Unify safe output processing into single handler manager with compiler-managed flag

.github/workflows/functional-pragmatist.md

@@ -35,11 +35,6 @@ tools:
   edit:
   bash:
     - "*"
-  cache:
-    enabled: true
-    keys:
-      - "last_processed_package"
-      - "processed_packages"
 
 timeout-minutes: 45
 strict: true

actions/setup/action.yml

@@ -7,6 +7,10 @@ inputs:
     description: 'Destination directory for activation files (default: /opt/gh-aw/actions)'
     required: false
     default: '/opt/gh-aw/actions'
+  safe-output-projects:
+    description: 'Enable safe-output-projects support (installs @actions/github package for project handlers)'
+    required: false
+    default: 'false'
 
 outputs:
   files-copied:
@@ -19,6 +23,7 @@ runs:
       shell: bash
       env:
         INPUT_DESTINATION: ${{ inputs.destination }}
+        INPUT_SAFE_OUTPUT_PROJECTS: ${{ inputs.safe-output-projects }}
       run: ${{ github.action_path }}/setup.sh
 
 branding:

actions/setup/js/campaign_labels.cjs

@@ -0,0 +1,46 @@
+// @ts-check
+
+/**
+ * Campaign Labels Helper
+ *
+ * Utility functions for handling campaign labels in safe outputs.
+ * These functions normalize campaign IDs and retrieve campaign labels from environment variables.
+ */
+
+const DEFAULT_AGENTIC_CAMPAIGN_LABEL = "agentic-campaign";
+
+/**
+ * Normalize campaign IDs to the same label format used by campaign discovery.
+ * Mirrors actions/setup/js/campaign_discovery.cjs.
+ * @param {string} campaignId
+ * @returns {string}
+ */
+function formatCampaignLabel(campaignId) {
+  return `z_campaign_${String(campaignId)
+    .toLowerCase()
+    .replace(/[_\s]+/g, "-")}`;
+}
+
+/**
+ * Get campaign labels implied by environment variables.
+ * Returns the generic "agentic-campaign" label and the campaign-specific "z_campaign_<id>" label.
+ * @returns {{enabled: boolean, labels: string[]}}
+ */
+function getCampaignLabelsFromEnv() {
+  const campaignId = String(process.env.GH_AW_CAMPAIGN_ID || "").trim();
+
+  if (!campaignId) {
+    return { enabled: false, labels: [] };
+  }
+
+  const specificLabel = formatCampaignLabel(campaignId);
+  return {
+    enabled: true,
+    labels: [DEFAULT_AGENTIC_CAMPAIGN_LABEL, specificLabel],
+  };
+}
+
+module.exports = {
+  formatCampaignLabel,
+  getCampaignLabelsFromEnv,
+};

actions/setup/js/copy_project.cjs

@@ -259,14 +259,23 @@ async function copyProject(output) {
  * @param {number} [config.max] - Maximum number of copy_project items to process
  * @param {string} [config.source_project] - Default source project URL
  * @param {string} [config.target_owner] - Default target owner
+ * @param {Object} githubClient - GitHub client (Octokit instance) to use for API calls
  * @returns {Promise<Function>} Message handler function
  */
-async function main(config = {}) {
+async function main(config = {}, githubClient = null) {
   // Extract configuration
   const maxCount = config.max || 10;
   const defaultSourceProject = config.source_project || "";
   const defaultTargetOwner = config.target_owner || "";
 
+  // Use the provided github client, or fall back to the global github object
+  // @ts-ignore - global.github is set by setupGlobals() from github-script context
+  const github = githubClient || global.github;
+
+  if (!github) {
+    throw new Error("GitHub client is required but not provided. Either pass a github client to main() or ensure global.github is set by github-script action.");
+  }
+
   core.info(`Max count: ${maxCount}`);
   if (defaultSourceProject) {
     core.info(`Default source project: ${defaultSourceProject}`);
@@ -281,10 +290,11 @@ async function main(config = {}) {
   /**
    * Message handler function that processes a single copy_project message
    * @param {Object} message - The copy_project message to process
-   * @param {Object} resolvedTemporaryIds - Map of temporary IDs (unused for copy_project)
+   * @param {Map<string, {repo?: string, number?: number, projectUrl?: string}>} temporaryIdMap - Unified map of temporary IDs
+   * @param {Object} resolvedTemporaryIds - Plain object version of temporaryIdMap for backward compatibility
    * @returns {Promise<Object>} Result with success/error status and project details
    */
-  return async function handleCopyProject(message, resolvedTemporaryIds) {
+  return async function handleCopyProject(message, temporaryIdMap, resolvedTemporaryIds = {}) {
     // Check max limit
     if (processedCount >= maxCount) {
       core.warning(`Skipping copy_project: max count of ${maxCount} reached`);

