chore: publish from staged

.github/workflows/external-plugin-approval-command.yml

@@ -9,7 +9,8 @@ concurrency:
   cancel-in-progress: false
 
 permissions:
-  issues: write
+  pull-requests: write
+  contents: read
 
 jobs:
   sync-merged-pr-labels:
@@ -25,20 +26,6 @@ jobs:
             const prNumber = context.payload.pull_request.number;
             const staleLabels = ['awaiting-review', 'awaiting-approval', 'ready-for-review', 'rejected'];
 
-            try {
-              await github.rest.issues.createLabel({
-                owner: context.repo.owner,
-                repo: context.repo.repo,
-                name: 'approved',
-                color: '1D76DB',
-                description: 'Submission was approved by a maintainer'
-              });
-            } catch (error) {
-              if (error.status !== 422) {
-                throw error;
-              }
-            }
-
             const { data: currentLabels } = await github.rest.issues.listLabelsOnIssue({
               owner: context.repo.owner,
               repo: context.repo.repo,

.github/workflows/external-plugin-command-router.yml

@@ -275,49 +275,6 @@ jobs:
           PR_NUMBER: ${{ steps.approval_pr.outputs.pr-number }}
         with:
           script: |
-            const managedLabels = {
-              'external-plugin': {
-                color: 'FEF2C0',
-                description: 'Public external plugin submission'
-              },
-              'awaiting-review': {
-                color: 'FBCA04',
-                description: 'Submission is waiting for automated intake validation'
-              },
-              'ready-for-review': {
-                color: '0E8A16',
-                description: 'Submission passed intake validation and is ready for maintainer review'
-              },
-              'requires-submitter-fixes': {
-                color: 'D93F0B',
-                description: 'Submission has quality-gate findings that submitter must fix before maintainer review'
-              },
-              'approved': {
-                color: '1D76DB',
-                description: 'Submission was approved by a maintainer'
-              },
-              'rejected': {
-                color: 'B60205',
-                description: 'Submission was rejected by a maintainer'
-              }
-            };
-
-            async function ensureLabel(name, config) {
-              try {
-                await github.rest.issues.createLabel({
-                  owner: context.repo.owner,
-                  repo: context.repo.repo,
-                  name,
-                  color: config.color,
-                  description: config.description
-                });
-              } catch (error) {
-                if (error.status !== 422) {
-                  throw error;
-                }
-              }
-            }
-
             async function removeLabel(issueNumber, name) {
               try {
                 await github.rest.issues.removeLabel({
@@ -334,7 +291,14 @@ jobs:
             }
 
             async function syncIssueLabels(issueNumber, desiredLabels) {
-              await Promise.all(Object.entries(managedLabels).map(([name, config]) => ensureLabel(name, config)));
+              const managedLabels = {
+                'external-plugin': true,
+                'awaiting-review': true,
+                'ready-for-review': true,
+                'requires-submitter-fixes': true,
+                'approved': true,
+                'rejected': true
+              };
 
               const currentLabels = await github.paginate(github.rest.issues.listLabelsOnIssue, {
                 owner: context.repo.owner,
@@ -438,49 +402,6 @@ jobs:
           PLUGIN_NAME: ${{ steps.parse.outputs.plugin-name }}
         with:
           script: |
-            const managedLabels = {
-              'external-plugin': {
-                color: 'FEF2C0',
-                description: 'Public external plugin submission'
-              },
-              'awaiting-review': {
-                color: 'FBCA04',
-                description: 'Submission is waiting for automated intake validation'
-              },
-              'ready-for-review': {
-                color: '0E8A16',
-                description: 'Submission passed intake validation and is ready for maintainer review'
-              },
-              'requires-submitter-fixes': {
-                color: 'D93F0B',
-                description: 'Submission has quality-gate findings that submitter must fix before maintainer review'
-              },
-              'approved': {
-                color: '1D76DB',
-                description: 'Submission was approved by a maintainer'
-              },
-              'rejected': {
-                color: 'B60205',
-                description: 'Submission was rejected by a maintainer'
-              }
-            };
-
-            async function ensureLabel(name, config) {
-              try {
-                await github.rest.issues.createLabel({
-                  owner: context.repo.owner,
-                  repo: context.repo.repo,
-                  name,
-                  color: config.color,
-                  description: config.description
-                });
-              } catch (error) {
-                if (error.status !== 422) {
-                  throw error;
-                }
-              }
-            }
-
             async function removeLabel(name) {
               try {
                 await github.rest.issues.removeLabel({
@@ -496,7 +417,6 @@ jobs:
               }
             }
 
