From 7b622569d0b854baebfaf66e326c3634ffbebe6d Mon Sep 17 00:00:00 2001 From: Brett Bond Date: Tue, 14 Jul 2026 10:39:21 +0200 Subject: [PATCH 1/4] chore: track issues on the Operations org board Auto-add opened/reopened issues to the org-level Operations Kanban board (NextCommerceCo project 10) and document the claim protocol for agent sessions. Requires the org secret ADD_TO_PROJECT_PAT. Co-Authored-By: Claude Fable 5 --- .github/workflows/add-to-project.yml | 14 ++++++++++++++ AGENTS.md | 13 +++++++++++++ 2 files changed, 27 insertions(+) create mode 100644 .github/workflows/add-to-project.yml diff --git a/.github/workflows/add-to-project.yml b/.github/workflows/add-to-project.yml new file mode 100644 index 0000000..4fd7f6c --- /dev/null +++ b/.github/workflows/add-to-project.yml @@ -0,0 +1,14 @@ +name: Add to Operations board + +on: + issues: + types: [opened, reopened] + +jobs: + add-to-project: + runs-on: ubuntu-latest + steps: + - uses: actions/add-to-project@v1.0.2 + with: + project-url: https://github.com/orgs/NextCommerceCo/projects/10 + github-token: ${{ secrets.ADD_TO_PROJECT_PAT }} diff --git a/AGENTS.md b/AGENTS.md index 5f592f6..d443215 100644 --- a/AGENTS.md +++ b/AGENTS.md @@ -38,3 +38,16 @@ Unless you are maintaining the docs site itself, skip: This repository is maintained by the NEXT team only. External pull requests are not accepted. See `README.md` and `docs/MAINTENANCE.md`. + +## Issue tracking + +Work in this repo is tracked with GitHub Issues and coordinated on the +org-level **[Operations](https://github.com/orgs/NextCommerceCo/projects/10)** +Kanban board (Todo / In Progress / Done). New issues are added to the board +automatically by the `add-to-project` workflow. + +Before starting work on an issue: check it is not assigned to someone else, +assign yourself (`gh issue edit --add-assignee @me`), and move the card to +In Progress. Open PRs with `Closes #` so the card moves to Done on merge. +Full conventions: `docs/agents/project-board.md` in the `next-mind` repo; the +`/next-board` skill wraps board operations. From d0268c9c8e8b10e8403dfa92d521e41ba9b46058 Mon Sep 17 00:00:00 2001 From: Brett Bond Date: Tue, 14 Jul 2026 11:47:07 +0200 Subject: [PATCH 2/4] =?UTF-8?q?review:=20harden=20add-to-project=20?= =?UTF-8?q?=E2=80=94=20SHA-pin=20action,=20permissions:=20{},=20member-aut?= =?UTF-8?q?hor=20gate?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Co-Authored-By: Claude Fable 5 --- .github/workflows/add-to-project.yml | 9 ++++++++- 1 file changed, 8 insertions(+), 1 deletion(-) diff --git a/.github/workflows/add-to-project.yml b/.github/workflows/add-to-project.yml index 4fd7f6c..0d492a2 100644 --- a/.github/workflows/add-to-project.yml +++ b/.github/workflows/add-to-project.yml @@ -4,11 +4,18 @@ on: issues: types: [opened, reopened] +# No GITHUB_TOKEN needed — the add-to-project step authenticates with the +# ADD_TO_PROJECT_PAT org secret. +permissions: {} + jobs: add-to-project: + # Only auto-add issues authored by org owners/members/collaborators — + # outsider-authored issues in public repos need human triage onto the board. + if: contains(fromJSON('["OWNER", "MEMBER", "COLLABORATOR"]'), github.event.issue.author_association) runs-on: ubuntu-latest steps: - - uses: actions/add-to-project@v1.0.2 + - uses: actions/add-to-project@244f685bbc3b7adfa8466e08b698b5577571133e # v1.0.2 with: project-url: https://github.com/orgs/NextCommerceCo/projects/10 github-token: ${{ secrets.ADD_TO_PROJECT_PAT }} From 43ba7c806dc3504d58d5b0237a821278f44d4b7d Mon Sep 17 00:00:00 2001 From: Brett Bond Date: Tue, 14 Jul 2026 11:54:37 +0200 Subject: [PATCH 3/4] fix(ship): scrub private next-mind repo reference from public board note campaigns-os and docs are public; the board-conventions doc lives in the private next-mind repo. Point contributors to the /next-board skill instead of the private path. Fixes the forbidden-private-strings check. Co-Authored-By: Claude Fable 5 --- AGENTS.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/AGENTS.md b/AGENTS.md index d443215..a58bd64 100644 --- a/AGENTS.md +++ b/AGENTS.md @@ -49,5 +49,5 @@ automatically by the `add-to-project` workflow. Before starting work on an issue: check it is not assigned to someone else, assign yourself (`gh issue edit --add-assignee @me`), and move the card to In Progress. Open PRs with `Closes #` so the card moves to Done on merge. -Full conventions: `docs/agents/project-board.md` in the `next-mind` repo; the -`/next-board` skill wraps board operations. +Contributors have a `/next-board` skill that wraps these board operations +(status, claim, move, create). From 90f2621c573245ced616ff677d5af38a042ea54d Mon Sep 17 00:00:00 2001 From: Brett Bond Date: Tue, 14 Jul 2026 12:37:38 +0200 Subject: [PATCH 4/4] review(kilo): add workflow timeout-minutes; attribute Done to built-in board automation - timeout-minutes: 5 (default 360 is too high for add-to-project) - reword the Done transition to name the board's built-in 'Item closed' workflow rather than implying this repo's workflow drives it Co-Authored-By: Claude Fable 5 --- .github/workflows/add-to-project.yml | 1 + AGENTS.md | 2 +- 2 files changed, 2 insertions(+), 1 deletion(-) diff --git a/.github/workflows/add-to-project.yml b/.github/workflows/add-to-project.yml index 0d492a2..b8947a8 100644 --- a/.github/workflows/add-to-project.yml +++ b/.github/workflows/add-to-project.yml @@ -14,6 +14,7 @@ jobs: # outsider-authored issues in public repos need human triage onto the board. if: contains(fromJSON('["OWNER", "MEMBER", "COLLABORATOR"]'), github.event.issue.author_association) runs-on: ubuntu-latest + timeout-minutes: 5 steps: - uses: actions/add-to-project@244f685bbc3b7adfa8466e08b698b5577571133e # v1.0.2 with: diff --git a/AGENTS.md b/AGENTS.md index a58bd64..66970cd 100644 --- a/AGENTS.md +++ b/AGENTS.md @@ -48,6 +48,6 @@ automatically by the `add-to-project` workflow. Before starting work on an issue: check it is not assigned to someone else, assign yourself (`gh issue edit --add-assignee @me`), and move the card to -In Progress. Open PRs with `Closes #` so the card moves to Done on merge. +In Progress. Open PRs with `Closes #`; when the issue closes on merge, the board's built-in "Item closed" automation moves the card to Done. Contributors have a `/next-board` skill that wraps these board operations (status, claim, move, create).