feat(spdd): sync OpenSPDD prompts via authenticated gh api in daily planner agent job#30876
feat(spdd): sync OpenSPDD prompts via authenticated gh api in daily planner agent job#30876
Conversation
Agent-Logs-Url: https://github.com/github/gh-aw/sessions/8a83b06f-3bd3-4bd0-b96d-d420c852ca06 Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>
openspdd commands in daily planner agent job
Agent-Logs-Url: https://github.com/github/gh-aw/sessions/90827fdb-4d6c-4292-902f-064864b19a5f Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>
Agent-Logs-Url: https://github.com/github/gh-aw/sessions/90827fdb-4d6c-4292-902f-064864b19a5f Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>
Updated per your request: removed Warning Firewall rules blocked me from connecting to one or more addresses (expand for details)I tried to connect to the following addresses, but was blocked by firewall rules:
Agent-1 /usr/bin/git infocmp` (http block)
|
Agent-Logs-Url: https://github.com/github/gh-aw/sessions/90827fdb-4d6c-4292-902f-064864b19a5f Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>
Agent-Logs-Url: https://github.com/github/gh-aw/sessions/90827fdb-4d6c-4292-902f-064864b19a5f Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>
openspdd commands in daily planner agent job| set -euo pipefail | ||
| # Pinned to the open-spdd main revision current when this workflow update was authored, | ||
| # so prompt inputs remain deterministic across runs. | ||
| OPENSPDD_REF="ac1e7c5f426572f9144a9f328de4b6a607ca9ba6" |
There was a problem hiding this comment.
@copilot resolve ref using gh APIs, use github token to avoid rate limiting
There was a problem hiding this comment.
Implemented in bcb4acb: the workflow now resolves OPENSPDD_REF via gh api repos/gszhangwei/open-spdd/commits/main --jq .sha and fetches prompts via authenticated gh api content calls using GH_TOKEN, with an explicit guard if ref resolution fails.
Agent-Logs-Url: https://github.com/github/gh-aw/sessions/b484b7b1-16da-4fe1-98fa-7c32f06b1f83 Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>
Agent-Logs-Url: https://github.com/github/gh-aw/sessions/b484b7b1-16da-4fe1-98fa-7c32f06b1f83 Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>
|
Just as a heads up, I was blocked by some firewall rules while working on your feedback. Expand below for details. Warning Firewall rules blocked me from connecting to one or more addresses (expand for details)I tried to connect to the following addresses, but was blocked by firewall rules:
If you need me to access, download, or install something from one of these locations, you can either:
|
|
@copilot merge main and recompile |
There was a problem hiding this comment.
Pull request overview
Updates the Daily SPDD Spec Planner workflow to sync OpenSPDD prompt files directly from the open-spdd repository via authenticated gh api, avoiding installation of the OpenSPDD CLI and reducing unauthenticated rate-limit risk.
Changes:
- Added a workflow step to resolve the latest
open-spddmainSHA and download prompt markdown files into.github/copilot-prompts. - Added basic validation for ref resolution and non-empty downloaded prompt files.
- Regenerated the compiled workflow lock file to include the new prompt-sync step.
Show a summary per file
| File | Description |
|---|---|
.github/workflows/daily-spdd-spec-planner.md |
Adds a pre-run step to fetch OpenSPDD prompts via gh api into .github/copilot-prompts. |
.github/workflows/daily-spdd-spec-planner.lock.yml |
Regenerated compiled workflow to reflect the new prompt-sync step. |
Copilot's findings
Tip
Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
- Files reviewed: 2/2 changed files
- Comments generated: 2
| steps: | ||
| - name: Copy OpenSPDD prompts | ||
| env: | ||
| GH_TOKEN: ${{ github.token }} |
| # Resolve the latest OpenSPDD main ref each run via authenticated GitHub API. | ||
| # This intentionally tracks upstream prompt updates while avoiding unauthenticated rate limits. | ||
| OPENSPDD_REF="$(gh api repos/gszhangwei/open-spdd/commits/main --jq .sha)" | ||
| test -n "${OPENSPDD_REF}" || { echo "::error::Failed to resolve OpenSPDD main ref"; exit 1; } |
…pdd-cli # Conflicts: # .github/workflows/daily-spdd-spec-planner.lock.yml Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>
Merged Warning Firewall rules blocked me from connecting to one or more addresses (expand for details)I tried to connect to the following addresses, but was blocked by firewall rules:
If you need me to access, download, or install something from one of these locations, you can either:
|
This updates the daily SPDD spec planner workflow to use prompt-only OpenSPDD setup in the agent job, instead of installing the OpenSPDD CLI.
Workflow runtime setup
daily-spdd-spec-planner.md.spdd-analysis,spdd-reasons-canvas,spdd-generate,spdd-sync) into.github/copilot-prompts.Authenticated ref and content resolution
maincommit SHA viagh api.gh apicontent endpoints usingGH_TOKENto reduce unauthenticated rate-limit risk.Restricted tool allowlist update
openspdd:*tools.bashallowlist entry since the CLI is no longer used.Compiled workflow parity
daily-spdd-spec-planner.lock.ymlto reflect the prompt-sync step and allowlist changes.> [!WARNING]
>