Add Go rewrite of autosolve actions

Single Go binary (autosolve) replaces the bash script chain with typed
config, mockable interfaces for Claude CLI and GitHub API, embedded
prompt templates, and 45 unit tests. Composite action YAMLs reduced to
two steps each (build + run).

Co-Authored-By: roachdev-claude <roachdev-claude-bot@cockroachlabs.com>

Author: fantapop

autosolve-go/Makefile

@@ -0,0 +1,10 @@
+.PHONY: build test clean
+
+build:
+	go build -o autosolve ./cmd/autosolve
+
+test:
+	go test ./... -count=1
+
+clean:
+	rm -f autosolve

autosolve-go/assess/action.yml

@@ -0,0 +1,63 @@
+name: Autosolve Assess (Go)
+description: Run Claude in read-only mode to assess whether a task is suitable for automated resolution.
+
+inputs:
+  prompt:
+    description: The task to assess. Plain text instructions describing what needs to be done.
+    required: false
+    default: ""
+  skill:
+    description: Path to a skill/prompt file relative to the repo root.
+    required: false
+    default: ""
+  additional_instructions:
+    description: Extra context appended after the task prompt but before the assessment footer.
+    required: false
+    default: ""
+  assessment_criteria:
+    description: Custom criteria for the assessment. If not provided, uses default criteria.
+    required: false
+    default: ""
+  model:
+    description: Claude model ID.
+    required: false
+    default: "claude-opus-4-6"
+  blocked_paths:
+    description: Comma-separated path prefixes that cannot be modified (injected into security preamble).
+    required: false
+    default: ".github/workflows/"
+  claude_cli_version:
+    description: Claude CLI version to install.
+    required: false
+    default: "2.1.79"
+
+outputs:
+  assessment:
+    description: PROCEED or SKIP
+    value: ${{ steps.assess.outputs.assessment }}
+  summary:
+    description: Human-readable assessment reasoning.
+    value: ${{ steps.assess.outputs.summary }}
+  result:
+    description: Full Claude result text.
+    value: ${{ steps.assess.outputs.result }}
+
+runs:
+  using: "composite"
+  steps:
+    - name: Build autosolve
+      shell: bash
+      run: cd "${{ github.action_path }}/.." && go build -o /tmp/autosolve ./cmd/autosolve
+
+    - name: Run assessment
+      id: assess
+      shell: bash
+      run: /tmp/autosolve assess
+      env:
+        INPUT_PROMPT: ${{ inputs.prompt }}
+        INPUT_SKILL: ${{ inputs.skill }}
+        INPUT_ADDITIONAL_INSTRUCTIONS: ${{ inputs.additional_instructions }}
+        INPUT_ASSESSMENT_CRITERIA: ${{ inputs.assessment_criteria }}
+        INPUT_MODEL: ${{ inputs.model }}
+        INPUT_BLOCKED_PATHS: ${{ inputs.blocked_paths }}
+        CLAUDE_CLI_VERSION: ${{ inputs.claude_cli_version }}

