recompile

Signed-off-by: Nikolaj Bjorner <nbjorner@microsoft.com>

.gitattributes

@@ -3,7 +3,7 @@
 
 src/api/dotnet/Properties/AssemblyInfo.cs text eol=crlf
 
-.github/workflows/*.lock.yml linguist-generated=true merge=ours
+.github/workflows/*.lock.yml linguist-generated=true
 
 # Use bd merge for beads JSONL files
 .beads/issues.jsonl merge=beads

.github/aw/actions-lock.json

@@ -29,6 +29,16 @@
       "repo": "actions/upload-artifact",
       "version": "v7.0.1",
       "sha": "043fb46d1a93c77aae656e7c1c64a875d1fc6a0a"
+    },
+    "github/gh-aw-actions/setup-cli@v0.88.2": {
+      "repo": "github/gh-aw-actions/setup-cli",
+      "version": "v0.88.2",
+      "sha": "9271a1804551c0dc4fb0085a97979950aa2f8489"
+    },
+    "github/gh-aw-actions/setup@v0.88.2": {
+      "repo": "github/gh-aw-actions/setup",
+      "version": "v0.88.2",
+      "sha": "9271a1804551c0dc4fb0085a97979950aa2f8489"
     }
   },
   "containers": {

.github/workflows/agentics-maintenance.yml

@@ -1,4 +1,4 @@
-# This file was automatically generated by pkg/workflow/maintenance_workflow.go (v0.83.4). DO NOT EDIT. To debug this workflow, load the skill at https://github.com/github/gh-aw/blob/main/debug.md
+# This file was automatically generated by pkg/workflow/maintenance_workflow.go (v0.88.2). DO NOT EDIT. To debug this workflow, load the skill at https://github.com/github/gh-aw/blob/main/debug.md
 #
 #    ___                   _   _
 #   / _ \                 | | (_)
@@ -44,9 +44,9 @@ on:
         description: 'Optional maintenance operation to run'
         required: false
         type: choice
-        default: ''
+        default: 'none'
         options:
-          - ''
+          - 'none'
           - 'disable'
           - 'enable'
           - 'update'
@@ -88,13 +88,13 @@ permissions: {}
 
 jobs:
   close-expired-discussions:
-    if: ${{ (!(github.event.repository.fork)) && github.event_name != 'push' && (github.event_name != 'workflow_dispatch' && github.event_name != 'workflow_call' || inputs.operation == '') }}
+    if: ${{ (!(github.event.repository.fork)) && github.event_name != 'push' && (github.event_name != 'workflow_dispatch' && github.event_name != 'workflow_call' || inputs.operation == '' || inputs.operation == 'none') }}
     runs-on: ubuntu-slim
     permissions:
       discussions: write
     steps:
       - name: Setup Scripts
-        uses: github/gh-aw-actions/setup@v0.83.4
+        uses: github/gh-aw-actions/setup@9271a1804551c0dc4fb0085a97979950aa2f8489 # v0.88.2
         with:
           destination: ${{ runner.temp }}/gh-aw/actions
 
@@ -102,18 +102,20 @@ jobs:
         uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         with:
           script: |
-            const { setupGlobals } = require('${{ runner.temp }}/gh-aw/actions/setup_globals.cjs');
+            const path = require('path');
+            const actionsDir = path.join(process.env.RUNNER_TEMP, 'gh-aw', 'actions');
+            const { setupGlobals } = require(path.join(actionsDir, 'setup_globals.cjs'));
             setupGlobals(core, github, context, exec, io, getOctokit);
-            const { main } = require('${{ runner.temp }}/gh-aw/actions/close_expired_discussions.cjs');
+            const { main } = require(path.join(actionsDir, 'close_expired_discussions.cjs'));
             await main();
   close-expired-issues:
-    if: ${{ (!(github.event.repository.fork)) && github.event_name != 'push' && (github.event_name != 'workflow_dispatch' && github.event_name != 'workflow_call' || inputs.operation == '') }}
+    if: ${{ (!(github.event.repository.fork)) && github.event_name != 'push' && (github.event_name != 'workflow_dispatch' && github.event_name != 'workflow_call' || inputs.operation == '' || inputs.operation == 'none') }}
     runs-on: ubuntu-slim
     permissions:
       issues: write
     steps:
       - name: Setup Scripts
-        uses: github/gh-aw-actions/setup@v0.83.4
+        uses: github/gh-aw-actions/setup@9271a1804551c0dc4fb0085a97979950aa2f8489 # v0.88.2
         with:
           destination: ${{ runner.temp }}/gh-aw/actions
 
