ci: bug-bash workflow — record CLI TUI to S3 on every PR#2131

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
jariy17 wants to merge 3 commits into from
+144 −0
Closed

ci: bug-bash workflow — record CLI TUI to S3 on every PR #2131

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
6be20ae
ci: add bug-bash workflow (TUI recording to S3) for every PR
Aug 27, 2026
6d0c1dc
ci(bug-bash): don't print S3 URL, just say check S3
Aug 27, 2026
dff2280
style(bug-bash): prettier-format record.mjs
Aug 28, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
45 changes: 45 additions & 0 deletions .github/harness/bug-bash/record.mjs
View file
Open in desktop
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,45 @@
#!/usr/bin/env node
/*
* Bug-bash TUI recorder. Launches the AgentCore CLI TUI under private-tui-harness
* (tui-harness-mcp), records one frame per screen change, drives a short scripted
* key sequence, and writes an MP4 to $OUT.
*
* The key script is env-tunable (BUGBASH_KEYS) on purpose: a live TUI's navigation
* drifts across versions, so the sequence is a calibration knob, not a hardcoded
* assumption. Teams tune BUGBASH_KEYS/BUGBASH_ARGS per what the current TUI expects.
*/
import { resolve } from "node:path";

const dist = process.env.TUI_HARNESS_DIST;
if (!dist) throw new Error("TUI_HARNESS_DIST must point at private-tui-harness dist/index.js");

const { TuiSession } = await import(resolve(dist));

const out = process.env.OUT || "bug-bash.mp4";
const command = process.env.BUGBASH_CMD || "bun";
const args = (process.env.BUGBASH_ARGS || "run src/index.ts").split(" ").filter(Boolean);
// Semicolon-separated steps sent in order; each is text or a special key name
// understood by tui-harness (enter, down, up, escape, q, ctrl+c, ...).
const keys = (process.env.BUGBASH_KEYS || "down;down;enter;escape;q").split(";").filter(Boolean);
const settleMs = Number(process.env.BUGBASH_SETTLE_MS || 1500);

const session = await TuiSession.launch({
command,
args,
cwd: process.cwd(),
cols: 140,
rows: 40,
env: { CI: "1", TERM: "xterm-256color" },
});

session.startRecording();
try {
await session.sendKeys("", settleMs); // let the first screen settle before driving
for (const k of keys) {
await session.sendKeys(k, settleMs);
}
} finally {
await session.stopRecording(resolve(out));
await session.close("SIGINT").catch(() => {});
console.log(`Recorded TUI session -> ${out}`);
}
99 changes: 99 additions & 0 deletions .github/workflows/bug-bash.yml
View file
Open in desktop
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,99 @@
name: Bug Bash

# Runs the AgentCore CLI bug-bash bot on every pull request: builds the CLI from
# the PR head, exercises it against the explore sandbox account, records the TUI
# session via private-tui-harness, and drops the recording in S3.
#
# Shared-secrets model follows the Moab "GitHub Reusable Workflow Guide":
# - id-token: write lets the fetch-secrets composite assume this repo's
# DevXWorkflowSecretsReader role via OIDC and read secrets from the central
# DevX Secrets Manager account (631957124172, us-east-1).
# - Reuses the shared E2E_AWS_ROLE_ARN (685197708687) that the harness reviewer
# and E2E already run under; recording bucket via BUGBASH_RECORDING_BUCKET.
# Both are aws/agentcore-cli/<NAME> secrets, fetched by bare name below.
# - Composite action is pinned to a full commit SHA on devtools main, per guide.

on:
pull_request:
branches: [main, refactor]
types: [opened, reopened, synchronize]
workflow_dispatch:
inputs:
region:
description: AWS region to run the bug-bash in
required: false
default: us-east-1
type: string

concurrency:
group: bug-bash-${{ github.event.pull_request.number || github.ref }}
cancel-in-progress: true

permissions:
contents: read
id-token: write

jobs:
bug-bash:
# The job assumes a real AWS role, so it must never run untrusted fork code.
# Fork PRs are intentionally skipped; only same-repo PRs and manual dispatch run.
if: >-
github.event_name == 'workflow_dispatch' ||
github.event.pull_request.head.repo.full_name == github.repository
runs-on: codebuild-agentcore-e2e-${{ github.run_id }}-${{ github.run_attempt }}
timeout-minutes: 30
env:
AWS_REGION: ${{ inputs.region || 'us-east-1' }}
OUT: ${{ runner.temp }}/bug-bash-${{ github.run_id }}.mp4
steps:
- name: Checkout PR head
uses: actions/checkout@v7
with:
ref: ${{ github.event.pull_request.head.sha || github.sha }}
persist-credentials: false

- uses: oven-sh/setup-bun@v2
- run: bun install --frozen-lockfile
- run: bun run build

- name: Fetch workflow secrets
uses: aws/agentcore-devx-devtools/.github/actions/fetch-secrets@31aa3b031a86664e29861d68956e44b07cf21a74
with:
role-arn: ${{ secrets.WORKFLOW_SECRETS_READER_ROLE_ARN }}
repo: E2E_AWS_ROLE_ARN, BUGBASH_RECORDING_BUCKET

# Reuse the shared GitHub-Actions runtime account (685197708687) that the
# harness reviewer and E2E already run in, via the existing E2E_AWS_ROLE_ARN.
- name: Assume E2E role (shared runtime account)
uses: aws-actions/configure-aws-credentials@v6
with:
role-to-assume: ${{ env.E2E_AWS_ROLE_ARN }}
aws-region: ${{ env.AWS_REGION }}

- name: Build the TUI recorder (private-tui-harness)
run: |
git clone --depth 1 https://github.com/jariy17/private-tui-harness.git "$RUNNER_TEMP/tui-harness"
(cd "$RUNNER_TEMP/tui-harness" && npm ci && npm run build)
echo "TUI_HARNESS_DIST=$RUNNER_TEMP/tui-harness/dist/index.js" >> "$GITHUB_ENV"

- name: Run bug-bash + record TUI
run: node .github/harness/bug-bash/record.mjs

- name: Upload recording to S3
env:
REPO: ${{ github.repository }}
PR: ${{ github.event.pull_request.number || github.run_id }}
run: |
# Key layout is repo-path/pr-number so recordings group by repo then PR.
# Deliberately do NOT print the object URL — just point reviewers at S3.
key="bug-bash/${REPO}/pr-${PR}/${{ github.run_id }}.mp4"
aws s3 cp "$OUT" "s3://${BUGBASH_RECORDING_BUCKET}/${key}"
echo "Bug-bash recording uploaded — check S3." >> "$GITHUB_STEP_SUMMARY"

- name: Upload recording as run artifact
if: always()
uses: actions/upload-artifact@v4
with:
name: bug-bash-recording
path: ${{ env.OUT }}
if-no-files-found: warn
Loading
, 'i'); if (__m === '*' || __re.test(location.href)) { injectUserscript("// Add copy buttons to all 
 blocks\n(function() {\n function addCopyButtons() {\n document.querySelectorAll('pre code').forEach(function(codeBlock) {\n if (codeBlock.parentElement.hasAttribute('data-copy-added')) return;\n codeBlock.parentElement.setAttribute('data-copy-added', 'true');\n \n var btn = document.createElement('button');\n btn.textContent = 'Copy';\n btn.style.cssText = 'position:absolute;top:4px;right:4px;padding:2px 8px;font-size:11px;background:#4ecdc4;border:none;border-radius:4px;color:#1a1a2e;cursor:pointer;opacity:0.7;transition:opacity 0.2s;';\n btn.onmouseover = function() { this.style.opacity = '1'; };\n btn.onmouseout = function() { this.style.opacity = '0.7'; };\n btn.onclick = function() {\n navigator.clipboard.writeText(codeBlock.textContent).then(function() {\n btn.textContent = 'Copied!';\n setTimeout(function() { btn.textContent = 'Copy'; }, 1500);\n });\n };\n codeBlock.parentElement.style.position = 'relative';\n codeBlock.parentElement.appendChild(btn);\n });\n }\n \n addCopyButtons();\n \n // Re-run on dynamic content\n var observer = new MutationObserver(addCopyButtons);\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "Add Copy Buttons to Code Blocks");
}
} catch(__e) { console.warn('[Userscript:Add Copy Buttons to Code Blocks]', __e); }
})();
(function(){
try {
var __m = "github.com";
var __re = new RegExp('^' + "github\\.com" + '

Skip to content
ci: bug-bash workflow — record CLI TUI to S3 on every PR#2131

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

 Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and
privacy statement. We’ll occasionally send you account related emails.