autosolve-go/cmd/autosolve/main.go

@@ -0,0 +1,257 @@
+package main
+
+import (
+	"context"
+	"fmt"
+	"os"
+	"os/signal"
+	"strconv"
+	"strings"
+
+	"github.com/cockroachdb/actions/autosolve-go/internal/action"
+	"github.com/cockroachdb/actions/autosolve-go/internal/assess"
+	"github.com/cockroachdb/actions/autosolve-go/internal/claude"
+	"github.com/cockroachdb/actions/autosolve-go/internal/config"
+	"github.com/cockroachdb/actions/autosolve-go/internal/github"
+	"github.com/cockroachdb/actions/autosolve-go/internal/implement"
+	"github.com/cockroachdb/actions/autosolve-go/internal/prompt"
+	"github.com/cockroachdb/actions/autosolve-go/internal/security"
+)
+
+const usage = `Usage: autosolve <command>
+
+Commands:
+  assess          Run assessment phase
+  implement       Run implementation phase
+  security        Run security check on working tree
+  prompt build    Assemble the full prompt file
+  prompt issue    Build prompt from GitHub issue context
+  comment         Post a comment on a GitHub issue
+  label remove    Remove a label from a GitHub issue`
+
+func main() {
+	ctx, cancel := signal.NotifyContext(context.Background(), os.Interrupt)
+	defer cancel()
+
+	if len(os.Args) < 2 {
+		fatalf(usage)
+	}
+
+	// Join args to support two-word commands like "prompt build"
+	cmd := os.Args[1]
+	if len(os.Args) > 2 {
+		cmd = os.Args[1] + " " + os.Args[2]
+	}
+
+	var err error
+	switch cmd {
+	case "assess":
+		err = runAssess(ctx)
+	case "implement":
+		err = runImplement(ctx)
+	case "security":
+		err = runSecurity()
+	case "prompt build":
+		err = runPromptBuild()
+	case "prompt issue":
+		err = runPromptIssue()
+	case "comment":
+		err = runComment(ctx)
+	case "label remove":
+		err = runLabelRemove(ctx)
+	default:
+		fatalf("unknown command: %s\n\n%s", os.Args[1], usage)
+	}
+
+	if err != nil {
+		action.LogError(err.Error())
+		os.Exit(1)
+	}
+}
+
+func fatalf(format string, args ...any) {
+	fmt.Fprintf(os.Stderr, format+"\n", args...)
+	os.Exit(1)
+}
+
+func runAssess(ctx context.Context) error {
+	cfg, err := config.LoadAssessConfig()
+	if err != nil {
+		return err
+	}
+	if err := config.ValidateAuth(); err != nil {
+		return err
+	}
+	if err := claude.EnsureCLI(cfg.CLIVersion); err != nil {
+		return err
+	}
+	tmpDir, err := ensureTmpDir()
+	if err != nil {
+		return err
+	}
+	return assess.Run(ctx, cfg, &claude.CLIRunner{}, tmpDir)
+}
+
+func runImplement(ctx context.Context) error {
+	cfg, err := config.LoadImplementConfig()
+	if err != nil {
+		return err
+	}
+	if err := config.ValidateAuth(); err != nil {
+		return err
+	}
+	if err := claude.EnsureCLI(cfg.CLIVersion); err != nil {
+		return err
+	}
+	tmpDir, err := ensureTmpDir()
+	if err != nil {
+		return err
+	}
+	defer implement.Cleanup()
+
+	ghClient := &github.GHClient{Token: cfg.PRCreateToken}
+	return implement.Run(ctx, cfg, &claude.CLIRunner{}, ghClient, tmpDir)
+}
+
+func runSecurity() error {
+	cfg, err := config.LoadSecurityConfig()
+	if err != nil {
+		return err
+	}
+	violations, err := security.Check(cfg.BlockedPaths)
+	if err != nil {
+		return err
+	}
+	if len(violations) > 0 {
+		for _, v := range violations {
+			action.LogError(v)
+		}
+		return fmt.Errorf("security check failed: %d violation(s) found", len(violations))
+	}
+	action.LogNotice("Security check passed")
+	return nil
+}
+
+func runPromptBuild() error {
+	footerType := envOrDefault("INPUT_FOOTER_TYPE", "implementation")
+	cfg := &config.Config{
+		Prompt:                 os.Getenv("INPUT_PROMPT"),
+		Skill:                  os.Getenv("INPUT_SKILL"),