@@ -121,18 +123,20 @@ jobs:
         uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         with:
           script: |
-            const { setupGlobals } = require('${{ runner.temp }}/gh-aw/actions/setup_globals.cjs');
+            const path = require('path');
+            const actionsDir = path.join(process.env.RUNNER_TEMP, 'gh-aw', 'actions');
+            const { setupGlobals } = require(path.join(actionsDir, 'setup_globals.cjs'));
             setupGlobals(core, github, context, exec, io, getOctokit);
-            const { main } = require('${{ runner.temp }}/gh-aw/actions/close_expired_issues.cjs');
+            const { main } = require(path.join(actionsDir, 'close_expired_issues.cjs'));
             await main();
   close-expired-pull-requests:
-    if: ${{ (!(github.event.repository.fork)) && github.event_name != 'push' && (github.event_name != 'workflow_dispatch' && github.event_name != 'workflow_call' || inputs.operation == '') }}
+    if: ${{ (!(github.event.repository.fork)) && github.event_name != 'push' && (github.event_name != 'workflow_dispatch' && github.event_name != 'workflow_call' || inputs.operation == '' || inputs.operation == 'none') }}
     runs-on: ubuntu-slim
     permissions:
       pull-requests: write
     steps:
       - name: Setup Scripts
-        uses: github/gh-aw-actions/setup@v0.83.4
+        uses: github/gh-aw-actions/setup@9271a1804551c0dc4fb0085a97979950aa2f8489 # v0.88.2
         with:
           destination: ${{ runner.temp }}/gh-aw/actions
 
@@ -140,19 +144,21 @@ jobs:
         uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         with:
           script: |
-            const { setupGlobals } = require('${{ runner.temp }}/gh-aw/actions/setup_globals.cjs');
+            const path = require('path');
+            const actionsDir = path.join(process.env.RUNNER_TEMP, 'gh-aw', 'actions');
+            const { setupGlobals } = require(path.join(actionsDir, 'setup_globals.cjs'));
             setupGlobals(core, github, context, exec, io, getOctokit);
-            const { main } = require('${{ runner.temp }}/gh-aw/actions/close_expired_pull_requests.cjs');
+            const { main } = require(path.join(actionsDir, 'close_expired_pull_requests.cjs'));
             await main();
 
   cleanup-cache-memory:
-    if: ${{ (!(github.event.repository.fork)) && github.event_name != 'push' && (github.event_name != 'workflow_dispatch' && github.event_name != 'workflow_call' || inputs.operation == '' || inputs.operation == 'clean_cache_memories') }}
+    if: ${{ (!(github.event.repository.fork)) && github.event_name != 'push' && (github.event_name != 'workflow_dispatch' && github.event_name != 'workflow_call' || inputs.operation == '' || inputs.operation == 'none' || inputs.operation == 'clean_cache_memories') }}
     runs-on: ubuntu-slim
     permissions:
       actions: write
     steps:
       - name: Setup Scripts
-        uses: github/gh-aw-actions/setup@v0.83.4
+        uses: github/gh-aw-actions/setup@9271a1804551c0dc4fb0085a97979950aa2f8489 # v0.88.2
         with:
           destination: ${{ runner.temp }}/gh-aw/actions
 
@@ -160,13 +166,15 @@ jobs:
         uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         with:
           script: |
-            const { setupGlobals } = require('${{ runner.temp }}/gh-aw/actions/setup_globals.cjs');
+            const path = require('path');
+            const actionsDir = path.join(process.env.RUNNER_TEMP, 'gh-aw', 'actions');
+            const { setupGlobals } = require(path.join(actionsDir, 'setup_globals.cjs'));
             setupGlobals(core, github, context, exec, io, getOctokit);
-            const { main } = require('${{ runner.temp }}/gh-aw/actions/cleanup_cache_memory.cjs');
+            const { main } = require(path.join(actionsDir, 'cleanup_cache_memory.cjs'));
             await main();
 
   run_operation:
-    if: ${{ (github.event_name == 'workflow_dispatch' || github.event_name == 'workflow_call') && inputs.operation != '' && inputs.operation != 'safe_outputs' && inputs.operation != 'create_labels' && inputs.operation != 'activity_report' && inputs.operation != 'close_agentic_workflows_issues' && inputs.operation != 'clean_cache_memories' && inputs.operation != 'update_pull_request_branches' && inputs.operation != 'validate' && inputs.operation != 'forecast' && (!(github.event.repository.fork)) }}
+    if: ${{ (github.event_name == 'workflow_dispatch' || github.event_name == 'workflow_call') && inputs.operation != '' && inputs.operation != 'none' && inputs.operation != 'safe_outputs' && inputs.operation != 'create_labels' && inputs.operation != 'activity_report' && inputs.operation != 'close_agentic_workflows_issues' && inputs.operation != 'clean_cache_memories' && inputs.operation != 'update_pull_request_branches' && inputs.operation != 'validate' && inputs.operation != 'forecast' && (!(github.event.repository.fork)) }}
     runs-on: ubuntu-slim
     permissions:
       actions: write
@@ -181,7 +189,7 @@ jobs:
           persist-credentials: false
 