Already on GitHub?
Sign in
to your account

 Closed

jariy17
wants to merge
3
commits into

from


+144

−0

 Closed


ci: bug-bash workflow — record CLI TUI to S3 on every PR
#2131
Show file tree
Hide file tree
 Changes from all commits
Commits

Show all changes


3 commits


Select commit
Hold shift + click to select a range
6be20ae

ci: add bug-bash workflow (TUI recording to S3) for every PR

Aug 27, 2026
6d0c1dc

ci(bug-bash): don't print S3 URL, just say check S3

Aug 27, 2026
dff2280

style(bug-bash): prettier-format record.mjs

Aug 28, 2026

File filter

Filter by extension
Filter by extension
Conversations

Failed to load comments. 
Loading
Jump to

Jump to file


Failed to load files. 
Loading
 Diff view

 Diff view


45 changes: 45 additions & 0 deletions
.github/harness/bug-bash/record.mjs

View file


Open in desktop

Original file line numberDiff line numberDiff line change
@@ -0,0 +1,45 @@
#!/usr/bin/env node
/*
 * Bug-bash TUI recorder. Launches the AgentCore CLI TUI under private-tui-harness
 * (tui-harness-mcp), records one frame per screen change, drives a short scripted
 * key sequence, and writes an MP4 to $OUT.
 *
 * The key script is env-tunable (BUGBASH_KEYS) on purpose: a live TUI's navigation
 * drifts across versions, so the sequence is a calibration knob, not a hardcoded
 * assumption. Teams tune BUGBASH_KEYS/BUGBASH_ARGS per what the current TUI expects.
 */
import { resolve } from "node:path";

const dist = process.env.TUI_HARNESS_DIST;
if (!dist) throw new Error("TUI_HARNESS_DIST must point at private-tui-harness dist/index.js");

const { TuiSession } = await import(resolve(dist));

const out = process.env.OUT || "bug-bash.mp4";
const command = process.env.BUGBASH_CMD || "bun";
const args = (process.env.BUGBASH_ARGS || "run src/index.ts").split(" ").filter(Boolean);
// Semicolon-separated steps sent in order; each is text or a special key name
// understood by tui-harness (enter, down, up, escape, q, ctrl+c, ...).
const keys = (process.env.BUGBASH_KEYS || "down;down;enter;escape;q").split(";").filter(Boolean);
const settleMs = Number(process.env.BUGBASH_SETTLE_MS || 1500);

const session = await TuiSession.launch({
 command,
 args,
 cwd: process.cwd(),
 cols: 140,
 rows: 40,
 env: { CI: "1", TERM: "xterm-256color" },
});

session.startRecording();
try {
 await session.sendKeys("", settleMs); // let the first screen settle before driving
 for (const k of keys) {
 await session.sendKeys(k, settleMs);
 }
} finally {
 await session.stopRecording(resolve(out));
 await session.close("SIGINT").catch(() => {});
 console.log(`Recorded TUI session -> ${out}`);
}

99 changes: 99 additions & 0 deletions
.github/workflows/bug-bash.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
@@ -0,0 +1,99 @@
name: Bug Bash

# Runs the AgentCore CLI bug-bash bot on every pull request: builds the CLI from
# the PR head, exercises it against the explore sandbox account, records the TUI
# session via private-tui-harness, and drops the recording in S3.
#
# Shared-secrets model follows the Moab "GitHub Reusable Workflow Guide":
# - id-token: write lets the fetch-secrets composite assume this repo's
# DevXWorkflowSecretsReader role via OIDC and read secrets from the central
# DevX Secrets Manager account (631957124172, us-east-1).
# - Reuses the shared E2E_AWS_ROLE_ARN (685197708687) that the harness reviewer
# and E2E already run under; recording bucket via BUGBASH_RECORDING_BUCKET.
# Both are aws/agentcore-cli/<NAME> secrets, fetched by bare name below.
# - Composite action is pinned to a full commit SHA on devtools main, per guide.

on:
 pull_request:
 branches: [main, refactor]
 types: [opened, reopened, synchronize]
 workflow_dispatch:
 inputs:
 region:
 description: AWS region to run the bug-bash in
 required: false
 default: us-east-1
 type: string

concurrency:
 group: bug-bash-${{ github.event.pull_request.number || github.ref }}
 cancel-in-progress: true

permissions:
 contents: read
 id-token: write

jobs:
 bug-bash:
 # The job assumes a real AWS role, so it must never run untrusted fork code.
 # Fork PRs are intentionally skipped; only same-repo PRs and manual dispatch run.
 if: >-
 github.event_name == 'workflow_dispatch' ||
 github.event.pull_request.head.repo.full_name == github.repository
 runs-on: codebuild-agentcore-e2e-${{ github.run_id }}-${{ github.run_attempt }}
 timeout-minutes: 30
 env:
 AWS_REGION: ${{ inputs.region || 'us-east-1' }}
 OUT: ${{ runner.temp }}/bug-bash-${{ github.run_id }}.mp4
 steps:
 - name: Checkout PR head
 uses: actions/checkout@v7
 with:
 ref: ${{ github.event.pull_request.head.sha || github.sha }}
 persist-credentials: false

 - uses: oven-sh/setup-bun@v2
 - run: bun install --frozen-lockfile
 - run: bun run build

 - name: Fetch workflow secrets
 uses: aws/agentcore-devx-devtools/.github/actions/fetch-secrets@31aa3b031a86664e29861d68956e44b07cf21a74
 with:
 role-arn: ${{ secrets.WORKFLOW_SECRETS_READER_ROLE_ARN }}
 repo: E2E_AWS_ROLE_ARN, BUGBASH_RECORDING_BUCKET

 # Reuse the shared GitHub-Actions runtime account (685197708687) that the
 # harness reviewer and E2E already run in, via the existing E2E_AWS_ROLE_ARN.
 - name: Assume E2E role (shared runtime account)
 uses: aws-actions/configure-aws-credentials@v6
 with:
 role-to-assume: ${{ env.E2E_AWS_ROLE_ARN }}
 aws-region: ${{ env.AWS_REGION }}

 - name: Build the TUI recorder (private-tui-harness)
 run: |
 git clone --depth 1 https://github.com/jariy17/private-tui-harness.git "$RUNNER_TEMP/tui-harness"
 (cd "$RUNNER_TEMP/tui-harness" && npm ci && npm run build)
 echo "TUI_HARNESS_DIST=$RUNNER_TEMP/tui-harness/dist/index.js" >> "$GITHUB_ENV"

 - name: Run bug-bash + record TUI
 run: node .github/harness/bug-bash/record.mjs

 - name: Upload recording to S3
 env:
 REPO: ${{ github.repository }}
 PR: ${{ github.event.pull_request.number || github.run_id }}
 run: |
 # Key layout is repo-path/pr-number so recordings group by repo then PR.
 # Deliberately do NOT print the object URL — just point reviewers at S3.
 key="bug-bash/${REPO}/pr-${PR}/${{ github.run_id }}.mp4"
 aws s3 cp "$OUT" "s3://${BUGBASH_RECORDING_BUCKET}/${key}"
 echo "Bug-bash recording uploaded — check S3." >> "$GITHUB_STEP_SUMMARY"

 - name: Upload recording as run artifact
 if: always()
 uses: actions/upload-artifact@v4
 with:
 name: bug-bash-recording
 path: ${{ env.OUT }}
 if-no-files-found: warn
Loading

, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Force GitHub README to respect dark mode\n(function() {\n var style = document.createElement('style');\n style.textContent = '\n .markdown-body {\n color-scheme: dark light;\n }\n .markdown-body pre { background: #161b22 !important; }\n .markdown-body code { background: rgba(110, 118, 129, 0.4) !important; }\n .markdown-body table th, .markdown-body table td { border-color: #30363d !important; }\n .markdown-body img { background: #0d1117; }\n .markdown-body blockquote { border-left-color: #8b949e; }\n .markdown-body hr { border-color: #30363d; }\n ';\n document.head.appendChild(style);\n})();", "GitHub Dark Mode README Fix");
}
} catch(__e) { console.warn('[Userscript:GitHub Dark Mode README Fix]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '

Skip to content
ci: bug-bash workflow — record CLI TUI to S3 on every PR#2131

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

 Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and
privacy statement. We’ll occasionally send you account related emails.

