open-design/.github/workflows
lefarcen ce9fa687ca
ci: trigger PR exploration via maintainer /explore comment (no approval) (#3139)
* ci: trigger PR exploration via maintainer "/explore" comment (no approval)

Add a low-friction way to run the sandbox exploration: a maintainer
comments "/explore" on a PR.

- on: issue_comment (kept workflow_dispatch). The job `if` allows the
  comment path only when it is on a PR and the commenter has write access
  (author_association OWNER/MEMBER/COLLABORATOR), so randoms cannot trigger
  it; untrusted PR code still runs only inside the Docker sandbox.
- Drop the agent-pr-explore environment approval gate: both triggers are
  already write-gated and there is no auto-trigger, so the extra manual
  approval is redundant. R2 creds are repo-level secrets (no env-scoped
  secrets), so they stay available without the environment.
- Feedback: 👀 reaction on the command + a placeholder comment carrying
  the report marker (so the run yields one evolving comment), 🚀 on
  success, and 👎 + a failure note (with the run link) on failure.

Does not auto-run on every PR, so unrelated PRs stay clean.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

* ci: don't clobber a produced report with the /explore failure note

Review: the failure-feedback step ran after the always() report step, so
on the failure-with-report case (sandbox wrote a report then exited
non-zero) it overwrote the just-posted report with the generic "failed
before producing a report" note — losing the useful output.

Guard it: if the report file exists, leave the posted report in place and
skip the failure note/reaction. Only post the short failure note when no
report was produced.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-05-27 16:48:58 +00:00
..
actionlint.yml fix(ci): lint workflow changes with actionlint (#2742) 2026-05-23 12:12:55 +08:00
agent-pr-explore-sandbox.yml ci: trigger PR exploration via maintainer /explore comment (no approval) (#3139) 2026-05-27 16:48:58 +00:00
agent-pr-explore.lock.yml ci: add agent explore workflow placeholder (#2830) 2026-05-24 20:22:51 +08:00
blog-3day-report.yml fix(ci): lint workflow changes with actionlint (#2742) 2026-05-23 12:12:55 +08:00
blog-indexing-monitor.yml fix(ci): lint workflow changes with actionlint (#2742) 2026-05-23 12:12:55 +08:00
blog-indexing-on-deploy.yml ci(landing): split landing deploy into staging gate + manual production (#2994) 2026-05-26 14:05:04 +00:00
ci.yml ci(landing): split landing deploy into staging gate + manual production (#2994) 2026-05-26 14:05:04 +00:00
contributor-card-bot.yml ci: relay contributor card events to worker (#3113) 2026-05-27 14:48:01 +00:00
critique-conformance.yml feat(daemon): Critique Theater Phase 16 (M-phase rollout ratchet + /api/critique/conformance) (#1499) 2026-05-14 11:05:57 +08:00
discord-resolved.yml ci: skip upstream-only workflows on forks (#1586) 2026-05-14 14:27:23 +08:00
docker-image.yml fix(ci): only run docker image workflow for release tags (#1916) 2026-05-16 22:32:33 +08:00
fork-pr-workflow-approval.yml fix(ci): run fork visual reports from trusted code (#2935) 2026-05-26 06:17:04 +00:00
landing-page-ci.yml feat(landing-page): localize plugins library across 18 locales (#3010) 2026-05-27 09:30:59 +00:00
landing-page-production.yml ci(landing): split landing deploy into staging gate + manual production (#2994) 2026-05-26 14:05:04 +00:00
landing-page-staging.yml ci(landing): split landing deploy into staging gate + manual production (#2994) 2026-05-26 14:05:04 +00:00
metrics.yml fix(ci): use open-design-bot for metrics PRs (#1910) 2026-05-16 21:52:37 +08:00
nix-check.yml chore: optimize CI and beta release runtime (#2231) 2026-05-19 18:06:28 +08:00
nix-hash-autofix.yml chore(nix): streamline pnpm deps hash maintenance (#2919) 2026-05-26 07:35:38 +00:00
pr-author-inactivity.yml fix(ci): anchor PR inactivity clock to author responses (#2185) 2026-05-19 13:59:15 +08:00
refresh-contributors-wall.yml ci: skip upstream-only workflows on forks (#1586) 2026-05-14 14:27:23 +08:00
release-beta.yml feat(pack): add Windows portable zip target alongside NSIS installer (#2937) 2026-05-26 06:14:44 +00:00
release-preview.yml feat(pack): add Windows portable zip target alongside NSIS installer (#2937) 2026-05-26 06:14:44 +00:00
release-stable.yml feat(pack): add Windows portable zip target alongside NSIS installer (#2937) 2026-05-26 06:14:44 +00:00
seo-daily-report.yml fix(ci): lint workflow changes with actionlint (#2742) 2026-05-23 12:12:55 +08:00
stale-issues.yml ci: add PR-author and stale-issue inactivity workflows (#2055) 2026-05-18 16:45:37 +08:00
visual-baseline.yml chore(ci): add visual regression PR workflow (#2372) 2026-05-20 15:05:59 +08:00
visual-pr-capture.yml ci: gate fork PR workflow auto-approval (#2683) 2026-05-23 11:48:36 +08:00
visual-pr-comment.yml fix(ci): run fork visual reports from trusted code (#2935) 2026-05-26 06:17:04 +00:00
visual-pr-verify.yml fix(ci): align visual selectors and nix hashes (#2471) 2026-05-21 10:45:37 +08:00