       - name: Setup Scripts
-        uses: github/gh-aw-actions/setup@v0.83.4
+        uses: github/gh-aw-actions/setup@9271a1804551c0dc4fb0085a97979950aa2f8489 # v0.88.2
         with:
           destination: ${{ runner.temp }}/gh-aw/actions
 
@@ -190,15 +198,17 @@ jobs:
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
           script: |
-            const { setupGlobals } = require('${{ runner.temp }}/gh-aw/actions/setup_globals.cjs');
+            const path = require('path');
+            const actionsDir = path.join(process.env.RUNNER_TEMP, 'gh-aw', 'actions');
+            const { setupGlobals } = require(path.join(actionsDir, 'setup_globals.cjs'));
             setupGlobals(core, github, context, exec, io, getOctokit);
-            const { main } = require('${{ runner.temp }}/gh-aw/actions/check_team_member.cjs');
+            const { main } = require(path.join(actionsDir, 'check_team_member.cjs'));
             await main();
 
       - name: Install gh-aw
-        uses: github/gh-aw-actions/setup-cli@v0.83.4
+        uses: github/gh-aw-actions/setup-cli@9271a1804551c0dc4fb0085a97979950aa2f8489 # v0.88.2
         with:
-          version: v0.83.4
+          version: v0.88.2
 
       - name: Run operation
         uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
@@ -209,9 +219,11 @@ jobs:
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
           script: |
-            const { setupGlobals } = require('${{ runner.temp }}/gh-aw/actions/setup_globals.cjs');
+            const path = require('path');
+            const actionsDir = path.join(process.env.RUNNER_TEMP, 'gh-aw', 'actions');
+            const { setupGlobals } = require(path.join(actionsDir, 'setup_globals.cjs'));
             setupGlobals(core, github, context, exec, io, getOctokit);
-            const { main } = require('${{ runner.temp }}/gh-aw/actions/run_operation_update_upgrade.cjs');
+            const { main } = require(path.join(actionsDir, 'run_operation_update_upgrade.cjs'));
             await main();
 
       - name: Record outputs
@@ -228,7 +240,7 @@ jobs:
       pull-requests: write
     steps:
       - name: Setup Scripts
-        uses: github/gh-aw-actions/setup@v0.83.4
+        uses: github/gh-aw-actions/setup@9271a1804551c0dc4fb0085a97979950aa2f8489 # v0.88.2
         with:
           destination: ${{ runner.temp }}/gh-aw/actions
 
@@ -237,9 +249,11 @@ jobs:
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
           script: |
-            const { setupGlobals } = require('${{ runner.temp }}/gh-aw/actions/setup_globals.cjs');
+            const path = require('path');
+            const actionsDir = path.join(process.env.RUNNER_TEMP, 'gh-aw', 'actions');
+            const { setupGlobals } = require(path.join(actionsDir, 'setup_globals.cjs'));
             setupGlobals(core, github, context, exec, io, getOctokit);
-            const { main } = require('${{ runner.temp }}/gh-aw/actions/check_team_member.cjs');
+            const { main } = require(path.join(actionsDir, 'check_team_member.cjs'));
             await main();
 
       - name: Update pull request branches
@@ -249,9 +263,11 @@ jobs:
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
           script: |
-            const { setupGlobals } = require('${{ runner.temp }}/gh-aw/actions/setup_globals.cjs');
+            const path = require('path');
+            const actionsDir = path.join(process.env.RUNNER_TEMP, 'gh-aw', 'actions');
+            const { setupGlobals } = require(path.join(actionsDir, 'setup_globals.cjs'));
             setupGlobals(core, github, context, exec, io, getOctokit);
-            const { main } = require('${{ runner.temp }}/gh-aw/actions/update_pull_request_branches.cjs');
+            const { main } = require(path.join(actionsDir, 'update_pull_request_branches.cjs'));
             await main();
 
   apply_safe_outputs:
@@ -275,7 +291,7 @@ jobs:
           persist-credentials: false
 
       - name: Setup Scripts
-        uses: github/gh-aw-actions/setup@v0.83.4
+        uses: github/gh-aw-actions/setup@9271a1804551c0dc4fb0085a97979950aa2f8489 # v0.88.2
         with:
           destination: ${{ runner.temp }}/gh-aw/actions
 
@@ -284,9 +300,11 @@ jobs:
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
           script: |
-            const { setupGlobals } = require('${{ runner.temp }}/gh-aw/actions/setup_globals.cjs');
+            const path = require('path');
+            const actionsDir = path.join(process.env.RUNNER_TEMP, 'gh-aw', 'actions');
+            const { setupGlobals } = require(path.join(actionsDir, 'setup_globals.cjs'));
             setupGlobals(core, github, context, exec, io, getOctokit);
-            const { main } = require('${{ runner.temp }}/gh-aw/actions/check_team_member.cjs');
+            const { main } = require(path.join(actionsDir, 'check_team_member.cjs'));
             await main();
 