actions/setup/js/create_project.cjs

@@ -284,17 +284,24 @@ async function createProjectView(projectUrl, viewConfig) {
 /**
  * Main entry point - handler factory that returns a message handler function
  * @param {Object} config - Handler configuration
+ * @param {Object} githubClient - GitHub client (Octokit instance) to use for API calls
  * @returns {Promise<Function>} Message handler function
  */
-async function main(config = {}) {
+async function main(config = {}, githubClient = null) {
   // Extract configuration
   const defaultTargetOwner = config.target_owner || "";
   const maxCount = config.max || 1;
   const titlePrefix = config.title_prefix || "Campaign";
   const configuredViews = Array.isArray(config.views) ? config.views : [];
 
-  // The github object is already authenticated with the custom token via the
-  // github-token parameter set on the actions/github-script action
+  // Use the provided github client, or fall back to the global github object
+  // The global github object is available when running via github-script action
+  // @ts-ignore - global.github is set by setupGlobals() from github-script context
+  const github = githubClient || global.github;
+
+  if (!github) {
+    throw new Error("GitHub client is required but not provided. Either pass a github client to main() or ensure global.github is set by github-script action.");
+  }
 
   if (defaultTargetOwner) {
     core.info(`Default target owner: ${defaultTargetOwner}`);
@@ -313,10 +320,11 @@ async function main(config = {}) {
   /**
    * Message handler function that processes a single create_project message
    * @param {Object} message - The create_project message to process
-   * @param {Object} resolvedTemporaryIds - Map of temporary IDs (unused for create_project)
+   * @param {Map<string, {repo?: string, number?: number, projectUrl?: string}>} temporaryIdMap - Unified map of temporary IDs
+   * @param {Object} resolvedTemporaryIds - Plain object version of temporaryIdMap for backward compatibility
    * @returns {Promise<Object>} Result with success/error status
    */
-  return async function handleCreateProject(message, resolvedTemporaryIds) {
+  return async function handleCreateProject(message, temporaryIdMap, resolvedTemporaryIds = {}) {
     // Check max limit
     if (processedCount >= maxCount) {
       core.warning(`Skipping create_project: max count of ${maxCount} reached`);

actions/setup/js/create_project_status_update.cjs

@@ -265,11 +265,21 @@ function formatDate(date) {
 /**
  * Main handler factory for create_project_status_update
  * Returns a message handler function that processes individual create_project_status_update messages
- * @type {HandlerFactoryFunction}
+ * @param {Object} config - Handler configuration
+ * @param {Object} githubClient - GitHub client (Octokit instance) to use for API calls
+ * @returns {Promise<Function>} Message handler function
  */
-async function main(config = {}) {
+async function main(config = {}, githubClient = null) {
   const maxCount = config.max || 10;
 
+  // Use the provided github client, or fall back to the global github object
+  // @ts-ignore - global.github is set by setupGlobals() from github-script context
+  const github = githubClient || global.github;
+
+  if (!github) {
+    throw new Error("GitHub client is required but not provided. Either pass a github client to main() or ensure global.github is set by github-script action.");
+  }
+
   core.info(`Max count: ${maxCount}`);
 
   // Track how many items we've processed for max limit
@@ -281,10 +291,11 @@ async function main(config = {}) {
   /**
    * Message handler function that processes a single create_project_status_update message
    * @param {Object} message - The create_project_status_update message to process
-   * @param {Object} resolvedTemporaryIds - Map of temporary IDs to {repo, number}
+   * @param {Map<string, {repo?: string, number?: number, projectUrl?: string}>} temporaryIdMap - Unified map of temporary IDs
+   * @param {Object} resolvedTemporaryIds - Plain object version of temporaryIdMap for backward compatibility
    * @returns {Promise<Object>} Result with success/error status and status update details
    */
-  return async function handleCreateProjectStatusUpdate(message, resolvedTemporaryIds) {
+  return async function handleCreateProjectStatusUpdate(message, temporaryIdMap, resolvedTemporaryIds = {}) {
     // Check if we've hit the max limit
     if (processedCount >= maxCount) {
       core.warning(`Skipping create-project-status-update: max count of ${maxCount} reached`);