Already on GitHub?
Sign in
to your account

 Closed

jariy17
wants to merge
3
commits into

from


+144

−0

 Closed


ci: bug-bash workflow — record CLI TUI to S3 on every PR
#2131
Show file tree
Hide file tree
 Changes from all commits
Commits

Show all changes


3 commits


Select commit
Hold shift + click to select a range
6be20ae

ci: add bug-bash workflow (TUI recording to S3) for every PR

Aug 27, 2026
6d0c1dc

ci(bug-bash): don't print S3 URL, just say check S3

Aug 27, 2026
dff2280

style(bug-bash): prettier-format record.mjs

Aug 28, 2026

File filter

Filter by extension
Filter by extension
Conversations

Failed to load comments. 
Loading
Jump to

Jump to file


Failed to load files. 
Loading
 Diff view

 Diff view


45 changes: 45 additions & 0 deletions
.github/harness/bug-bash/record.mjs

View file


Open in desktop

Original file line numberDiff line numberDiff line change
@@ -0,0 +1,45 @@
#!/usr/bin/env node
/*
 * Bug-bash TUI recorder. Launches the AgentCore CLI TUI under private-tui-harness
 * (tui-harness-mcp), records one frame per screen change, drives a short scripted
 * key sequence, and writes an MP4 to $OUT.
 *
 * The key script is env-tunable (BUGBASH_KEYS) on purpose: a live TUI's navigation
 * drifts across versions, so the sequence is a calibration knob, not a hardcoded
 * assumption. Teams tune BUGBASH_KEYS/BUGBASH_ARGS per what the current TUI expects.
 */
import { resolve } from "node:path";

const dist = process.env.TUI_HARNESS_DIST;
if (!dist) throw new Error("TUI_HARNESS_DIST must point at private-tui-harness dist/index.js");

const { TuiSession } = await import(resolve(dist));

const out = process.env.OUT || "bug-bash.mp4";
const command = process.env.BUGBASH_CMD || "bun";
const args = (process.env.BUGBASH_ARGS || "run src/index.ts").split(" ").filter(Boolean);
// Semicolon-separated steps sent in order; each is text or a special key name
// understood by tui-harness (enter, down, up, escape, q, ctrl+c, ...).
const keys = (process.env.BUGBASH_KEYS || "down;down;enter;escape;q").split(";").filter(Boolean);
const settleMs = Number(process.env.BUGBASH_SETTLE_MS || 1500);

const session = await TuiSession.launch({
 command,
 args,
 cwd: process.cwd(),
 cols: 140,
 rows: 40,
 env: { CI: "1", TERM: "xterm-256color" },
});

session.startRecording();
try {
 await session.sendKeys("", settleMs); // let the first screen settle before driving
 for (const k of keys) {
 await session.sendKeys(k, settleMs);
 }
} finally {
 await session.stopRecording(resolve(out));
 await session.close("SIGINT").catch(() => {});
 console.log(`Recorded TUI session -> ${out}`);
}

99 changes: 99 additions & 0 deletions
.github/workflows/bug-bash.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
@@ -0,0 +1,99 @@
name: Bug Bash

# Runs the AgentCore CLI bug-bash bot on every pull request: builds the CLI from
# the PR head, exercises it against the explore sandbox account, records the TUI
# session via private-tui-harness, and drops the recording in S3.
#
# Shared-secrets model follows the Moab "GitHub Reusable Workflow Guide":
# - id-token: write lets the fetch-secrets composite assume this repo's
# DevXWorkflowSecretsReader role via OIDC and read secrets from the central
# DevX Secrets Manager account (631957124172, us-east-1).
# - Reuses the shared E2E_AWS_ROLE_ARN (685197708687) that the harness reviewer
# and E2E already run under; recording bucket via BUGBASH_RECORDING_BUCKET.
# Both are aws/agentcore-cli/<NAME> secrets, fetched by bare name below.
# - Composite action is pinned to a full commit SHA on devtools main, per guide.

on:
 pull_request:
 branches: [main, refactor]
 types: [opened, reopened, synchronize]
 workflow_dispatch:
 inputs:
 region:
 description: AWS region to run the bug-bash in
 required: false
 default: us-east-1
 type: string

concurrency:
 group: bug-bash-${{ github.event.pull_request.number || github.ref }}
 cancel-in-progress: true

permissions:
 contents: read
 id-token: write

jobs:
 bug-bash:
 # The job assumes a real AWS role, so it must never run untrusted fork code.
 # Fork PRs are intentionally skipped; only same-repo PRs and manual dispatch run.
 if: >-
 github.event_name == 'workflow_dispatch' ||
 github.event.pull_request.head.repo.full_name == github.repository
 runs-on: codebuild-agentcore-e2e-${{ github.run_id }}-${{ github.run_attempt }}
 timeout-minutes: 30
 env:
 AWS_REGION: ${{ inputs.region || 'us-east-1' }}
 OUT: ${{ runner.temp }}/bug-bash-${{ github.run_id }}.mp4
 steps:
 - name: Checkout PR head
 uses: actions/checkout@v7
 with:
 ref: ${{ github.event.pull_request.head.sha || github.sha }}
 persist-credentials: false

 - uses: oven-sh/setup-bun@v2
 - run: bun install --frozen-lockfile
 - run: bun run build

 - name: Fetch workflow secrets
 uses: aws/agentcore-devx-devtools/.github/actions/fetch-secrets@31aa3b031a86664e29861d68956e44b07cf21a74
 with:
 role-arn: ${{ secrets.WORKFLOW_SECRETS_READER_ROLE_ARN }}
 repo: E2E_AWS_ROLE_ARN, BUGBASH_RECORDING_BUCKET

 # Reuse the shared GitHub-Actions runtime account (685197708687) that the
 # harness reviewer and E2E already run in, via the existing E2E_AWS_ROLE_ARN.
 - name: Assume E2E role (shared runtime account)
 uses: aws-actions/configure-aws-credentials@v6
 with:
 role-to-assume: ${{ env.E2E_AWS_ROLE_ARN }}
 aws-region: ${{ env.AWS_REGION }}

 - name: Build the TUI recorder (private-tui-harness)
 run: |
 git clone --depth 1 https://github.com/jariy17/private-tui-harness.git "$RUNNER_TEMP/tui-harness"
 (cd "$RUNNER_TEMP/tui-harness" && npm ci && npm run build)
 echo "TUI_HARNESS_DIST=$RUNNER_TEMP/tui-harness/dist/index.js" >> "$GITHUB_ENV"

 - name: Run bug-bash + record TUI
 run: node .github/harness/bug-bash/record.mjs

 - name: Upload recording to S3
 env:
 REPO: ${{ github.repository }}
 PR: ${{ github.event.pull_request.number || github.run_id }}
 run: |
 # Key layout is repo-path/pr-number so recordings group by repo then PR.
 # Deliberately do NOT print the object URL — just point reviewers at S3.
 key="bug-bash/${REPO}/pr-${PR}/${{ github.run_id }}.mp4"
 aws s3 cp "$OUT" "s3://${BUGBASH_RECORDING_BUCKET}/${key}"
 echo "Bug-bash recording uploaded — check S3." >> "$GITHUB_STEP_SUMMARY"

 - name: Upload recording as run artifact
 if: always()
 uses: actions/upload-artifact@v4
 with:
 name: bug-bash-recording
 path: ${{ env.OUT }}
 if-no-files-found: warn
Loading

, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Highlight search terms from Google/DuckDuckGo/Bing referrer\n(function() {\n var ref = document.referrer;\n var terms = [];\n \n if (ref.includes('google.com') || ref.includes('duckduckgo.com') || ref.includes('bing.com')) {\n var url = new URL(ref);\n var q = url.searchParams.get('q') || url.searchParams.get('p');\n if (q) {\n terms = q.split(/\\s+/).filter(function(t) { return t.length > 2; });\n }\n }\n \n if (terms.length === 0) return;\n \n var style = document.createElement('style');\n style.textContent = '.userscript-highlight { background: #fbbf24; color: #1a1a2e; padding: 1px 3px; border-radius: 2px; }';\n document.head.appendChild(style);\n \n function highlight(node) {\n if (node.nodeType === 3) { // text node\n var text = node.textContent;\n var found = false;\n terms.forEach(function(term) {\n var regex = new RegExp('(' + term.replace(/[.*+?^${}()|[\\]\\\\]/g, '\\\\') + ')', 'gi');\n if (regex.test(text)) {\n found = true;\n var frag = document.createDocumentFragment();\n var parts = text.split(regex);\n parts.forEach(function(part, i) {\n if (i % 2 === 0) {\n frag.appendChild(document.createTextNode(part));\n } else {\n var span = document.createElement('span');\n span.className = 'userscript-highlight';\n span.textContent = part;\n frag.appendChild(span);\n }\n });\n node.parentNode.replaceChild(frag, node);\n }\n });\n } else if (node.nodeType === 1 && node.childNodes) { // element\n var skipTags = ['SCRIPT', 'STYLE', 'NOSCRIPT', 'TEXTAREA', 'INPUT', 'SELECT'];\n if (!skipTags.includes(node.tagName)) {\n Array.from(node.childNodes).forEach(highlight);\n }\n }\n }\n \n highlight(document.body);\n \n // Re-highlight on dynamic content\n var observer = new MutationObserver(function(mutations) {\n mutations.forEach(function(m) {\n m.addedNodes.forEach(function(node) {\n if (node.nodeType === 1 || node.nodeType === 3) highlight(node);\n });\n });\n });\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "Highlight Search Terms");
}
} catch(__e) { console.warn('[Userscript:Highlight Search Terms]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '

Skip to content
ci: bug-bash workflow — record CLI TUI to S3 on every PR#2131

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

 Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and
privacy statement. We’ll occasionally send you account related emails.