-            await Promise.all(Object.entries(managedLabels).map(([name, config]) => ensureLabel(name, config)));
             await github.rest.issues.addLabels({
               owner: context.repo.owner,
               repo: context.repo.repo,

.github/workflows/external-plugin-rereview-command.yml

@@ -180,34 +180,6 @@ jobs:
           PLUGIN_NAME: ${{ steps.parse.outputs.plugin-name }}
         with:
           script: |
-            const managedLabels = {
-              're-review-due': {
-                color: 'FBCA04',
-                description: 'Approved external plugin is due for six-month re-review'
-              },
-              're-review-follow-up': {
-                color: 'D4C5F9',
-                description: 'Six-month re-review needs maintainer follow-up before a final decision'
-              }
-            };
-
-            async function ensureLabel(name, config) {
-              try {
-                await github.rest.issues.createLabel({
-                  owner: context.repo.owner,
-                  repo: context.repo.repo,
-                  name,
-                  color: config.color,
-                  description: config.description
-                });
-              } catch (error) {
-                if (error.status !== 422) {
-                  throw error;
-                }
-              }
-            }
-
-            await Promise.all(Object.entries(managedLabels).map(([name, config]) => ensureLabel(name, config)));
             await github.rest.issues.addLabels({
               owner: context.repo.owner,
               repo: context.repo.repo,

.github/workflows/external-plugin-rereview.yml

@@ -26,37 +26,6 @@ jobs:
             const rereview = await import(pathToFileURL(path.join(process.env.GITHUB_WORKSPACE, 'eng', 'external-plugin-rereview.mjs')).href);
             const validation = await import(pathToFileURL(path.join(process.env.GITHUB_WORKSPACE, 'eng', 'external-plugin-validation.mjs')).href);
 
-            const managedLabels = {
-              [rereview.REREVIEW_LABELS.due]: {
-                color: 'FBCA04',
-                description: 'Approved external plugin is due for six-month re-review'
-              },
-              [rereview.REREVIEW_LABELS.followUp]: {
-                color: 'D4C5F9',
-                description: 'Six-month re-review needs maintainer follow-up before a final decision'
-              },
-              [rereview.REREVIEW_LABELS.removed]: {
-                color: 'B60205',
-                description: 'External plugin was removed from the marketplace after re-review'
-              }
-            };
-
-            async function ensureLabel(name, config) {
-              try {
-                await github.rest.issues.createLabel({
-                  owner: context.repo.owner,
-                  repo: context.repo.repo,
-                  name,
-                  color: config.color,
-                  description: config.description
-                });
-              } catch (error) {
-                if (error.status !== 422) {
-                  throw error;
-                }
-              }
-            }
-
             async function removeLabel(issueNumber, label) {
               try {
                 await github.rest.issues.removeLabel({
@@ -90,8 +59,6 @@ jobs:
               return Math.max(0, Math.floor(Math.abs(diff) / (1000 * 60 * 60 * 24)));
             }
 
-            await Promise.all(Object.entries(managedLabels).map(([name, config]) => ensureLabel(name, config)));
-
             const { plugins, errors } = validation.readExternalPlugins({ policy: 'marketplace' });
             if (errors.length > 0) {
               core.setFailed(errors.join('\n'));

