily-qa.md

@@ -11,31 +11,31 @@ timeout_minutes: 15
 
 permissions: read-all
 
+network: defaults
+
 safe-outputs:
   create-issue:
     title-prefix: "${{ github.workflow }}"
   add-issue-comment:
     max: 5
+  create-pull-request:
+    draft: true
 
 tools:
   claude:
     allowed:
-      Edit:
-      MultiEdit:
-      Write:
-      NotebookEdit:
       WebFetch:
       WebSearch:
-      KillBash:
-      BashOutput:
       # Configure bash build commands in any of these places
       # - this file
-      # - .github/workflows/agentics/daily-qa.config.md 
+      # - .github/workflows/agentics/daily-qa-improver.config.md 
       # - .github/workflows/agentics/build-tools.md (shared).
       #
       # Run `gh aw compile` after editing to recompile the workflow.
       #
       # For YOLO mode, uncomment the following line
+      # KillBash:
+      # BashOutput:
       # Bash:
       # - ":*
 
@@ -71,11 +71,13 @@ Your name is ${{ github.workflow }}. Your job is to act as an agentic QA enginee
 
    - Make sure to include a clear description of the problem, steps to reproduce it, and any relevant information that might help the team understand and fix the issue. If you create a pull request, make sure to include a clear description of the changes you made and why they are necessary.
 
-4. Search for any previous "Daily QA Report" open issues in the repository. Read the latest one. If the status is essentially the same as the current state of the repository, then add a very brief comment to that issue saying you didn't find anything new and exit. Close all the previous open Daily QA Report issues.
+4. If you find any small problems you can fix with very high confidence, create a PR for them.
+
+5. Search for any previous "${{ github.workflow }}" open issues in the repository. Read the latest one. If the status is essentially the same as the current state of the repository, then add a very brief comment to that issue saying you didn't find anything new and exit. Close all the previous open Daily QA Report issues.
 
-5. Create a new issue with title starting with "${{ github.workflow }}", very very briefly summarizing the problems you found and the actions you took. Use note form. Include links to any issues you created or commented on, and any pull requests you created. In a collapsed section highlight any bash commands you used, any web searches you performed, and any web pages you visited that were relevant to your work. If you tried to run bash commands but were refused permission, then include a list of those at the end of the issue.
+6. Create a new issue with title starting with "${{ github.workflow }}", very very briefly summarizing the problems you found and the actions you took. Use note form. Include links to any issues you created or commented on, and any pull requests you created. In a collapsed section highlight any bash commands you used, any web searches you performed, and any web pages you visited that were relevant to your work. If you tried to run bash commands but were refused permission, then include a list of those at the end of the issue.
 
-6. Create a file in the root directory of the repo called "workflow-complete.txt" with the text "Workflow completed successfully".
+7. Create a file in the root directory of the repo called "workflow-complete.txt" with the text "Workflow completed successfully".
 
 @include agentics/shared/tool-refused.md
 

workflows/daily-team-status.md

@@ -9,6 +9,8 @@ on:
 
 permissions: read-all
 
+network: defaults
+
 safe-outputs:
   create-issue:
     title-prefix: "${{ github.workflow }}"
@@ -26,7 +28,7 @@ tools:
 
 # Daily Team Status
 
-1. Search for recent "Daily Team Status" open issues in the repository. Read them to understand the context of the team and recent activity, and to avoid duplication.
+1. Search for recent open issues with title "${{ github.workflow }}" in the repository. Read them to understand the context of the team and recent activity, and to avoid duplication. 
 
 2. Write an upbeat, friendly, motiviating summary of recent activity in the repo.