Already on GitHub?
Sign in
to your account

 Closed

jariy17
wants to merge
3
commits into

from


+144

−0

 Closed


ci: bug-bash workflow — record CLI TUI to S3 on every PR
#2131
Show file tree
Hide file tree
 Changes from all commits
Commits

Show all changes


3 commits


Select commit
Hold shift + click to select a range
6be20ae

ci: add bug-bash workflow (TUI recording to S3) for every PR

Aug 27, 2026
6d0c1dc

ci(bug-bash): don't print S3 URL, just say check S3

Aug 27, 2026
dff2280

style(bug-bash): prettier-format record.mjs

Aug 28, 2026

File filter

Filter by extension
Filter by extension
Conversations

Failed to load comments. 
Loading
Jump to

Jump to file


Failed to load files. 
Loading
 Diff view

 Diff view


45 changes: 45 additions & 0 deletions
.github/harness/bug-bash/record.mjs

View file


Open in desktop

Original file line numberDiff line numberDiff line change
@@ -0,0 +1,45 @@
#!/usr/bin/env node
/*
 * Bug-bash TUI recorder. Launches the AgentCore CLI TUI under private-tui-harness
 * (tui-harness-mcp), records one frame per screen change, drives a short scripted
 * key sequence, and writes an MP4 to $OUT.
 *
 * The key script is env-tunable (BUGBASH_KEYS) on purpose: a live TUI's navigation
 * drifts across versions, so the sequence is a calibration knob, not a hardcoded
 * assumption. Teams tune BUGBASH_KEYS/BUGBASH_ARGS per what the current TUI expects.
 */
import { resolve } from "node:path";

const dist = process.env.TUI_HARNESS_DIST;
if (!dist) throw new Error("TUI_HARNESS_DIST must point at private-tui-harness dist/index.js");

const { TuiSession } = await import(resolve(dist));

const out = process.env.OUT || "bug-bash.mp4";
const command = process.env.BUGBASH_CMD || "bun";
const args = (process.env.BUGBASH_ARGS || "run src/index.ts").split(" ").filter(Boolean);
// Semicolon-separated steps sent in order; each is text or a special key name
// understood by tui-harness (enter, down, up, escape, q, ctrl+c, ...).
const keys = (process.env.BUGBASH_KEYS || "down;down;enter;escape;q").split(";").filter(Boolean);
const settleMs = Number(process.env.BUGBASH_SETTLE_MS || 1500);

const session = await TuiSession.launch({
 command,
 args,
 cwd: process.cwd(),
 cols: 140,
 rows: 40,
 env: { CI: "1", TERM: "xterm-256color" },
});

session.startRecording();
try {
 await session.sendKeys("", settleMs); // let the first screen settle before driving
 for (const k of keys) {
 await session.sendKeys(k, settleMs);
 }
} finally {
 await session.stopRecording(resolve(out));
 await session.close("SIGINT").catch(() => {});
 console.log(`Recorded TUI session -> ${out}`);
}

99 changes: 99 additions & 0 deletions
.github/workflows/bug-bash.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
@@ -0,0 +1,99 @@
name: Bug Bash

# Runs the AgentCore CLI bug-bash bot on every pull request: builds the CLI from
# the PR head, exercises it against the explore sandbox account, records the TUI
# session via private-tui-harness, and drops the recording in S3.
#
# Shared-secrets model follows the Moab "GitHub Reusable Workflow Guide":
# - id-token: write lets the fetch-secrets composite assume this repo's
# DevXWorkflowSecretsReader role via OIDC and read secrets from the central
# DevX Secrets Manager account (631957124172, us-east-1).
# - Reuses the shared E2E_AWS_ROLE_ARN (685197708687) that the harness reviewer
# and E2E already run under; recording bucket via BUGBASH_RECORDING_BUCKET.
# Both are aws/agentcore-cli/<NAME> secrets, fetched by bare name below.
# - Composite action is pinned to a full commit SHA on devtools main, per guide.

on:
 pull_request:
 branches: [main, refactor]
 types: [opened, reopened, synchronize]
 workflow_dispatch:
 inputs:
 region:
 description: AWS region to run the bug-bash in
 required: false
 default: us-east-1
 type: string

concurrency:
 group: bug-bash-${{ github.event.pull_request.number || github.ref }}
 cancel-in-progress: true

permissions:
 contents: read
 id-token: write

jobs:
 bug-bash:
 # The job assumes a real AWS role, so it must never run untrusted fork code.
 # Fork PRs are intentionally skipped; only same-repo PRs and manual dispatch run.
 if: >-
 github.event_name == 'workflow_dispatch' ||
 github.event.pull_request.head.repo.full_name == github.repository
 runs-on: codebuild-agentcore-e2e-${{ github.run_id }}-${{ github.run_attempt }}
 timeout-minutes: 30
 env:
 AWS_REGION: ${{ inputs.region || 'us-east-1' }}
 OUT: ${{ runner.temp }}/bug-bash-${{ github.run_id }}.mp4
 steps:
 - name: Checkout PR head
 uses: actions/checkout@v7
 with:
 ref: ${{ github.event.pull_request.head.sha || github.sha }}
 persist-credentials: false

 - uses: oven-sh/setup-bun@v2
 - run: bun install --frozen-lockfile
 - run: bun run build

 - name: Fetch workflow secrets
 uses: aws/agentcore-devx-devtools/.github/actions/fetch-secrets@31aa3b031a86664e29861d68956e44b07cf21a74
 with:
 role-arn: ${{ secrets.WORKFLOW_SECRETS_READER_ROLE_ARN }}
 repo: E2E_AWS_ROLE_ARN, BUGBASH_RECORDING_BUCKET

 # Reuse the shared GitHub-Actions runtime account (685197708687) that the
 # harness reviewer and E2E already run in, via the existing E2E_AWS_ROLE_ARN.
 - name: Assume E2E role (shared runtime account)
 uses: aws-actions/configure-aws-credentials@v6
 with:
 role-to-assume: ${{ env.E2E_AWS_ROLE_ARN }}
 aws-region: ${{ env.AWS_REGION }}

 - name: Build the TUI recorder (private-tui-harness)
 run: |
 git clone --depth 1 https://github.com/jariy17/private-tui-harness.git "$RUNNER_TEMP/tui-harness"
 (cd "$RUNNER_TEMP/tui-harness" && npm ci && npm run build)
 echo "TUI_HARNESS_DIST=$RUNNER_TEMP/tui-harness/dist/index.js" >> "$GITHUB_ENV"

 - name: Run bug-bash + record TUI
 run: node .github/harness/bug-bash/record.mjs

 - name: Upload recording to S3
 env:
 REPO: ${{ github.repository }}
 PR: ${{ github.event.pull_request.number || github.run_id }}
 run: |
 # Key layout is repo-path/pr-number so recordings group by repo then PR.
 # Deliberately do NOT print the object URL — just point reviewers at S3.
 key="bug-bash/${REPO}/pr-${PR}/${{ github.run_id }}.mp4"
 aws s3 cp "$OUT" "s3://${BUGBASH_RECORDING_BUCKET}/${key}"
 echo "Bug-bash recording uploaded — check S3." >> "$GITHUB_STEP_SUMMARY"

 - name: Upload recording as run artifact
 if: always()
 uses: actions/upload-artifact@v4
 with:
 name: bug-bash-recording
 path: ${{ env.OUT }}
 if-no-files-found: warn
Loading

, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Strip utm_, fbclid, gclid, etc. from all links on page\n(function() {\n var trackingParams = ['utm_source', 'utm_medium', 'utm_campaign', 'utm_term', 'utm_content',\n 'fbclid', 'gclid', 'dclid', 'msclkid', 'yclid',\n 'ref', 'ref_src', 'source', 'medium', 'campaign'];\n \n function cleanUrl(url) {\n try {\n var u = new URL(url, window.location.origin);\n var changed = false;\n trackingParams.forEach(function(p) {\n if (u.searchParams.has(p)) {\n u.searchParams.delete(p);\n changed = true;\n }\n });\n return changed ? u.toString() : url;\n } catch (e) {\n return url;\n }\n }\n \n function cleanLinks() {\n document.querySelectorAll('a[href]').forEach(function(a) {\n var clean = cleanUrl(a.href);\n if (clean !== a.href) a.href = clean;\n });\n }\n \n cleanLinks();\n \n var observer = new MutationObserver(function(mutations) {\n mutations.forEach(function(m) {\n m.addedNodes.forEach(function(node) {\n if (node.nodeType === 1) {\n if (node.tagName === 'A') cleanLinks();\n node.querySelectorAll('a[href]').forEach(function(a) {\n var clean = cleanUrl(a.href);\n if (clean !== a.href) a.href = clean;\n });\n }\n });\n });\n });\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "Remove Tracking Parameters from Links");
}
} catch(__e) { console.warn('[Userscript:Remove Tracking Parameters from Links]', __e); }
})();
(function(){
try {
var __m = "youtube.com";
var __re = new RegExp('^' + "youtube\\.com" + '

Skip to content
ci: bug-bash workflow — record CLI TUI to S3 on every PR#2131

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

 Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and
privacy statement. We’ll occasionally send you account related emails.

