From 14f8a2f6127200d9c1e3b0f56bb7b7e44f0166ae Mon Sep 17 00:00:00 2001
From: Claude <noreply@anthropic.com>
Date: Sat, 28 Feb 2026 16:00:36 +0000
Subject: [PATCH] Fix compile workflow to commit lock files back to the branch

Instead of just failing when lock files are outdated, the workflow now
compiles the agentic workflow markdown files and commits+pushes the
resulting lock files back. On PRs, checks out the head branch directly
(not the merge ref) so it can push back to the PR.

https://claude.ai/code/session_01JTYNSeJrGzdW6wfAUbdjjw
---
 .github/workflows/compile-workflows.yaml | 22 +++++++++++++++++-----
 1 file changed, 17 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/compile-workflows.yaml b/.github/workflows/compile-workflows.yaml
index 2ab9a05..c13e98c 100644
--- a/.github/workflows/compile-workflows.yaml
+++ b/.github/workflows/compile-workflows.yaml
@@ -12,6 +12,7 @@ on:
 
 permissions:
   contents: write
+  pull-requests: write
 
 jobs:
   compile:
@@ -19,7 +20,17 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v4
+      - name: Checkout (push)
+        if: github.event_name == 'push'
+        uses: actions/checkout@v4
+
+      - name: Checkout (PR head branch)
+        if: github.event_name == 'pull_request'
+        uses: actions/checkout@v4
+        with:
+          ref: ${{ github.head_ref }}
+          # Use default GITHUB_TOKEN — needs contents: write permission
+          token: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Install gh-aw extension
         run: gh extension install github/gh-aw
@@ -31,13 +42,14 @@ jobs:
         env:
           GH_TOKEN: ${{ github.token }}
 
-      - name: Check for lock file changes
+      - name: Commit and push lock files if changed
         run: |
           git add .github/workflows/*.lock.yml
           if git diff --cached --quiet; then
             echo "Lock files are up to date."
           else
-            echo "::error::Lock files are outdated. Run 'gh aw compile .github/workflows/*.md' and commit the results."
-            git diff --cached --stat
-            exit 1
+            git config user.name "github-actions[bot]"
+            git config user.email "41898282+github-actions[bot]@users.noreply.github.com"
+            git commit -m "Recompile agentic workflow lock files"
+            git push
           fi