       - name: Apply Safe Outputs
@@ -297,9 +315,11 @@ jobs:
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
           script: |
-            const { setupGlobals } = require('${{ runner.temp }}/gh-aw/actions/setup_globals.cjs');
+            const path = require('path');
+            const actionsDir = path.join(process.env.RUNNER_TEMP, 'gh-aw', 'actions');
+            const { setupGlobals } = require(path.join(actionsDir, 'setup_globals.cjs'));
             setupGlobals(core, github, context, exec, io, getOctokit);
-            const { main } = require('${{ runner.temp }}/gh-aw/actions/apply_safe_outputs_replay.cjs');
+            const { main } = require(path.join(actionsDir, 'apply_safe_outputs_replay.cjs'));
             await main();
 
       - name: Record outputs
@@ -321,7 +341,7 @@ jobs:
           persist-credentials: false
 
       - name: Setup Scripts
-        uses: github/gh-aw-actions/setup@v0.83.4
+        uses: github/gh-aw-actions/setup@9271a1804551c0dc4fb0085a97979950aa2f8489 # v0.88.2
         with:
           destination: ${{ runner.temp }}/gh-aw/actions
 
@@ -330,15 +350,17 @@ jobs:
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
           script: |
-            const { setupGlobals } = require('${{ runner.temp }}/gh-aw/actions/setup_globals.cjs');
+            const path = require('path');
+            const actionsDir = path.join(process.env.RUNNER_TEMP, 'gh-aw', 'actions');
+            const { setupGlobals } = require(path.join(actionsDir, 'setup_globals.cjs'));
             setupGlobals(core, github, context, exec, io, getOctokit);
-            const { main } = require('${{ runner.temp }}/gh-aw/actions/check_team_member.cjs');
+            const { main } = require(path.join(actionsDir, 'check_team_member.cjs'));
             await main();
 
       - name: Install gh-aw
-        uses: github/gh-aw-actions/setup-cli@v0.83.4
+        uses: github/gh-aw-actions/setup-cli@9271a1804551c0dc4fb0085a97979950aa2f8489 # v0.88.2
         with:
-          version: v0.83.4
+          version: v0.88.2
 
       - name: Create missing labels
         uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
@@ -347,9 +369,11 @@ jobs:
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
           script: |
-            const { setupGlobals } = require('${{ runner.temp }}/gh-aw/actions/setup_globals.cjs');
+            const path = require('path');
+            const actionsDir = path.join(process.env.RUNNER_TEMP, 'gh-aw', 'actions');
+            const { setupGlobals } = require(path.join(actionsDir, 'setup_globals.cjs'));
             setupGlobals(core, github, context, exec, io, getOctokit);
-            const { main } = require('${{ runner.temp }}/gh-aw/actions/create_labels.cjs');
+            const { main } = require(path.join(actionsDir, 'create_labels.cjs'));
             await main();
 
   activity_report:
@@ -367,7 +391,7 @@ jobs:
           persist-credentials: false
 
       - name: Setup Scripts
-        uses: github/gh-aw-actions/setup@v0.83.4
+        uses: github/gh-aw-actions/setup@9271a1804551c0dc4fb0085a97979950aa2f8489 # v0.88.2
         with:
           destination: ${{ runner.temp }}/gh-aw/actions
 
@@ -376,15 +400,17 @@ jobs:
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
           script: |
-            const { setupGlobals } = require('${{ runner.temp }}/gh-aw/actions/setup_globals.cjs');
+            const path = require('path');
+            const actionsDir = path.join(process.env.RUNNER_TEMP, 'gh-aw', 'actions');
+            const { setupGlobals } = require(path.join(actionsDir, 'setup_globals.cjs'));
             setupGlobals(core, github, context, exec, io, getOctokit);
-            const { main } = require('${{ runner.temp }}/gh-aw/actions/check_team_member.cjs');
+            const { main } = require(path.join(actionsDir, 'check_team_member.cjs'));
             await main();
 
       - name: Install gh-aw
-        uses: github/gh-aw-actions/setup-cli@v0.83.4
+        uses: github/gh-aw-actions/setup-cli@9271a1804551c0dc4fb0085a97979950aa2f8489 # v0.88.2
         with:
-          version: v0.83.4
+          version: v0.88.2
 
       - name: Restore activity report logs cache
         id: activity_report_logs_cache
@@ -472,7 +498,7 @@ jobs:
           persist-credentials: false
 
       - name: Setup Scripts
-        uses: github/gh-aw-actions/setup@v0.83.4
+        uses: github/gh-aw-actions/setup@9271a1804551c0dc4fb0085a97979950aa2f8489 # v0.88.2
         with:
           destination: ${{ runner.temp }}/gh-aw/actions
 