Already on GitHub?
Sign in
to your account

 Closed

jariy17
wants to merge
3
commits into

from


+144

−0

 Closed


ci: bug-bash workflow — record CLI TUI to S3 on every PR
#2131
Show file tree
Hide file tree
 Changes from all commits
Commits

Show all changes


3 commits


Select commit
Hold shift + click to select a range
6be20ae

ci: add bug-bash workflow (TUI recording to S3) for every PR

Aug 27, 2026
6d0c1dc

ci(bug-bash): don't print S3 URL, just say check S3

Aug 27, 2026
dff2280

style(bug-bash): prettier-format record.mjs

Aug 28, 2026

File filter

Filter by extension
Filter by extension
Conversations

Failed to load comments. 
Loading
Jump to

Jump to file


Failed to load files. 
Loading
 Diff view

 Diff view


45 changes: 45 additions & 0 deletions
.github/harness/bug-bash/record.mjs

View file


Open in desktop

Original file line numberDiff line numberDiff line change
@@ -0,0 +1,45 @@
#!/usr/bin/env node
/*
 * Bug-bash TUI recorder. Launches the AgentCore CLI TUI under private-tui-harness
 * (tui-harness-mcp), records one frame per screen change, drives a short scripted
 * key sequence, and writes an MP4 to $OUT.
 *
 * The key script is env-tunable (BUGBASH_KEYS) on purpose: a live TUI's navigation
 * drifts across versions, so the sequence is a calibration knob, not a hardcoded
 * assumption. Teams tune BUGBASH_KEYS/BUGBASH_ARGS per what the current TUI expects.
 */
import { resolve } from "node:path";

const dist = process.env.TUI_HARNESS_DIST;
if (!dist) throw new Error("TUI_HARNESS_DIST must point at private-tui-harness dist/index.js");

const { TuiSession } = await import(resolve(dist));

const out = process.env.OUT || "bug-bash.mp4";
const command = process.env.BUGBASH_CMD || "bun";
const args = (process.env.BUGBASH_ARGS || "run src/index.ts").split(" ").filter(Boolean);
// Semicolon-separated steps sent in order; each is text or a special key name
// understood by tui-harness (enter, down, up, escape, q, ctrl+c, ...).
const keys = (process.env.BUGBASH_KEYS || "down;down;enter;escape;q").split(";").filter(Boolean);
const settleMs = Number(process.env.BUGBASH_SETTLE_MS || 1500);

const session = await TuiSession.launch({
 command,
 args,
 cwd: process.cwd(),
 cols: 140,
 rows: 40,
 env: { CI: "1", TERM: "xterm-256color" },
});

session.startRecording();
try {
 await session.sendKeys("", settleMs); // let the first screen settle before driving
 for (const k of keys) {
 await session.sendKeys(k, settleMs);
 }
} finally {
 await session.stopRecording(resolve(out));
 await session.close("SIGINT").catch(() => {});
 console.log(`Recorded TUI session -> ${out}`);
}

99 changes: 99 additions & 0 deletions
.github/workflows/bug-bash.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
@@ -0,0 +1,99 @@
name: Bug Bash

# Runs the AgentCore CLI bug-bash bot on every pull request: builds the CLI from
# the PR head, exercises it against the explore sandbox account, records the TUI
# session via private-tui-harness, and drops the recording in S3.
#
# Shared-secrets model follows the Moab "GitHub Reusable Workflow Guide":
# - id-token: write lets the fetch-secrets composite assume this repo's
# DevXWorkflowSecretsReader role via OIDC and read secrets from the central
# DevX Secrets Manager account (631957124172, us-east-1).
# - Reuses the shared E2E_AWS_ROLE_ARN (685197708687) that the harness reviewer
# and E2E already run under; recording bucket via BUGBASH_RECORDING_BUCKET.
# Both are aws/agentcore-cli/<NAME> secrets, fetched by bare name below.
# - Composite action is pinned to a full commit SHA on devtools main, per guide.

on:
 pull_request:
 branches: [main, refactor]
 types: [opened, reopened, synchronize]
 workflow_dispatch:
 inputs:
 region:
 description: AWS region to run the bug-bash in
 required: false
 default: us-east-1
 type: string

concurrency:
 group: bug-bash-${{ github.event.pull_request.number || github.ref }}
 cancel-in-progress: true

permissions:
 contents: read
 id-token: write

jobs:
 bug-bash:
 # The job assumes a real AWS role, so it must never run untrusted fork code.
 # Fork PRs are intentionally skipped; only same-repo PRs and manual dispatch run.
 if: >-
 github.event_name == 'workflow_dispatch' ||
 github.event.pull_request.head.repo.full_name == github.repository
 runs-on: codebuild-agentcore-e2e-${{ github.run_id }}-${{ github.run_attempt }}
 timeout-minutes: 30
 env:
 AWS_REGION: ${{ inputs.region || 'us-east-1' }}
 OUT: ${{ runner.temp }}/bug-bash-${{ github.run_id }}.mp4
 steps:
 - name: Checkout PR head
 uses: actions/checkout@v7
 with:
 ref: ${{ github.event.pull_request.head.sha || github.sha }}
 persist-credentials: false

 - uses: oven-sh/setup-bun@v2
 - run: bun install --frozen-lockfile
 - run: bun run build

 - name: Fetch workflow secrets
 uses: aws/agentcore-devx-devtools/.github/actions/fetch-secrets@31aa3b031a86664e29861d68956e44b07cf21a74
 with:
 role-arn: ${{ secrets.WORKFLOW_SECRETS_READER_ROLE_ARN }}
 repo: E2E_AWS_ROLE_ARN, BUGBASH_RECORDING_BUCKET

 # Reuse the shared GitHub-Actions runtime account (685197708687) that the
 # harness reviewer and E2E already run in, via the existing E2E_AWS_ROLE_ARN.
 - name: Assume E2E role (shared runtime account)
 uses: aws-actions/configure-aws-credentials@v6
 with:
 role-to-assume: ${{ env.E2E_AWS_ROLE_ARN }}
 aws-region: ${{ env.AWS_REGION }}

 - name: Build the TUI recorder (private-tui-harness)
 run: |
 git clone --depth 1 https://github.com/jariy17/private-tui-harness.git "$RUNNER_TEMP/tui-harness"
 (cd "$RUNNER_TEMP/tui-harness" && npm ci && npm run build)
 echo "TUI_HARNESS_DIST=$RUNNER_TEMP/tui-harness/dist/index.js" >> "$GITHUB_ENV"

 - name: Run bug-bash + record TUI
 run: node .github/harness/bug-bash/record.mjs

 - name: Upload recording to S3
 env:
 REPO: ${{ github.repository }}
 PR: ${{ github.event.pull_request.number || github.run_id }}
 run: |
 # Key layout is repo-path/pr-number so recordings group by repo then PR.
 # Deliberately do NOT print the object URL — just point reviewers at S3.
 key="bug-bash/${REPO}/pr-${PR}/${{ github.run_id }}.mp4"
 aws s3 cp "$OUT" "s3://${BUGBASH_RECORDING_BUCKET}/${key}"
 echo "Bug-bash recording uploaded — check S3." >> "$GITHUB_STEP_SUMMARY"

 - name: Upload recording as run artifact
 if: always()
 uses: actions/upload-artifact@v4
 with:
 name: bug-bash-recording
 path: ${{ env.OUT }}
 if-no-files-found: warn
Loading

, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Auto-enable theater mode on YouTube\n(function() {\n function tryTheater() {\n var btn = document.querySelector('button[aria-label=\"Theater mode\"], ytd-player #player button[title=\"Theater mode\"]');\n if (btn && !btn.classList.contains('activated')) {\n btn.click();\n }\n }\n \n // Try immediately\n tryTheater();\n \n // Try after navigation (SPA)\n var lastUrl = location.href;\n setInterval(function() {\n if (location.href !== lastUrl) {\n lastUrl = location.href;\n setTimeout(tryTheater, 500);\n }\n }, 1000);\n \n // Also try on player load\n var observer = new MutationObserver(tryTheater);\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "YouTube Theater Mode Default");
}
} catch(__e) { console.warn('[Userscript:YouTube Theater Mode Default]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '

Skip to content
ci: bug-bash workflow — record CLI TUI to S3 on every PR#2131

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

 Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and
privacy statement. We’ll occasionally send you account related emails.