+		AdditionalInstructions: os.Getenv("INPUT_ADDITIONAL_INSTRUCTIONS"),
+		AssessmentCriteria:     os.Getenv("INPUT_ASSESSMENT_CRITERIA"),
+		BlockedPaths:           config.ParseBlockedPaths(os.Getenv("INPUT_BLOCKED_PATHS")),
+		FooterType:             footerType,
+	}
+	if cfg.Prompt == "" && cfg.Skill == "" {
+		return fmt.Errorf("at least one of 'prompt' or 'skill' must be provided")
+	}
+	tmpDir, err := ensureTmpDir()
+	if err != nil {
+		return err
+	}
+	path, err := prompt.Build(cfg, tmpDir)
+	if err != nil {
+		return err
+	}
+	action.SetOutput("prompt_file", path)
+	return nil
+}
+
+func runPromptIssue() error {
+	result := prompt.BuildIssuePrompt(
+		os.Getenv("INPUT_PROMPT"),
+		os.Getenv("ISSUE_NUMBER"),
+		os.Getenv("ISSUE_TITLE"),
+		os.Getenv("ISSUE_BODY"),
+	)
+	action.SetOutputMultiline("prompt", result)
+	return nil
+}
+
+func runComment(ctx context.Context) error {
+	token := os.Getenv("GITHUB_TOKEN_INPUT")
+	issueStr := os.Getenv("ISSUE_NUMBER")
+	commentType := os.Getenv("COMMENT_TYPE")
+	if token == "" || issueStr == "" || commentType == "" {
+		return fmt.Errorf("GITHUB_TOKEN_INPUT, ISSUE_NUMBER, and COMMENT_TYPE are required")
+	}
+
+	ghClient := &github.GHClient{Token: token}
+	repo := os.Getenv("GITHUB_REPOSITORY")
+	issue, _ := strconv.Atoi(issueStr)
+
+	var body string
+	switch commentType {
+	case "skipped":
+		summary := os.Getenv("SUMMARY")
+		sanitized := sanitizeForCodeBlock(summary)
+		body = fmt.Sprintf("Auto-solver assessed this issue but determined it is not suitable for automated resolution.\n\n```\n%s\n```", sanitized)
+	case "success":
+		prURL := os.Getenv("PR_URL")
+		if prURL == "" {
+			return fmt.Errorf("PR_URL is required for success comment")
+		}
+		body = fmt.Sprintf("Auto-solver has created a draft PR: %s\n\nPlease review the changes carefully before approving.", prURL)
+	case "failed":
+		body = "Auto-solver attempted to fix this issue but was unable to complete the implementation.\n\nThis issue may require human intervention."
+	default:
+		return fmt.Errorf("unknown comment type: %s", commentType)
+	}
+
+	return ghClient.CreateComment(ctx, repo, issue, body)
+}
+
+func runLabelRemove(ctx context.Context) error {
+	token := os.Getenv("GITHUB_TOKEN_INPUT")
+	issueStr := os.Getenv("ISSUE_NUMBER")
+	if token == "" || issueStr == "" {
+		return fmt.Errorf("GITHUB_TOKEN_INPUT and ISSUE_NUMBER are required")
+	}
+	label := envOrDefault("TRIGGER_LABEL", "autosolve")
+	repo := os.Getenv("GITHUB_REPOSITORY")
+
+	issue, _ := strconv.Atoi(issueStr)
+	ghClient := &github.GHClient{Token: token}
+	return ghClient.RemoveLabel(ctx, repo, issue, label)
+}
+
+func ensureTmpDir() (string, error) {
+	dir := os.Getenv("AUTOSOLVE_TMPDIR")
+	if dir != "" {
+		return dir, nil
+	}
+	dir, err := os.MkdirTemp("", "autosolve_*")
+	if err != nil {
+		return "", fmt.Errorf("creating temp dir: %w", err)
+	}
+	os.Setenv("AUTOSOLVE_TMPDIR", dir)
+	return dir, nil
+}
+
+func envOrDefault(key, def string) string {
+	if v := os.Getenv(key); v != "" {
+		return v
+	}
+	return def
+}
+
+// sanitizeForCodeBlock strips HTML tags and escapes triple backticks so the
+// text can safely be placed inside a markdown code fence.
+func sanitizeForCodeBlock(s string) string {
+	var b strings.Builder
+	inTag := false
+	for _, c := range s {
+		if c == '<' {
+			inTag = true
+			continue
+		}
+		if c == '>' && inTag {
+			inTag = false
+			continue
+		}
+		if !inTag {
+			b.WriteRune(c)
+		}
+	}
+	return strings.ReplaceAll(b.String(), "```", "` ` `")
+}

autosolve-go/go.mod

@@ -0,0 +1,3 @@
+module github.com/cockroachdb/actions/autosolve-go
+
+go 1.23.8