@@ -481,15 +507,17 @@ jobs:
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
           script: |
-            const { setupGlobals } = require('${{ runner.temp }}/gh-aw/actions/setup_globals.cjs');
+            const path = require('path');
+            const actionsDir = path.join(process.env.RUNNER_TEMP, 'gh-aw', 'actions');
+            const { setupGlobals } = require(path.join(actionsDir, 'setup_globals.cjs'));
             setupGlobals(core, github, context, exec, io, getOctokit);
-            const { main } = require('${{ runner.temp }}/gh-aw/actions/check_team_member.cjs');
+            const { main } = require(path.join(actionsDir, 'check_team_member.cjs'));
             await main();
 
       - name: Install gh-aw
-        uses: github/gh-aw-actions/setup-cli@v0.83.4
+        uses: github/gh-aw-actions/setup-cli@9271a1804551c0dc4fb0085a97979950aa2f8489 # v0.88.2
         with:
-          version: v0.83.4
+          version: v0.88.2
 
       - name: Restore forecast report logs cache
         id: forecast_report_logs_cache
@@ -552,9 +580,11 @@ jobs:
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
           script: |
-            const { setupGlobals } = require('${{ runner.temp }}/gh-aw/actions/setup_globals.cjs');
+            const path = require('path');
+            const actionsDir = path.join(process.env.RUNNER_TEMP, 'gh-aw', 'actions');
+            const { setupGlobals } = require(path.join(actionsDir, 'setup_globals.cjs'));
             setupGlobals(core, github, context, exec, io, getOctokit);
-            const { main } = require('${{ runner.temp }}/gh-aw/actions/create_forecast_issue.cjs');
+            const { main } = require(path.join(actionsDir, 'create_forecast_issue.cjs'));
             await main();
 
   close_agentic_workflows_issues:
@@ -564,7 +594,7 @@ jobs:
       issues: write
     steps:
       - name: Setup Scripts
-        uses: github/gh-aw-actions/setup@v0.83.4
+        uses: github/gh-aw-actions/setup@9271a1804551c0dc4fb0085a97979950aa2f8489 # v0.88.2
         with:
           destination: ${{ runner.temp }}/gh-aw/actions
 
@@ -573,9 +603,11 @@ jobs:
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
           script: |
-            const { setupGlobals } = require('${{ runner.temp }}/gh-aw/actions/setup_globals.cjs');
+            const path = require('path');
+            const actionsDir = path.join(process.env.RUNNER_TEMP, 'gh-aw', 'actions');
+            const { setupGlobals } = require(path.join(actionsDir, 'setup_globals.cjs'));
             setupGlobals(core, github, context, exec, io, getOctokit);
-            const { main } = require('${{ runner.temp }}/gh-aw/actions/check_team_member.cjs');
+            const { main } = require(path.join(actionsDir, 'check_team_member.cjs'));
             await main();
 
       - name: Close no-repro agentic-workflows issues
@@ -583,9 +615,11 @@ jobs:
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
           script: |
-            const { setupGlobals } = require('${{ runner.temp }}/gh-aw/actions/setup_globals.cjs');
+            const path = require('path');
+            const actionsDir = path.join(process.env.RUNNER_TEMP, 'gh-aw', 'actions');
+            const { setupGlobals } = require(path.join(actionsDir, 'setup_globals.cjs'));
             setupGlobals(core, github, context, exec, io, getOctokit);
-            const { main } = require('${{ runner.temp }}/gh-aw/actions/close_agentic_workflows_issues.cjs');
+            const { main } = require(path.join(actionsDir, 'close_agentic_workflows_issues.cjs'));
             await main();
 
   validate_workflows:
@@ -601,7 +635,7 @@ jobs:
           persist-credentials: false
 
       - name: Setup Scripts
-        uses: github/gh-aw-actions/setup@v0.83.4
+        uses: github/gh-aw-actions/setup@9271a1804551c0dc4fb0085a97979950aa2f8489 # v0.88.2
         with:
           destination: ${{ runner.temp }}/gh-aw/actions
 
@@ -610,15 +644,17 @@ jobs:
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
           script: |
-            const { setupGlobals } = require('${{ runner.temp }}/gh-aw/actions/setup_globals.cjs');
+            const path = require('path');
+            const actionsDir = path.join(process.env.RUNNER_TEMP, 'gh-aw', 'actions');
+            const { setupGlobals } = require(path.join(actionsDir, 'setup_globals.cjs'));
             setupGlobals(core, github, context, exec, io, getOctokit);
-            const { main } = require('${{ runner.temp }}/gh-aw/actions/check_team_member.cjs');
+            const { main } = require(path.join(actionsDir, 'check_team_member.cjs'));
             await main();
 
       - name: Install gh-aw
-        uses: github/gh-aw-actions/setup-cli@v0.83.4
+        uses: github/gh-aw-actions/setup-cli@9271a1804551c0dc4fb0085a97979950aa2f8489 # v0.88.2
         with:
-          version: v0.83.4
+          version: v0.88.2
 