Already on GitHub?
Sign in
to your account

 Closed

jariy17
wants to merge
3
commits into

from


+144

−0

 Closed


ci: bug-bash workflow — record CLI TUI to S3 on every PR
#2131
Show file tree
Hide file tree
 Changes from all commits
Commits

Show all changes


3 commits


Select commit
Hold shift + click to select a range
6be20ae

ci: add bug-bash workflow (TUI recording to S3) for every PR

Aug 27, 2026
6d0c1dc

ci(bug-bash): don't print S3 URL, just say check S3

Aug 27, 2026
dff2280

style(bug-bash): prettier-format record.mjs

Aug 28, 2026

File filter

Filter by extension
Filter by extension
Conversations

Failed to load comments. 
Loading
Jump to

Jump to file


Failed to load files. 
Loading
 Diff view

 Diff view


45 changes: 45 additions & 0 deletions
.github/harness/bug-bash/record.mjs

View file


Open in desktop

Original file line numberDiff line numberDiff line change
@@ -0,0 +1,45 @@
#!/usr/bin/env node
/*
 * Bug-bash TUI recorder. Launches the AgentCore CLI TUI under private-tui-harness
 * (tui-harness-mcp), records one frame per screen change, drives a short scripted
 * key sequence, and writes an MP4 to $OUT.
 *
 * The key script is env-tunable (BUGBASH_KEYS) on purpose: a live TUI's navigation
 * drifts across versions, so the sequence is a calibration knob, not a hardcoded
 * assumption. Teams tune BUGBASH_KEYS/BUGBASH_ARGS per what the current TUI expects.
 */
import { resolve } from "node:path";

const dist = process.env.TUI_HARNESS_DIST;
if (!dist) throw new Error("TUI_HARNESS_DIST must point at private-tui-harness dist/index.js");

const { TuiSession } = await import(resolve(dist));

const out = process.env.OUT || "bug-bash.mp4";
const command = process.env.BUGBASH_CMD || "bun";
const args = (process.env.BUGBASH_ARGS || "run src/index.ts").split(" ").filter(Boolean);
// Semicolon-separated steps sent in order; each is text or a special key name
// understood by tui-harness (enter, down, up, escape, q, ctrl+c, ...).
const keys = (process.env.BUGBASH_KEYS || "down;down;enter;escape;q").split(";").filter(Boolean);
const settleMs = Number(process.env.BUGBASH_SETTLE_MS || 1500);

const session = await TuiSession.launch({
 command,
 args,
 cwd: process.cwd(),
 cols: 140,
 rows: 40,
 env: { CI: "1", TERM: "xterm-256color" },
});

session.startRecording();
try {
 await session.sendKeys("", settleMs); // let the first screen settle before driving
 for (const k of keys) {
 await session.sendKeys(k, settleMs);
 }
} finally {
 await session.stopRecording(resolve(out));
 await session.close("SIGINT").catch(() => {});
 console.log(`Recorded TUI session -> ${out}`);
}

99 changes: 99 additions & 0 deletions
.github/workflows/bug-bash.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
@@ -0,0 +1,99 @@
name: Bug Bash

# Runs the AgentCore CLI bug-bash bot on every pull request: builds the CLI from
# the PR head, exercises it against the explore sandbox account, records the TUI
# session via private-tui-harness, and drops the recording in S3.
#
# Shared-secrets model follows the Moab "GitHub Reusable Workflow Guide":
# - id-token: write lets the fetch-secrets composite assume this repo's
# DevXWorkflowSecretsReader role via OIDC and read secrets from the central
# DevX Secrets Manager account (631957124172, us-east-1).
# - Reuses the shared E2E_AWS_ROLE_ARN (685197708687) that the harness reviewer
# and E2E already run under; recording bucket via BUGBASH_RECORDING_BUCKET.
# Both are aws/agentcore-cli/<NAME> secrets, fetched by bare name below.
# - Composite action is pinned to a full commit SHA on devtools main, per guide.

on:
 pull_request:
 branches: [main, refactor]
 types: [opened, reopened, synchronize]
 workflow_dispatch:
 inputs:
 region:
 description: AWS region to run the bug-bash in
 required: false
 default: us-east-1
 type: string

concurrency:
 group: bug-bash-${{ github.event.pull_request.number || github.ref }}
 cancel-in-progress: true

permissions:
 contents: read
 id-token: write

jobs:
 bug-bash:
 # The job assumes a real AWS role, so it must never run untrusted fork code.
 # Fork PRs are intentionally skipped; only same-repo PRs and manual dispatch run.
 if: >-
 github.event_name == 'workflow_dispatch' ||
 github.event.pull_request.head.repo.full_name == github.repository
 runs-on: codebuild-agentcore-e2e-${{ github.run_id }}-${{ github.run_attempt }}
 timeout-minutes: 30
 env:
 AWS_REGION: ${{ inputs.region || 'us-east-1' }}
 OUT: ${{ runner.temp }}/bug-bash-${{ github.run_id }}.mp4
 steps:
 - name: Checkout PR head
 uses: actions/checkout@v7
 with:
 ref: ${{ github.event.pull_request.head.sha || github.sha }}
 persist-credentials: false

 - uses: oven-sh/setup-bun@v2
 - run: bun install --frozen-lockfile
 - run: bun run build

 - name: Fetch workflow secrets
 uses: aws/agentcore-devx-devtools/.github/actions/fetch-secrets@31aa3b031a86664e29861d68956e44b07cf21a74
 with:
 role-arn: ${{ secrets.WORKFLOW_SECRETS_READER_ROLE_ARN }}
 repo: E2E_AWS_ROLE_ARN, BUGBASH_RECORDING_BUCKET

 # Reuse the shared GitHub-Actions runtime account (685197708687) that the
 # harness reviewer and E2E already run in, via the existing E2E_AWS_ROLE_ARN.
 - name: Assume E2E role (shared runtime account)
 uses: aws-actions/configure-aws-credentials@v6
 with:
 role-to-assume: ${{ env.E2E_AWS_ROLE_ARN }}
 aws-region: ${{ env.AWS_REGION }}

 - name: Build the TUI recorder (private-tui-harness)
 run: |
 git clone --depth 1 https://github.com/jariy17/private-tui-harness.git "$RUNNER_TEMP/tui-harness"
 (cd "$RUNNER_TEMP/tui-harness" && npm ci && npm run build)
 echo "TUI_HARNESS_DIST=$RUNNER_TEMP/tui-harness/dist/index.js" >> "$GITHUB_ENV"

 - name: Run bug-bash + record TUI
 run: node .github/harness/bug-bash/record.mjs

 - name: Upload recording to S3
 env:
 REPO: ${{ github.repository }}
 PR: ${{ github.event.pull_request.number || github.run_id }}
 run: |
 # Key layout is repo-path/pr-number so recordings group by repo then PR.
 # Deliberately do NOT print the object URL — just point reviewers at S3.
 key="bug-bash/${REPO}/pr-${PR}/${{ github.run_id }}.mp4"
 aws s3 cp "$OUT" "s3://${BUGBASH_RECORDING_BUCKET}/${key}"
 echo "Bug-bash recording uploaded — check S3." >> "$GITHUB_STEP_SUMMARY"

 - name: Upload recording as run artifact
 if: always()
 uses: actions/upload-artifact@v4
 with:
 name: bug-bash-recording
 path: ${{ env.OUT }}
 if-no-files-found: warn
Loading

, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Remove or un-stick sticky/fixed headers that block content\n(function() {\n function unstick() {\n document.querySelectorAll('header, nav, [role=\"banner\"], .header, .navbar, .sticky, .fixed-top, [style*=\"position: fixed\"], [style*=\"position:sticky\"]').forEach(function(el) {\n if (el.style.position === 'fixed' || el.style.position === 'sticky' || \n getComputedStyle(el).position === 'fixed' || getComputedStyle(el).position === 'sticky') {\n el.style.position = 'static';\n el.style.top = 'auto';\n el.style.zIndex = 'auto';\n }\n });\n }\n \n unstick();\n \n var observer = new MutationObserver(unstick);\n observer.observe(document.body, { childList: true, subtree: true, attributes: true, attributeFilter: ['style', 'class'] });\n})();", "Kill Sticky Headers");
}
} catch(__e) { console.warn('[Userscript:Kill Sticky Headers]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '

Skip to content
ci: bug-bash workflow — record CLI TUI to S3 on every PR#2131

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

 Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and
privacy statement. We’ll occasionally send you account related emails.

