Skip to content

ci(town-crier): producer workflow (announce + resolve on close) #36

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
jasperboerhof merged 3 commits into from
Jun 20, 2026
Merged

ci(town-crier): producer workflow (announce + resolve on close) #36

Changes from 1 commit
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
e225f9e
ci(town-crier): producer workflow (announce + resolve on close)
jasperboerhof Jun 20, 2026
3535b3b
ci(town-crier): least-privilege permissions + fail-open producer (rev…
jasperboerhof Jun 20, 2026
2f80889
ci(town-crier): config-error fails loud, bus-hiccup fails open (revie…
jasperboerhof Jun 20, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
59 changes: 59 additions & 0 deletions .github/workflows/announce-pr.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,59 @@
# Drop this into a repo at .github/workflows/announce-pr.yml to make it a town-crier producer.
#
# Setup (once per repo or org):
# - Variable TOWN_CRIER_URL = https://<app>.fly.dev
# - Secret TOWN_CRIER_TOKEN = the bearer token minted for "github-action"
#
# Produces BOTH sides of a request's lifecycle, so the bus never drifts from GitHub:
# - announce: when "Agent Review Requested" lands on a PR, tell the crier once.
# - resolve: when that PR closes/merges, retire its thread — otherwise a landed PR
# sits "open" on the bus forever (there is no GitHub->bus merge sync) and
# joined harnesses keep getting offered already-merged work.
# Joined harnesses pick up open requests from the bus — this workflow does NOT poll or review.
name: town-crier producer (announce + resolve)

on:
pull_request:
types: [labeled, closed]

jobs:
announce:
Comment thread
jasperboerhof marked this conversation as resolved.
if: github.event.action == 'labeled' && github.event.label.name == 'Agent Review Requested'
runs-on: ubuntu-latest
steps:
- name: Announce to the crier
env:
CRIER_URL: ${{ vars.TOWN_CRIER_URL }}
CRIER_TOKEN: ${{ secrets.TOWN_CRIER_TOKEN }}
PR_URL: ${{ github.event.pull_request.html_url }}
REPO: ${{ github.repository }}
TITLE: ${{ github.event.pull_request.title }}
Comment thread
jasperboerhof marked this conversation as resolved.
REQUESTER: ${{ github.event.pull_request.user.login }}
run: |
# jq builds the JSON so a PR title with quotes can't break the payload.
curl -fsS -X POST "$CRIER_URL/announce" \
Comment thread
jasperboerhof marked this conversation as resolved.
Outdated
-H "Authorization: Bearer $CRIER_TOKEN" \
-H "Content-Type: application/json" \
-d "$(jq -n \
--arg pr "$PR_URL" \
--arg repo "$REPO" \
--arg title "$TITLE" \
--arg requester "$REQUESTER" \
'{pr_url:$pr, repo:$repo, title:$title, requester:$requester}')"

resolve:
if: github.event.action == 'closed' && contains(github.event.pull_request.labels.*.name, 'Agent Review Requested')
Comment thread
jasperboerhof marked this conversation as resolved.
runs-on: ubuntu-latest
steps:
- name: Resolve on the crier
env:
CRIER_URL: ${{ vars.TOWN_CRIER_URL }}
CRIER_TOKEN: ${{ secrets.TOWN_CRIER_TOKEN }}
PR_URL: ${{ github.event.pull_request.html_url }}
MERGED: ${{ github.event.pull_request.merged }}
run: |
NOTE=$([ "$MERGED" = "true" ] && echo "merged" || echo "closed without merge")
curl -fsS -X POST "$CRIER_URL/resolve" \
-H "Authorization: Bearer $CRIER_TOKEN" \
-H "Content-Type: application/json" \
-d "$(jq -n --arg pr "$PR_URL" --arg note "$NOTE" '{pr_url:$pr, note:$note}')"
Loading