       - name: Validate workflows and file issue on findings
         uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
@@ -627,7 +663,9 @@ jobs:
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
           script: |
-            const { setupGlobals } = require('${{ runner.temp }}/gh-aw/actions/setup_globals.cjs');
+            const path = require('path');
+            const actionsDir = path.join(process.env.RUNNER_TEMP, 'gh-aw', 'actions');
+            const { setupGlobals } = require(path.join(actionsDir, 'setup_globals.cjs'));
             setupGlobals(core, github, context, exec, io, getOctokit);
-            const { main } = require('${{ runner.temp }}/gh-aw/actions/run_validate_workflows.cjs');
+            const { main } = require(path.join(actionsDir, 'run_validate_workflows.cjs'));
             await main();

.github/workflows/code-simplifier.md

@@ -1,5 +1,4 @@
 ---
-<<<<<<< current (local changes)
 name: Code Simplifier
 description: Analyzes recently modified code and creates pull requests with simplifications that improve clarity, consistency, and maintainability while preserving functionality
 on:
@@ -74,152 +73,6 @@ timeout-minutes: 30
 strict: true
 source: github/gh-aw/.github/workflows/code-simplifier.md@6762bfba6ae426a03aac46e8f68701461c667404
 ---
-=======
-private: true
-emoji: "🔧"
-name: Code Simplifier
-description: Analyzes recently modified code and creates pull requests with simplifications that improve clarity, consistency, and maintainability while preserving functionality
-on:
-  schedule: daily
-
-max-turns: 50
-max-ai-credits: 1000
-max-daily-ai-credits: 5000
-permissions:
-  contents: read
-  issues: read
-  pull-requests: read
-
-tracker-id: code-simplifier
-
-imports:
-  - shared/mcp-pagination.md
-  - uses: shared/skip-if-issue-open.md
-    with:
-      title-prefix: "[code-simplifier]"
-      kind: "pr"
-  - uses: shared/daily-pr-base.md
-    with:
-      title-prefix: "[code-simplifier] "
-      expires: "1d"
-      labels: [refactoring, code-quality, automation]
-      reviewers: [copilot]
-      protected-files:
-        exclude:
-          - .github/extensions/
-
-  - shared/otlp.md
-  - shared/graders.md
-network:
-  allowed:
-    - go
-
-sandbox:
-  agent:
-    runtime: gvisor
-tools:
-  cli-proxy: true
-  github:
-    mode: gh-proxy
-    toolsets: [default]
-  bash: ["*"]
-
-steps:
-  - name: Prepare recent-change dataset (deterministic)
-    env:
-      GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-      EXPR_GITHUB_REPOSITORY: ${{ github.repository }}
-    run: |
-      set -euo pipefail
-      : "${GH_TOKEN:?GH_TOKEN is required for gh CLI queries}"
-      mkdir -p /tmp/gh-aw/agent/code-simplifier
-
-      YESTERDAY=$(date -d '1 day ago' '+%Y-%m-%d' 2>/dev/null || date -v-1d '+%Y-%m-%d')
-      echo "$YESTERDAY" > /tmp/gh-aw/agent/code-simplifier/yesterday.txt
-
-      git log --since='24 hours ago' --no-merges --pretty=format:'%H%x09%s' \
-        | jq -R 'select(length > 0) | split("\t") | {sha: .[0], subject: (.[1] // "")}' \
-        > /tmp/gh-aw/agent/code-simplifier/recent-commits.jsonl || true
-
-      git log --since='24 hours ago' --name-only --pretty=format:'' --no-merges \
-        | sed '/^$/d' \
-        | sort -u \
-        > /tmp/gh-aw/agent/code-simplifier/recent-files.txt
-
-      gh pr list \
-        --repo "$EXPR_GITHUB_REPOSITORY" \
-        --state merged \
-        --search "merged:>=$YESTERDAY" \
-        --limit 100 \
-        --json number,title,mergedAt,url \