.github/workflows/label-pr-intent.yml

@@ -20,54 +20,18 @@ jobs:
         with:
           script: |
             const managedLabels = {
-              'targets-main': {
+              'targets-main': true,
-                color: 'B60205',
+              'branched-main': true,
-                description: 'PR targets main instead of staged'
+              'skills': true,
-              },
+              'plugin': true,
-              'branched-main': {
+              'agent': true,
-                color: 'D93F0B',
+              'instructions': true,
-                description: 'PR appears to include plugin files materialized from main'
+              'new-submission': true,
-              },
+              'website-update': true,
-              'skills': {
+              'external-plugin': true,
-                color: '1D76DB',
+              'hooks': true,
-                description: 'PR touches skills'
+              'workflow': true,
-              },
+              'canvas-extension': true
-              'plugin': {
-                color: '5319E7',
-                description: 'PR touches plugins'
-              },
-              'agent': {
-                color: '0E8A16',
-                description: 'PR touches agents'
-              },
-              'instructions': {
-                color: 'FBCA04',
-                description: 'PR touches instructions'
-              },
-              'new-submission': {
-                color: '006B75',
-                description: 'PR adds at least one new contribution'
-              },
-              'website-update': {
-                color: '0052CC',
-                description: 'PR touches website content or code'
-              },
-              'external-plugin': {
-                color: 'FEF2C0',
-                description: 'PR updates plugins/external.json'
-              },
-              'hooks': {
-                color: 'C2E0C6',
-                description: 'PR touches hooks'
-              },
-              'workflow': {
-                color: 'BFD4F2',
-                description: 'PR touches workflow automation'
-              },
-              'canvas-extension': {
-                color: 'E4B9FF',
-                description: 'PR touches canvas extensions'
-              }
             };
 
             const matchesAny = (filename, patterns) => patterns.some((pattern) => pattern.test(filename));
@@ -95,22 +59,6 @@ jobs:
               }
             }
 
-            async function ensureLabel(name, { color, description }) {
-              try {
-                await github.rest.issues.createLabel({
-                  owner: context.repo.owner,
-                  repo: context.repo.repo,
-                  name,
-                  color,
-                  description
-                });
-              } catch (error) {
-                if (error.status !== 422) {
-                  throw error;
-                }
-              }
-            }
-
             const files = await listAllFiles();
             const filenames = files.map((file) => file.filename);
 
@@ -214,10 +162,6 @@ jobs:
               }
             }
 
-            await Promise.all(
-              Object.entries(managedLabels).map(([name, config]) => ensureLabel(name, config))
-            );
-
             const currentLabels = await github.paginate(github.rest.issues.listLabelsOnIssue, {
               owner: context.repo.owner,
               repo: context.repo.repo,

