Centralize encrypted bot profiles

.gitea/workflows/check.yml

@@ -17,5 +17,5 @@ jobs:
       - run: >-
           deno fmt --check . &&
           deno lint . &&
-          deno check src/prepare.ts src/run.ts src/post.ts &&
+          deno check prepare.ts run.ts post.ts &&
           deno test --allow-all

action.yml

@@ -29,10 +29,8 @@ runs:
         RUNNER_TEMP: ${{ runner.temp }}
       run: |
         path=$(mktemp -d "${RUNNER_TEMP}/bot-agents-source-XXXXXX")
-        mkdir "${path}/src"
-        cp -a "${ACTION_PATH}"/src/*.ts "${path}/src/"
-        cp -a "${ACTION_PATH}/profiles.yml" "${ACTION_PATH}/prompt.md" \
-          "${path}/"
+        cp -a "${ACTION_PATH}"/*.ts "${ACTION_PATH}/profiles.yml" \
+          "${ACTION_PATH}/prompt.md" "${path}/"
         chmod -R go-w "${path}"
         echo "path=${path}" >> "${GITHUB_OUTPUT}"
     - name: Allow isolated profiles to edit the checkout
@@ -41,7 +39,7 @@ runs:
     - name: Prepare credentials
       id: prepare
       shell: bash
-      run: deno run -A "${{ steps.source.outputs.path }}/src/prepare.ts"
+      run: deno run -A "${{ steps.source.outputs.path }}/prepare.ts"
       env:
         ACTION_PATH: ${{ steps.source.outputs.path }}
         BOT_AGENTS_MASTER_KEY: ${{ inputs.master-key }}
@@ -49,7 +47,7 @@ runs:
     - name: Run bot
       id: agent
       shell: bash
-      run: deno run -A "${{ steps.source.outputs.path }}/src/run.ts"
+      run: deno run -A "${{ steps.source.outputs.path }}/run.ts"
       env:
         BOT_AGENTS_MANIFEST: ${{ steps.prepare.outputs.manifest }}
         GITEA_TOKEN: ${{ gitea.token }}
@@ -62,7 +60,7 @@ runs:
       id: post
       if: always() && steps.prepare.outputs.manifest != ''
       shell: bash
-      run: deno run -A "${{ steps.source.outputs.path }}/src/post.ts"
+      run: deno run -A "${{ steps.source.outputs.path }}/post.ts"
       env:
         BOT_AGENTS_MANIFEST: ${{ steps.prepare.outputs.manifest }}
         GITEA_API_URL: ${{ gitea.api_url }}

workflow_test.ts

@@ -96,14 +96,14 @@ Deno.test("CI checks every phase and the root isolation suite", async () => {
   const commands = sequence(job.steps, "jobs.deno.steps")
     .map((step) => typeof step.run === "string" ? step.run : "")
     .join("\n");
-  for (const entrypoint of ["src/prepare.ts", "src/run.ts", "src/post.ts"]) {
+  for (const entrypoint of ["prepare.ts", "run.ts", "post.ts"]) {
     assert(commands.includes(entrypoint), entrypoint);
   }
   assert(commands.includes("deno test --allow-all"));
 });
 
 Deno.test("uses the standard Skills installer without custom discovery", async () => {
-  const runner = await Deno.readTextFile("src/run.ts");
+  const runner = await Deno.readTextFile("run.ts");
   assert(runner.includes("skills add obra/superpowers"));
   try {
     await Deno.stat("superpowers.ts");