Release notes

1nika: v12workflow:3  id: release-notes4  description: "git log → typed release notes → CHANGELOG insert → team ping"5​6# A NON-thinking local model, deliberately: a thinking model can spend the7# whole `max_tokens` budget in its think block and return before the JSON8# (engine#428). Schema showcases pick a model that answers directly.9model: ollama/llama3.2:3b10​11inputs:12  announce:13    type: bool14    default: false15    description: "Actually send the team ping (needs TEAM_WEBHOOK_URL)"16​17const:18  since_tag: "v0.80.0"19  changelog_src: "examples/fixtures/CHANGELOG.md" # point this at YOUR CHANGELOG.md20  changelog_out: "out/CHANGELOG.md"                        # the working copy this run edits21​22⛨secrets:23  ⛨team_webhook:24    ⛨source: env25    ⛨key: TEAM_WEBHOOK_URL26    ⛨egress:                       # sanction the one send · the secret IS the URL27      - ⛨to: "nika:notify"28        ⛨host_from_self: true29⛨permits:30  ⛨tools: ["nika:edit", "nika:notify", "nika:read", "nika:write"]31  ⛨exec: ["git"]                   # the ONE program this workflow may run32  ⛨fs:33    # The workflow never edits your changelog in place — it copies it and34    # edits the copy, so you move the result when the diff looks right.35    #36    # The working copy appears in BOTH lists, and that is not redundancy:37    # `nika:edit` reads the file before it writes it, so a write-only grant38    # is refused with NIKA-SEC-004 · outside permits.fs.read. Every in-place39    # builtin owes both halves.40    ⛨read: ["examples/fixtures/CHANGELOG.md", "out/CHANGELOG.md"]41    ⛨write: ["out/CHANGELOG.md"]42  ⛨net:43    # `host_from_self:` above sanctions the FLOW (the secret may be the URL) —44    # it does not grant the capability. The host stays unknown at check, so it45    # is judged at RUN against this bound: name the announce host here or the46    # send is refused mid-run, after the tokens are already spent.47    ⛨http: ["hooks.slack.com"]48​49tasks:50  history:51    ▷exec:52      command: ["git", "log", "${{ const.since_tag }}..HEAD", "--oneline", "--no-merges"]53    on_error:54      # No such tag here (or not a repo at all) → a sample log takes over and55      # the rest of the chain is exercised exactly as it would be on the day.56      recover: |57        a1b2c3d feat(api): pagination cursors on every list endpoint58        d4e5f6a fix(auth): refresh tokens no longer rotate on read59        7g8h9i0 refactor(store): drop the legacy write path60​61  notes:62    with:63      history: ${{ tasks.history.output }}64    ◇infer:65      max_tokens: 100066      prompt: |67        Write release notes from these commits ·68        ${{ with.history }}69        Tone · plain, direct, no marketing fluff.70      schema:71        type: object72        additionalProperties: false73        required: [headline, body]74        properties:75          headline: { type: string }76          breaking: { type: array, items: { type: string } }77          body: { type: string }78​79  # Copy-then-edit · `nika:edit` is strictly in place and throws when `find:`80  # matches nothing (NIKA-BUILTIN-EDIT-001), so its target must exist and must81  # carry the anchor. Read yours, write the working copy, edit THAT.82  existing:83    ◆invoke:84      tool: "nika:read"85      args: { path: "${{ const.changelog_src }}" }86​87  copy:88    with:89      existing: ${{ tasks.existing.output }}90    ◆invoke:91      tool: "nika:write"92      args:93        path: "${{ const.changelog_out }}"94        content: "${{ with.existing }}"95        create_dirs: true96        overwrite: true97​98  changelog:99    with:100      notes_headline: ${{ tasks.notes.output.headline }}101      notes_body: ${{ tasks.notes.output.body }}102    after:103      copy: success              # state, no data · the anchor is on disk before we edit104    ◆invoke:105      tool: "nika:edit"106      args:107        path: "${{ const.changelog_out }}"108        find: "# Changelog"      # a LITERAL string · not a regex109        count: 1                 # the top anchor only · never every occurrence110        replace: |111          # Changelog112​113          ## ${{ const.since_tag }}..HEAD · ${{ with.notes_headline }}114​115          ${{ with.notes_body }}116​117  announce:118    with:119      notes_headline: ${{ tasks.notes.output.headline }}120    when: ${{ inputs.announce == true }}   # OFF by default · a rehearsal must not ping the team121    after:122      changelog: success123    ◆invoke:124      tool: "nika:notify"125      args:126        channel: webhook127        target: "${{ secrets.team_webhook }}"128        message: "Release notes ready · ${{ with.notes_headline }}"129        severity: info130​131outputs:132  headline: ${{ tasks.notes.output.headline }}133  body: ${{ tasks.notes.output.body }}134​