-        > /tmp/gh-aw/agent/code-simplifier/recent-prs.json || echo '[]' > /tmp/gh-aw/agent/code-simplifier/recent-prs.json
-
-      jq -R -s '
-        split("\n")
-        | map(select(length > 0))
-        | map(select(test("\\.(go|js|cjs|mjs|ts|tsx|py|cs|java|rb|php|kt|swift)$")))
-        | map(select(test("(_test\\.|\\.test\\.|\\.spec\\.|package-lock\\.json$|pnpm-lock\\.yaml$|yarn\\.lock$|go\\.sum$|Cargo\\.lock$|\\.generated\\.|/generated/|/dist/|/build/)"; "i") | not))
-        | .[0:20]
-      ' /tmp/gh-aw/agent/code-simplifier/recent-files.txt > /tmp/gh-aw/agent/code-simplifier/source-files.json
-
-      jq -n \
-        --arg date "$(date -u +%Y-%m-%dT%H:%M:%SZ)" \
-        --arg yesterday "$YESTERDAY" \
-        --slurpfile prs /tmp/gh-aw/agent/code-simplifier/recent-prs.json \
-        --slurpfile files /tmp/gh-aw/agent/code-simplifier/source-files.json \
-        '{generated_at:$date, window_start:$yesterday, candidate_file_cap:20, merged_prs:($prs[0] // []), candidate_files:($files[0] // [])}' \
-        > /tmp/gh-aw/agent/code-simplifier/recent-context.json
-
-  - name: Prepare workflow history summary (deterministic)
-    env:
-      GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-      EXPR_GITHUB_REPOSITORY: ${{ github.repository }}
-    run: |
-      set -euo pipefail
-      : "${GH_TOKEN:?GH_TOKEN is required for gh CLI queries}"
-      mkdir -p /tmp/gh-aw/agent/code-simplifier
-
-      gh api "repos/$EXPR_GITHUB_REPOSITORY/actions/workflows/code-simplifier.lock.yml/runs?per_page=30" \
-        > /tmp/gh-aw/agent/code-simplifier/workflow-runs.json || echo '{"workflow_runs":[]}' > /tmp/gh-aw/agent/code-simplifier/workflow-runs.json
-
-      jq '
-        .workflow_runs // []
-        | {
-            sample_size: length,
-            success_count: (map(select(.conclusion == "success")) | length),
-            failure_count: (map(select(.conclusion == "failure")) | length),
-            cancelled_count: (map(select(.conclusion == "cancelled")) | length),
-            recent_failures: (map(select(.conclusion == "failure")) | map({id,created_at,html_url}) | .[0:5]),
-            deterministic_candidates: [
-              {
-                name: "recent PR and commit discovery",
-                move_to: "steps",
-                reason: "This data is fetched every run and can be pre-computed once in deterministic shell steps."
-              },
-              {
-                name: "changed-file filtering",
-                move_to: "steps",
-                reason: "Extension and test/generated-file filtering is deterministic and should not consume AI tokens."
-              },
-              {
-                name: "workflow run history aggregation",
-                move_to: "steps",
-                reason: "Historical run metadata can be summarized via jq before entering agent context."
-              }
-            ]
-          }
-      ' /tmp/gh-aw/agent/code-simplifier/workflow-runs.json > /tmp/gh-aw/agent/code-simplifier/history-summary.json
-
-timeout-minutes: 30
-strict: true
-evals:
-  - id: code_analyzed
-    question: Did the agent analyze recently modified code for simplification opportunities?
-  - id: pr_created_or_noop
-    question: Was a pull request created with simplifications, or was noop used when no improvements were needed?
->>>>>>> new (upstream)
-
-<<<<<<< current (local changes)
 <!-- This prompt will be imported in the agentic workflow .github/workflows/code-simplifier.md at runtime. -->
 <!-- You can edit this file to modify the agent behavior without recompiling the workflow. -->
 