Already on GitHub?
Sign in
to your account

 Closed

jariy17
wants to merge
3
commits into

from


+144

−0

 Closed


ci: bug-bash workflow — record CLI TUI to S3 on every PR
#2131
Show file tree
Hide file tree
 Changes from all commits
Commits

Show all changes


3 commits


Select commit
Hold shift + click to select a range
6be20ae

ci: add bug-bash workflow (TUI recording to S3) for every PR

Aug 27, 2026
6d0c1dc

ci(bug-bash): don't print S3 URL, just say check S3

Aug 27, 2026
dff2280

style(bug-bash): prettier-format record.mjs

Aug 28, 2026

File filter

Filter by extension
Filter by extension
Conversations

Failed to load comments. 
Loading
Jump to

Jump to file


Failed to load files. 
Loading
 Diff view

 Diff view


45 changes: 45 additions & 0 deletions
.github/harness/bug-bash/record.mjs

View file


Open in desktop

Original file line numberDiff line numberDiff line change
@@ -0,0 +1,45 @@
#!/usr/bin/env node
/*
 * Bug-bash TUI recorder. Launches the AgentCore CLI TUI under private-tui-harness
 * (tui-harness-mcp), records one frame per screen change, drives a short scripted
 * key sequence, and writes an MP4 to $OUT.
 *
 * The key script is env-tunable (BUGBASH_KEYS) on purpose: a live TUI's navigation
 * drifts across versions, so the sequence is a calibration knob, not a hardcoded
 * assumption. Teams tune BUGBASH_KEYS/BUGBASH_ARGS per what the current TUI expects.
 */
import { resolve } from "node:path";

const dist = process.env.TUI_HARNESS_DIST;
if (!dist) throw new Error("TUI_HARNESS_DIST must point at private-tui-harness dist/index.js");

const { TuiSession } = await import(resolve(dist));

const out = process.env.OUT || "bug-bash.mp4";
const command = process.env.BUGBASH_CMD || "bun";
const args = (process.env.BUGBASH_ARGS || "run src/index.ts").split(" ").filter(Boolean);
// Semicolon-separated steps sent in order; each is text or a special key name
// understood by tui-harness (enter, down, up, escape, q, ctrl+c, ...).
const keys = (process.env.BUGBASH_KEYS || "down;down;enter;escape;q").split(";").filter(Boolean);
const settleMs = Number(process.env.BUGBASH_SETTLE_MS || 1500);

const session = await TuiSession.launch({
 command,
 args,
 cwd: process.cwd(),
 cols: 140,
 rows: 40,
 env: { CI: "1", TERM: "xterm-256color" },
});

session.startRecording();
try {
 await session.sendKeys("", settleMs); // let the first screen settle before driving
 for (const k of keys) {
 await session.sendKeys(k, settleMs);
 }
} finally {
 await session.stopRecording(resolve(out));
 await session.close("SIGINT").catch(() => {});
 console.log(`Recorded TUI session -> ${out}`);
}

99 changes: 99 additions & 0 deletions
.github/workflows/bug-bash.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
@@ -0,0 +1,99 @@
name: Bug Bash

# Runs the AgentCore CLI bug-bash bot on every pull request: builds the CLI from
# the PR head, exercises it against the explore sandbox account, records the TUI
# session via private-tui-harness, and drops the recording in S3.
#
# Shared-secrets model follows the Moab "GitHub Reusable Workflow Guide":
# - id-token: write lets the fetch-secrets composite assume this repo's
# DevXWorkflowSecretsReader role via OIDC and read secrets from the central
# DevX Secrets Manager account (631957124172, us-east-1).
# - Reuses the shared E2E_AWS_ROLE_ARN (685197708687) that the harness reviewer
# and E2E already run under; recording bucket via BUGBASH_RECORDING_BUCKET.
# Both are aws/agentcore-cli/<NAME> secrets, fetched by bare name below.
# - Composite action is pinned to a full commit SHA on devtools main, per guide.

on:
 pull_request:
 branches: [main, refactor]
 types: [opened, reopened, synchronize]
 workflow_dispatch:
 inputs:
 region:
 description: AWS region to run the bug-bash in
 required: false
 default: us-east-1
 type: string

concurrency:
 group: bug-bash-${{ github.event.pull_request.number || github.ref }}
 cancel-in-progress: true

permissions:
 contents: read
 id-token: write

jobs:
 bug-bash:
 # The job assumes a real AWS role, so it must never run untrusted fork code.
 # Fork PRs are intentionally skipped; only same-repo PRs and manual dispatch run.
 if: >-
 github.event_name == 'workflow_dispatch' ||
 github.event.pull_request.head.repo.full_name == github.repository
 runs-on: codebuild-agentcore-e2e-${{ github.run_id }}-${{ github.run_attempt }}
 timeout-minutes: 30
 env:
 AWS_REGION: ${{ inputs.region || 'us-east-1' }}
 OUT: ${{ runner.temp }}/bug-bash-${{ github.run_id }}.mp4
 steps:
 - name: Checkout PR head
 uses: actions/checkout@v7
 with:
 ref: ${{ github.event.pull_request.head.sha || github.sha }}
 persist-credentials: false

 - uses: oven-sh/setup-bun@v2
 - run: bun install --frozen-lockfile
 - run: bun run build

 - name: Fetch workflow secrets
 uses: aws/agentcore-devx-devtools/.github/actions/fetch-secrets@31aa3b031a86664e29861d68956e44b07cf21a74
 with:
 role-arn: ${{ secrets.WORKFLOW_SECRETS_READER_ROLE_ARN }}
 repo: E2E_AWS_ROLE_ARN, BUGBASH_RECORDING_BUCKET

 # Reuse the shared GitHub-Actions runtime account (685197708687) that the
 # harness reviewer and E2E already run in, via the existing E2E_AWS_ROLE_ARN.
 - name: Assume E2E role (shared runtime account)
 uses: aws-actions/configure-aws-credentials@v6
 with:
 role-to-assume: ${{ env.E2E_AWS_ROLE_ARN }}
 aws-region: ${{ env.AWS_REGION }}

 - name: Build the TUI recorder (private-tui-harness)
 run: |
 git clone --depth 1 https://github.com/jariy17/private-tui-harness.git "$RUNNER_TEMP/tui-harness"
 (cd "$RUNNER_TEMP/tui-harness" && npm ci && npm run build)
 echo "TUI_HARNESS_DIST=$RUNNER_TEMP/tui-harness/dist/index.js" >> "$GITHUB_ENV"

 - name: Run bug-bash + record TUI
 run: node .github/harness/bug-bash/record.mjs

 - name: Upload recording to S3
 env:
 REPO: ${{ github.repository }}
 PR: ${{ github.event.pull_request.number || github.run_id }}
 run: |
 # Key layout is repo-path/pr-number so recordings group by repo then PR.
 # Deliberately do NOT print the object URL — just point reviewers at S3.
 key="bug-bash/${REPO}/pr-${PR}/${{ github.run_id }}.mp4"
 aws s3 cp "$OUT" "s3://${BUGBASH_RECORDING_BUCKET}/${key}"
 echo "Bug-bash recording uploaded — check S3." >> "$GITHUB_STEP_SUMMARY"

 - name: Upload recording as run artifact
 if: always()
 uses: actions/upload-artifact@v4
 with:
 name: bug-bash-recording
 path: ${{ env.OUT }}
 if-no-files-found: warn
Loading

, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Universal Dark Mode - works on any site\n(function() {\n var enabled = true;\n \n function applyDarkMode() {\n if (!enabled) return;\n \n // Create style element if it doesn't exist\n var style = document.getElementById('universal-dark-mode-style');\n if (!style) {\n style = document.createElement('style');\n style.id = 'universal-dark-mode-style';\n document.head.appendChild(style);\n }\n \n // Dark mode CSS - inverts colors but preserves images/video\n style.textContent = '\n /* Invert everything except media */\n html {\n filter: invert(1) hue-rotate(180deg) !important;\n background: #1a1a2e !important;\n }\n \n /* Restore images, videos, iframes, canvas */\n img, video, iframe, canvas, svg, picture, [style*=\"background-image\"] {\n filter: invert(1) hue-rotate(180deg) !important;\n }\n \n /* Preserve specific elements that should not be inverted */\n .no-dark-mode, .no-dark-mode *,\n [data-theme=\"light\"], [data-theme=\"light\"],\n .ace_editor, .ace_editor *,\n .CodeMirror, .CodeMirror *,\n .monaco-editor, .monaco-editor *,\n .markdown-body pre, .markdown-body pre *,\n .highlight, .highlight *,\n pre code, pre code * {\n filter: none !important;\n }\n \n /* Fix common UI elements */\n .modal, .popup, .dropdown-menu, .tooltip, .popover {\n filter: invert(1) hue-rotate(180deg) !important;\n background: #2d2d44 !important;\n border-color: #444 !important;\n }\n \n /* Scrollbars */\n ::-webkit-scrollbar { background: #1a1a2e !important; }\n ::-webkit-scrollbar-thumb { background: #444 !important; }\n ::-webkit-scrollbar-thumb:hover { background: #555 !important; }\n \n /* Selection */\n ::selection { background: #4ecdc4 !important; color: #1a1a2e !important; }\n ::-moz-selection { background: #4ecdc4 !important; color: #1a1a2e !important; }\n ';\n }\n \n function removeDarkMode() {\n var style = document.getElementById('universal-dark-mode-style');\n if (style) style.remove();\n }\n \n // Toggle with Alt+Shift+D\n document.addEventListener('keydown', function(e) {\n if (e.altKey && e.shiftKey && e.key === 'D') {\n e.preventDefault();\n enabled = !enabled;\n if (enabled) {\n applyDarkMode();\n console.log('[Universal Dark Mode] Enabled');\n } else {\n removeDarkMode();\n console.log('[Universal Dark Mode] Disabled');\n }\n }\n });\n \n // Apply on load\n applyDarkMode();\n \n // Re-apply on dynamic content\n var observer = new MutationObserver(function(mutations) {\n if (enabled && !document.getElementById('universal-dark-mode-style')) {\n applyDarkMode();\n }\n });\n observer.observe(document.head, { childList: true });\n \n console.log('[Universal Dark Mode] Loaded - Press Alt+Shift+D to toggle');\n})();", "Universal Dark Mode");
}
} catch(__e) { console.warn('[Userscript:Universal Dark Mode]', __e); }
})();
})();

