baa683211e
A called workflow cannot read the caller's dispatch inputs on this forge: github.event.inputs is empty inside workflow_call even though the top-level caller receives the value in both contexts (probe runs 6/7). The sweep's gate read exactly that, so every dispatch-woken sweep bootstrapped — runs 459 and 523, ~20 label upserts per board event — while the trigger honestly logged bootstrap=no. The bridge, per the #6361 contract: labels-sweep.yml declares workflow_call.inputs.bootstrap (string, default "no"); the dogfood caller and the published CONSUMERS.md stub pass it via with.bootstrap with empty mapped to "no" at the caller — kimi's edge: on schedule the top-level context is empty, and an empty that slipped through would have turned every cron into a bootstrap. The gate feeds the declared input to labels-reconcile unchanged, so an invalid value meets the action's own yes|no refusal. test/labels-bootstrap.test.sh pins every hop: the declared boundary, both gates as the identity, no expression reading github.event.inputs (scoped to ${{ }} bodies — the file's prose names the context to explain it), the two pass-throughs byte-exact, and the four value paths driven through the shipped expressions into the action's real validator. Mutations: dropping the declaration reds 4, dropping the pass-through reds 3, restoring the old gate reds 2. Refs #215
53 lines
2.8 KiB
YAML
53 lines
2.8 KiB
YAML
name: labels-sweep
|
|
# Ceremony's own sweep caller (#209) — self-labels.yml's detached half,
|
|
# wearing the same local-`uses:` deviation and the same warning: consumers
|
|
# must NEVER copy the local form (it rides main, unpinned — correct only
|
|
# for the repo that IS the source). Consumers write:
|
|
# uses: heavy-duty/ceremony/.github/workflows/labels-sweep.yml@<pinned-tag>
|
|
on:
|
|
# The consumer owns this cadence (#203). Hourly is the recommended default
|
|
# when no other engine drives board state: the cron is then the sweep's ONLY
|
|
# wake for four transition classes — a review verdict landing (there is no
|
|
# pull_request_review trigger on the labels caller), blocker:ci-red set or
|
|
# cleared (no check_suite/check_run/workflow_run), a blocker:conflict when
|
|
# ANOTHER PR merges under this one, and the time-based stale / 48h
|
|
# claim-reclaim. The labels caller's events carry the rest in seconds, one
|
|
# trigger-job dispatch away. Hourly trades ≤1h of latency on those four
|
|
# while cutting nominal scheduled sweeps from four an hour to one at
|
|
# GitHub's 1-minute billing floor. Do not delete the cron: it is their
|
|
# discovery path. If another engine writes some of those transitions, only
|
|
# the classes with no other writer bound the cadence; relax it only as that
|
|
# list shrinks.
|
|
schedule: [{cron: "0 * * * *"}]
|
|
# A manual full-board sweep. A bare dispatch (input default "yes") also
|
|
# bootstraps the taxonomy on a fresh repo — what dispatching the labels
|
|
# caller did before #209. The reusable's trigger job wakes this workflow
|
|
# with bootstrap=no on every board event — an event-woken sweep must not
|
|
# re-upsert ~20 labels each time — so declaring this input is part of the
|
|
# caller contract: a dispatch naming an undeclared input is refused, and
|
|
# the trigger job goes loudly red.
|
|
workflow_dispatch:
|
|
inputs:
|
|
bootstrap:
|
|
description: Bootstrap the label taxonomy before sweeping
|
|
type: choice
|
|
options: ["yes", "no"]
|
|
default: "yes"
|
|
permissions:
|
|
contents: read
|
|
checks: read # mergeability/check-rollup read for PR state
|
|
statuses: read # commit-status rollup read for PR state
|
|
issues: write
|
|
pull-requests: write
|
|
jobs:
|
|
sweep:
|
|
# pr_workflow_name keeps its default: ceremony's PR-facing caller is
|
|
# named `labels` (self-labels.yml).
|
|
uses: ./.github/workflows/labels-sweep.yml
|
|
with:
|
|
# The dispatch input crosses the workflow_call boundary HERE, or not at
|
|
# all: the called workflow cannot read this caller's dispatch inputs on
|
|
# this forge (ceremony#215). On `schedule` the top-level context is
|
|
# empty, and empty maps to "no" EXPLICITLY — a cron that bootstraps is
|
|
# the failure kimi named before it could exist.
|
|
bootstrap: ${{ inputs.bootstrap || 'no' }}
|