@@ -961,184 +814,3 @@ Begin your code simplification analysis now. Find recently modified code, assess
 ```json
 {"noop": {"message": "No action needed: [brief explanation of what was analyzed and why]"}}
 ```
-=======
-source: github/gh-aw/.github/workflows/code-simplifier.md@6807d792b0d71d7ce389ccb6a927fb84187273cb
----
-
-# Code Simplifier Agent
-
-Preserve behavior exactly while simplifying recently changed production code for readability and maintainability.
-
-## Required Inputs (already precomputed)
-
-Use these deterministic files first:
-
-- `/tmp/gh-aw/agent/code-simplifier/recent-context.json`
-- `/tmp/gh-aw/agent/code-simplifier/source-files.json`
-- `/tmp/gh-aw/agent/code-simplifier/recent-commits.jsonl`
-- `/tmp/gh-aw/agent/code-simplifier/recent-prs.json`
-- `/tmp/gh-aw/agent/code-simplifier/history-summary.json`
-
-Do **not** re-fetch these datasets with GitHub tools unless a required file is missing, empty, or fails JSON parsing.
-
-## Token Budget Rules
-
-- Keep responses concise and operational.
-- Read only files in the candidate list.
-- Avoid loading full payloads when filtered data already exists.
-- Prefer deterministic shell outputs and compact JSON over repeated tool queries.
-
-## Command Guardrails (Required)
-
-- Do **NOT** use `python3` for JSON parsing; use `jq`, `cat`, or `head` instead.
-- Do **NOT** repeatedly retry variations of the same blocked command.
-- If a command fails due to permission/policy, stop that approach immediately and use `report_incomplete` with the blocked command and error.
-- If you hit repeated permission-denied errors for the same action, short-circuit instead of continuing retries.
-- If you encounter 3 or more consecutive `Permission denied` errors for the same type of command, stop immediately and call `report_incomplete`.
-
-## Phase 1 — Determine Scope
-
-1. Read `recent-context.json` and `source-files.json`.
-2. If no candidate files exist, call `noop` with this exact message:
-
-```
-✅ No code changes detected in the last 24 hours.
-Code simplifier has nothing to process today.
-```
-3. If candidate files hit the deterministic cap (`candidate_file_cap`), process only the provided list and do not discover additional files in this run.
-
-## Phase 2 — Historical Optimization Gate
-
-1. Read `history-summary.json`.
-2. Review `deterministic_candidates` and keep those operations in deterministic paths.
-3. If a planned action duplicates one of those candidates, use the precomputed file instead of a tool call.
-
-## Phase 3 — Analyze and Simplify
-
-For each file in `source-files.json`:
-
-1. Use `scope-filter` (`model: claude-haiku-4.5`) to confirm the file should be simplified and detect language.
-2. Apply only the matching language skill guidance (do not load unrelated language guidance).
-3. Use `simplification-scout` (`model: claude-haiku-4.5`) for extractive opportunity scoring.
-4. Make targeted edits that preserve behavior.
-
-Priorities:
-
-- remove needless branching or nesting
-- remove duplication and dead local abstractions
-- improve naming clarity
-- avoid clever compression that hurts readability
-- keep interfaces and behavior unchanged
-
-## Phase 4 — Validate
-
-Run project checks after edits:
-
-```bash
-make test-unit
-make lint
-make build
-```
-
-If validation fails, adjust or revert risky simplifications.
-
-## Phase 5 — PR Decision
-
-Create a PR only if all are true:
-
-- meaningful simplifications were made
-- behavior is preserved
-- `make test-unit`, `make lint`, and `make build` succeed
-
-If no useful change remains, call `noop` with this exact message:
-
-```
-✅ Code analyzed from last 24 hours.
-No simplifications needed - code already meets quality standards.
-```
-
-If you are close to the run ceiling (turn budget, time budget, or AI-credit budget) before finishing, stop and call `noop` with this exact message:
-
-```
-⚠️ Code simplifier run stopped at configured per-run budget.
-Processed available deterministic inputs only; no safe write action produced.
-```
-
-## PR Body Requirements
-
-Include:
-
-- files simplified
-- concise list of simplifications
-- source references from `recent-prs.json` and `recent-commits.jsonl`
-- validation results
-- brief note on deterministic pre-processing and token-efficiency choices
-
-## Output Requirements
-
-You MUST finish by calling exactly one safe-output tool:
-
-1. `noop` with the no-recent-code-changes message above
-2. `noop` with the no-beneficial-simplifications message above
-3. `noop` with the run-budget-ceiling message above
-4. `create_pull_request` when meaningful validated simplifications are ready
-5. `missing_tool` when blocked by unavailable tooling
-6. `missing_data` when blocked by missing required data
-
-Do not finish with plain text only. The safe-output tool call is required.
-## agent: `scope-filter`
----
-description: Decides whether a candidate file should be simplified and labels its primary language
-model: claude-haiku-4.5
----
-Input is a single file path string. Return strict JSON only:
-`{"path":"...","include":true|false,"language":"go|typescript|javascript|python|csharp|other","reason":"..."}`
-
-Set `include` to false for tests, generated files, lockfiles, vendored code, or unsupported languages.
-
-## agent: `simplification-scout`
----
-description: Extractive scout that proposes low-risk simplification opportunities per file
-model: claude-haiku-4.5
----
-Given file content, return strict JSON only:
-`{"path":"...","opportunities":[{"kind":"clarity|duplication|complexity|naming","summary":"...","risk":"low|medium"}]}`
-
-Report at most 5 opportunities, ordered by expected readability gain, then by lowest risk.
-
-## skill: `js-ts-simplifier-skill`
----
-description: JavaScript and TypeScript simplification standards
----
-- prefer explicit, readable control flow over nested ternaries
-- keep top-level functions and exported APIs clear and typed
-- maintain import hygiene and existing module conventions
-- avoid behavior-changing refactors while simplifying
-
-## skill: `go-simplifier-skill`
----
-description: Go simplification standards
----
-- prefer explicit error handling and clear guard clauses
-- use idiomatic Go naming and keep functions focused
-- preserve package boundaries and exported API behavior
-- reduce unnecessary indirection where readability improves
-
-## skill: `python-simplifier-skill`
----
-description: Python simplification standards
----
-- keep code explicit and readable following PEP 8 principles
-- preserve type hints and improve naming clarity
-- simplify conditionals and duplication without changing behavior
-- prefer straightforward constructs over compact cleverness
-
-## skill: `csharp-simplifier-skill`
----
-description: C# simplification standards
----
-- keep nullable and async behavior unchanged
-- favor clear pattern matching and explicit control flow
-- preserve public contracts and existing conventions
-- remove incidental complexity while keeping intent obvious
->>>>>>> new (upstream)