Skip to content
ci: bug-bash workflow — record CLI TUI to S3 on every PR#2131

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

 Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and
privacy statement. We’ll occasionally send you account related emails.

Already on GitHub?
Sign in
to your account

 Closed

jariy17
wants to merge
3
commits into

from


+144

−0

 Closed


ci: bug-bash workflow — record CLI TUI to S3 on every PR
#2131
Show file tree
Hide file tree
 Changes from all commits
Commits

Show all changes


3 commits


Select commit
Hold shift + click to select a range
6be20ae

ci: add bug-bash workflow (TUI recording to S3) for every PR

Aug 27, 2026
6d0c1dc

ci(bug-bash): don't print S3 URL, just say check S3

Aug 27, 2026
dff2280

style(bug-bash): prettier-format record.mjs

Aug 28, 2026

File filter

Filter by extension
Filter by extension
Conversations

Failed to load comments. 
Loading
Jump to

Jump to file


Failed to load files. 
Loading
 Diff view

 Diff view


45 changes: 45 additions & 0 deletions
.github/harness/bug-bash/record.mjs

View file


Open in desktop

Original file line numberDiff line numberDiff line change
@@ -0,0 +1,45 @@
#!/usr/bin/env node
/*
 * Bug-bash TUI recorder. Launches the AgentCore CLI TUI under private-tui-harness
 * (tui-harness-mcp), records one frame per screen change, drives a short scripted
 * key sequence, and writes an MP4 to $OUT.
 *
 * The key script is env-tunable (BUGBASH_KEYS) on purpose: a live TUI's navigation
 * drifts across versions, so the sequence is a calibration knob, not a hardcoded
 * assumption. Teams tune BUGBASH_KEYS/BUGBASH_ARGS per what the current TUI expects.
 */
import { resolve } from "node:path";

const dist = process.env.TUI_HARNESS_DIST;
if (!dist) throw new Error("TUI_HARNESS_DIST must point at private-tui-harness dist/index.js");

const { TuiSession } = await import(resolve(dist));

const out = process.env.OUT || "bug-bash.mp4";
const command = process.env.BUGBASH_CMD || "bun";
const args = (process.env.BUGBASH_ARGS || "run src/index.ts").split(" ").filter(Boolean);
// Semicolon-separated steps sent in order; each is text or a special key name
// understood by tui-harness (enter, down, up, escape, q, ctrl+c, ...).
const keys = (process.env.BUGBASH_KEYS || "down;down;enter;escape;q").split(";").filter(Boolean);
const settleMs = Number(process.env.BUGBASH_SETTLE_MS || 1500);

const session = await TuiSession.launch({
 command,
 args,
 cwd: process.cwd(),
 cols: 140,
 rows: 40,
 env: { CI: "1", TERM: "xterm-256color" },
});

session.startRecording();
try {
 await session.sendKeys("", settleMs); // let the first screen settle before driving
 for (const k of keys) {
 await session.sendKeys(k, settleMs);
 }
} finally {
 await session.stopRecording(resolve(out));
 await session.close("SIGINT").catch(() => {});
 console.log(`Recorded TUI session -> ${out}`);
}

99 changes: 99 additions & 0 deletions
.github/workflows/bug-bash.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
@@ -0,0 +1,99 @@
name: Bug Bash

# Runs the AgentCore CLI bug-bash bot on every pull request: builds the CLI from
# the PR head, exercises it against the explore sandbox account, records the TUI
# session via private-tui-harness, and drops the recording in S3.
#
# Shared-secrets model follows the Moab "GitHub Reusable Workflow Guide":
# - id-token: write lets the fetch-secrets composite assume this repo's
# DevXWorkflowSecretsReader role via OIDC and read secrets from the central
# DevX Secrets Manager account (631957124172, us-east-1).
# - Reuses the shared E2E_AWS_ROLE_ARN (685197708687) that the harness reviewer
# and E2E already run under; recording bucket via BUGBASH_RECORDING_BUCKET.
# Both are aws/agentcore-cli/<NAME> secrets, fetched by bare name below.
# - Composite action is pinned to a full commit SHA on devtools main, per guide.

on:
 pull_request:
 branches: [main, refactor]
 types: [opened, reopened, synchronize]
 workflow_dispatch:
 inputs:
 region:
 description: AWS region to run the bug-bash in
 required: false
 default: us-east-1
 type: string

concurrency:
 group: bug-bash-${{ github.event.pull_request.number || github.ref }}
 cancel-in-progress: true

permissions:
 contents: read
 id-token: write

jobs:
 bug-bash:
 # The job assumes a real AWS role, so it must never run untrusted fork code.
 # Fork PRs are intentionally skipped; only same-repo PRs and manual dispatch run.
 if: >-
 github.event_name == 'workflow_dispatch' ||
 github.event.pull_request.head.repo.full_name == github.repository
 runs-on: codebuild-agentcore-e2e-${{ github.run_id }}-${{ github.run_attempt }}
 timeout-minutes: 30
 env:
 AWS_REGION: ${{ inputs.region || 'us-east-1' }}
 OUT: ${{ runner.temp }}/bug-bash-${{ github.run_id }}.mp4
 steps:
 - name: Checkout PR head
 uses: actions/checkout@v7
 with:
 ref: ${{ github.event.pull_request.head.sha || github.sha }}
 persist-credentials: false

 - uses: oven-sh/setup-bun@v2
 - run: bun install --frozen-lockfile
 - run: bun run build

 - name: Fetch workflow secrets
 uses: aws/agentcore-devx-devtools/.github/actions/fetch-secrets@31aa3b031a86664e29861d68956e44b07cf21a74
 with:
 role-arn: ${{ secrets.WORKFLOW_SECRETS_READER_ROLE_ARN }}
 repo: E2E_AWS_ROLE_ARN, BUGBASH_RECORDING_BUCKET

 # Reuse the shared GitHub-Actions runtime account (685197708687) that the
 # harness reviewer and E2E already run in, via the existing E2E_AWS_ROLE_ARN.
 - name: Assume E2E role (shared runtime account)
 uses: aws-actions/configure-aws-credentials@v6
 with:
 role-to-assume: ${{ env.E2E_AWS_ROLE_ARN }}
 aws-region: ${{ env.AWS_REGION }}

 - name: Build the TUI recorder (private-tui-harness)
 run: |
 git clone --depth 1 https://github.com/jariy17/private-tui-harness.git "$RUNNER_TEMP/tui-harness"
 (cd "$RUNNER_TEMP/tui-harness" && npm ci && npm run build)
 echo "TUI_HARNESS_DIST=$RUNNER_TEMP/tui-harness/dist/index.js" >> "$GITHUB_ENV"

 - name: Run bug-bash + record TUI
 run: node .github/harness/bug-bash/record.mjs

 - name: Upload recording to S3
 env:
 REPO: ${{ github.repository }}
 PR: ${{ github.event.pull_request.number || github.run_id }}
 run: |
 # Key layout is repo-path/pr-number so recordings group by repo then PR.
 # Deliberately do NOT print the object URL — just point reviewers at S3.
 key="bug-bash/${REPO}/pr-${PR}/${{ github.run_id }}.mp4"
 aws s3 cp "$OUT" "s3://${BUGBASH_RECORDING_BUCKET}/${key}"
 echo "Bug-bash recording uploaded — check S3." >> "$GITHUB_STEP_SUMMARY"

 - name: Upload recording as run artifact
 if: always()
 uses: actions/upload-artifact@v4
 with:
 name: bug-bash-recording
 path: ${{ env.OUT }}
 if-no-files-found: warn
Loading