feat: add Fro Bot agent workflow (#70)

* feat: add Fro Bot agent workflow

- Introduced a new GitHub Actions workflow for the Fro Bot.
- Configured triggers for issue comments, pull requests, and scheduled audits.
- Included prompts for manual and scheduled runs to guide the bot's actions.

* fix: correct PROMPT variable syntax

* chore(deps): update github/codeql-action action to v4.32.3 (#71)

Co-authored-by: mrbro-bot[bot] <137683033+mrbro-bot[bot]@users.noreply.github.com>

* ci(fro-bot): add PR review comment trigger and 15-min job timeout

* ci(fro-bot): tighten triggers, prompts, and fork handling

* ci(fro-bot): update agent version to HEAD to get past model issue

---------

Co-authored-by: mrbro-bot[bot] <137683033+mrbro-bot[bot]@users.noreply.github.com>

Author: marcusrbrown

.github/settings.yml

@@ -16,6 +16,7 @@ branches:
           [
             Build,
             Docs Build,
+            Fro Bot,
             Typecheck,
             Lint,
             Test,

.github/workflows/fro-bot.yaml

@@ -0,0 +1,82 @@
+---
+name: Fro Bot
+
+on:
+  issue_comment:
+    types: [created]
+  pull_request_review_comment:
+    types: [created]
+  pull_request:
+    branches: [main]
+    types: [opened, synchronize, reopened, ready_for_review]
+  schedule:
+    - cron: '0 0 * * *'
+  workflow_dispatch:
+    inputs:
+      prompt:
+        description: Custom prompt for the Fro Bot agent
+        required: false
+
+permissions:
+  contents: read
+
+concurrency:
+  group: fro-bot-${{ github.event.issue.number || github.event.pull_request.number || github.ref }}
+  cancel-in-progress: true
+
+env:
+  DEFAULT_PROMPT: |
+    You are Fro Bot, an AI assistant for managing GitHub repositories. Your tasks include:
+    - Reviewing new issues and pull requests
+    - Providing feedback and suggestions
+    - Triaging and labeling issues
+    - Assisting with code reviews
+    - Engaging with the community to keep the repository healthy and active
+    You have been triggered by a recent event. Please analyze the context and take appropriate actions to help maintain the repository.
+  SCHEDULE_PROMPT: |
+    Review the repository's open issues and pull requests. For each item, determine if it is:
+    - Stale and needs follow-up
+    - Ready for review
+    - Needs triage
+    Summarize your findings in a comment on the issue or PR, or create a new issue if necessary.
+
+jobs:
+  fro-bot:
+    if: >-
+      (
+        github.event.pull_request == null ||
+        !github.event.pull_request.head.repo.fork
+      ) &&
+      (
+        (github.event_name != 'issue_comment' && github.event_name != 'pull_request_review_comment') ||
+        (
+          contains(github.event.comment.body || '', '@fro-bot') &&
+          (github.event.comment.user.login || '') != 'fro-bot' &&
+          contains(fromJSON('["OWNER", "MEMBER", "COLLABORATOR"]'), github.event.comment.author_association || '')
+        )
+      )
+    name: Fro Bot
+    runs-on: ubuntu-latest
+    timeout-minutes: 15
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        with:
+          fetch-depth: 0
+          token: ${{ secrets.FRO_BOT_PAT }}
+
+      - name: Setup Bun
+        uses: oven-sh/setup-bun@3d267786b128fe76c2f16a390aa2448b815359f3 # v2.1.2
+
+      - name: Install dependencies
+        run: bun install --frozen-lockfile
+
+      - name: Run Fro Bot
+        uses: fro-bot/agent@929db5028efcda98199303941e9edd6c54075980
+        env:
+          OPENCODE_PROMPT_ARTIFACT: 'true'
+          PROMPT: ${{ (github.event_name == 'workflow_dispatch' && (github.event.inputs.prompt || env.DEFAULT_PROMPT)) || (github.event_name == 'schedule' && env.SCHEDULE_PROMPT) || '' }}
+        with:
+          auth-json: '{}'
+          github-token: ${{ secrets.FRO_BOT_PAT }}
+          prompt: ${{ env.PROMPT }}