.github/workflows/setup-labels.yml

@@ -0,0 +1,148 @@
+name: Setup Repository Labels
+
+on:
+  workflow_dispatch
+
+permissions:
+  issues: write
+
+jobs:
+  setup-labels:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Create or update labels
+        uses: actions/github-script@f28e40c7f34bde8b3046d885e986cb6290c5673b # v7.1.0
+        with:
+          script: |
+            const labels = {
+              // Intent labels for PR categorization
+              'targets-main': {
+                color: 'B60205',
+                description: 'PR targets main instead of staged'
+              },
+              'branched-main': {
+                color: 'D93F0B',
+                description: 'PR appears to include plugin files materialized from main'
+              },
+              'skills': {
+                color: '1D76DB',
+                description: 'PR touches skills'
+              },
+              'plugin': {
+                color: '5319E7',
+                description: 'PR touches plugins'
+              },
+              'agent': {
+                color: '0E8A16',
+                description: 'PR touches agents'
+              },
+              'instructions': {
+                color: 'FBCA04',
+                description: 'PR touches instructions'
+              },
+              'new-submission': {
+                color: '006B75',
+                description: 'PR adds at least one new contribution'
+              },
+              'website-update': {
+                color: '0052CC',
+                description: 'PR touches website content or code'
+              },
+              'external-plugin': {
+                color: 'FEF2C0',
+                description: 'Public external plugin submission'
+              },
+              'hooks': {
+                color: 'C2E0C6',
+                description: 'PR touches hooks'
+              },
+              'workflow': {
+                color: 'BFD4F2',
+                description: 'PR touches workflow automation'
+              },
+              // External plugin intake state labels
+              'awaiting-review': {
+                color: 'FBCA04',
+                description: 'Submission is waiting for automated intake validation'
+              },
+              'ready-for-review': {
+                color: '0E8A16',
+                description: 'Submission passed intake validation and is ready for maintainer review'
+              },
+              'requires-submitter-fixes': {
+                color: 'D93F0B',
+                description: 'Submission has quality-gate findings that submitter must fix before maintainer review'
+              },
+              'approved': {
+                color: '1D76DB',
+                description: 'Submission was approved by a maintainer'
+              },
+              'rejected': {
+                color: 'B60205',
+                description: 'Submission was rejected by a maintainer'
+              },
+              // Re-review labels
+              'removed': {
+                color: 'B60205',
+                description: 'External plugin was removed from the marketplace after re-review'
+              },
+              're-review-follow-up': {
+                color: 'D4C5F9',
+                description: 'Six-month re-review needs maintainer follow-up before a final decision'
+              },
+              'awaiting-approval': {
+                color: 'FBCA04',
+                description: 'External plugin awaiting maintainer approval'
+              }
+            };
+
+            let created = 0;
+            let updated = 0;
+            let failed = 0;
+
+            for (const [name, config] of Object.entries(labels)) {
+              try {
+                await github.rest.issues.createLabel({
+                  owner: context.repo.owner,
+                  repo: context.repo.repo,
+                  name,
+                  color: config.color,
+                  description: config.description
+                });
+                created++;
+                core.info(`✓ Created label: ${name}`);
+              } catch (error) {
+                if (error.status === 422) {
+                  // Label already exists, try to update it
+                  try {
+                    await github.rest.issues.updateLabel({
+                      owner: context.repo.owner,
+                      repo: context.repo.repo,
+                      name,
+                      color: config.color,
+                      description: config.description
+                    });
+                    updated++;
+                    core.info(`✓ Updated label: ${name}`);
+                  } catch (updateError) {
+                    failed++;
+                    core.error(`✗ Failed to update label ${name}: ${updateError.message}`);
+                  }
+                } else {
+                  failed++;
+                  core.error(`✗ Failed to create label ${name}: ${error.message}`);
+                }
+              }
+            }
+
+            core.info(`
+            Label setup complete:
+            - Created: ${created}
+            - Updated: ${updated}
+            - Failed: ${failed}
+            - Total: ${Object.keys(labels).length}
+            `);
+
+            if (failed > 0) {
+              throw new Error(`Failed to setup ${failed} label(s)`);
+            }

.github/workflows/skill-check-comment.yml

@@ -42,27 +42,7 @@ jobs:
               }
             };
 
-            async function ensureLabel(name, { color, description }) {
-              try {
-                await github.rest.issues.createLabel({
-                  owner: context.repo.owner,
-                  repo: context.repo.repo,
-                  name,
-                  color,
-                  description
-                });
-              } catch (error) {
-                if (error.status !== 422) {
-                  throw error;
-                }
-              }
-            }
-
             async function syncManagedLabels(issueNumber, desiredLabels) {
-              await Promise.all(
-                Object.entries(managedLabels).map(([name, config]) => ensureLabel(name, config))
-              );
-
               const currentLabels = await github.paginate(github.rest.issues.listLabelsOnIssue, {
                 owner: context.repo.owner,
                 repo: context.repo.repo,

eng/external-plugin-intake-state.mjs

@@ -33,22 +33,6 @@ const EXTERNAL_PLUGIN_INTAKE_SYNC_LABELS = Object.freeze([
   "rejected",
 ]);
 
-async function ensureLabel({ github, owner, repo, name, config }) {
-  try {
-    await github.rest.issues.createLabel({
-      owner,
-      repo,
-      name,
-      color: config.color,
-      description: config.description,
-    });
-  } catch (error) {
-    if (error.status !== 422) {
-      throw error;
-    }
-  }
-}
-
 async function removeLabel({ github, owner, repo, issueNumber, name }) {
   try {
     await github.rest.issues.removeLabel({
@@ -65,12 +49,6 @@ async function removeLabel({ github, owner, repo, issueNumber, name }) {
 }
 
 export async function syncExternalPluginIntakeLabels({ github, owner, repo, issueNumber, desiredLabels }) {
-  await Promise.all(
-    Object.entries(EXTERNAL_PLUGIN_INTAKE_LABELS).map(([name, config]) =>
-      ensureLabel({ github, owner, repo, name, config })
-    )
-  );
-
   const currentLabels = await github.paginate(github.rest.issues.listLabelsOnIssue, {
     owner,
     repo,