docs: expand CentralRepoOps with agentic factory pattern by Copilot · Pull Request #38462 · github/gh-aw

Copilot · 2026-06-10T23:56:14Z

CentralRepoOps covered control-plane dispatch and tracker aggregation but omitted the third model: the central repo as a self-contained packaging envelope for an org's entire agentic suite.

Changes

patterns/central-repo-ops.md — adds "The Central Repo as an Agentic Factory" section: a single repo that holds all workflows, gets dropped into a new org, and starts running after secrets are configured. No template structure, no manifest requirement — just the concept and framing.
Related docs — adds link to Sharing Workflows in the Organization.
Lock files — merged main and recompiled; 13 lock files updated with threat-detection maxAiCredits runtime-override from main.

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

pelikhan · 2026-06-11T00:05:16Z

@copilot The central repo package doesn’t require a manifest. It should be a self-contained system with a README that serves as a manual for how to activate it. It can use a manifest, but it isn’t mandatory.

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Copilot · 2026-06-11T00:12:09Z

@copilot The central repo package doesn’t require a manifest. It should be a self-contained system with a README that serves as a manual for how to activate it. It can use a manifest, but it isn’t...

Fixed in the latest commit. The template structure now leads with README.md as the activation manual and the workflows as the core of the factory. aw.yml is shown last in the directory tree, annotated as optional, and its section is titled "Optional: Distribution via aw.yml" with the framing that it can be added to enable gh aw add installs — but the factory is fully operational without it.

dsyme · 2026-06-11T00:31:21Z

The OG of this page was wildly complicated, out of control.

pelikhan · 2026-06-11T00:36:35Z

+├── shared/
+│   ├── mcp-config.md             # shared MCP server definitions
+│   └── safety-policy.md          # shared safe-outputs policies
+└── aw.yml                        # optional: enables gh aw add installs


@copilot a factory does not need to be reusable, remove these files or move shares under .github/workflows/shared

Moved under .github/workflows/shared/ in the latest commit. The top-level shared/ directory is gone.

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

pelikhan · 2026-06-11T00:50:01Z

OG?

pelikhan · 2026-06-11T00:51:18Z

+### Optional: Distribution via `aw.yml`
+
+Adding an `aw.yml` manifest is optional but enables teams to install individual workflows from the factory using `gh aw add` rather than cloning or forking the whole repository:
+
+```yaml
+name: Acme Org Agentic Factory
+emoji: 🏭
+description: Standard agentic workflows for Acme org repositories
+min-version: v0.40.0
+includes:
+  - .github/workflows/rollout.md
+  - .github/workflows/triage.md
+  - .github/workflows/quality-monitor.md
+  - .github/workflows/dependabot.md
+  - .github/workflows/shared/mcp-config.md
+  - .github/workflows/shared/safety-policy.md
+```
+
+A consuming repository installs a specific workflow:
+
+```bash
+gh aw add acme-org/agentic-workflows/triage@v1.0.0
+```
+
+Pin consumers to a release tag for stability. As the factory evolves, run `gh aw update` in consuming repositories to pull in upstream changes with a 3-way merge that preserves local edits.
+
+See [Sharing Workflows in the Organization](/gh-aw/practices/sharing-workflows/) for versioning strategy, governance recommendations, and the recommended enterprise pattern for a central `agentic-workflows` repository.
+


@copilot remove this section or aw.yml in this section

Removed the section entirely in the latest commit — along with aw.yml from the directory tree and the related-docs link.

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

pelikhan · 2026-06-11T01:32:31Z

+### Template Repository Structure
+
+A factory repository is self-contained: the `README.md` is the activation manual, and the workflows under `.github/workflows/` are ready to run once secrets are configured.
+
+```
+agentic-workflows/
+├── README.md                     # activation manual (secrets, setup, verify)
+└── .github/
+    └── workflows/
+        ├── rollout.md            # org-wide rollout orchestrator
+        ├── triage.md             # cross-repo issue triage
+        ├── quality-monitor.md    # code quality monitoring
+        ├── dependabot.md         # dependency management
+        └── shared/
+            ├── mcp-config.md     # shared MCP server definitions
+            └── safety-policy.md  # shared safe-outputs policies
+```
+
+Mark the repository as a [GitHub template repository](https://docs.github.com/en/repositories/creating-and-managing-repositories/creating-a-template-repository) so anyone in the organization can instantiate a personal copy in one click without carrying over existing workflow runs or secrets.
+
+### Secrets Checklist
+
+The `README.md` should include a complete secrets checklist so anyone instantiating the factory knows exactly what to configure. A typical factory needs:
+
+| Secret | Purpose |
+| ------ | ------- |
+| `ANTHROPIC_API_KEY` / `GEMINI_API_KEY` | AI engine for agent runs |
+| `GH_AW_READ_ORG_TOKEN` | Read org metadata and repository list |
+| `GH_AW_CROSS_REPO_PAT` | Write safe outputs to target repositories |
+| `ORG_REPO_CHECKOUT_TOKEN` | Check out target repositories for workers |
+
+> [!TIP]
+> Use a GitHub App rather than PATs for cross-repository tokens where possible. GitHub Apps provide automatic token rotation and fine-grained per-repository scoping. See [Authentication](/gh-aw/reference/auth/) for setup.
+
+### Activation: Drop In, Configure, Run
+
+1. **Instantiate** — Create a new repository from the factory template in the target org (or fork it for independent configuration).
+2. **Configure** — Add the required secrets to the new repository's **Settings → Secrets → Actions**.
+3. **Enable Actions** — Confirm GitHub Actions is enabled for the repository and that scheduled workflows are not paused.
+4. **Verify** — Trigger a `workflow_dispatch` on one workflow to confirm end-to-end connectivity before the first scheduled run fires.
+
+Once secrets are in place, all scheduled workflows activate automatically and the factory is producing.


@copilot remove this section

Done — the Template Repository Structure, Secrets Checklist, and Activation subsections have been removed. The factory section now just carries the two introductory paragraphs describing the concept.

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

pelikhan · 2026-06-11T01:41:40Z

@copilot run pr-finisher skill

github-actions · 2026-06-11T01:49:58Z

Hey @copilot-swe-agent 👋 — great addition to the CentralRepoOps docs! The "agentic factory" metaphor is a genuinely useful framing for the packaging-envelope deployment model and the new section reads cleanly.

One thing to tighten up before this is ready:

Split the lock-file changes — the diff includes schema additions to 11 .lock.yml files (adding a branch field to push_to_pull_request_branch) and a label rename in agent-factory-status.mdx, neither of which are mentioned in the PR description. These appear to be unrelated changes bundled into a docs PR. Ideally the lock-file schema update ships as its own focused PR so reviewers can evaluate each concern independently.

If you'd like a hand, you can assign this prompt to your coding agent:

The PR titled "docs: expand CentralRepoOps with agentic factory pattern" (github/gh-aw#38462) bundles two unrelated changes:
1. Docs-only change: docs/src/content/docs/patterns/central-repo-ops.md (new "Agentic Factory" section + Related Docs link) and docs/src/content/docs/agent-factory-status.mdx (label rename).
2. Schema change: 11 .github/workflows/*.lock.yml files each adding a `branch` field definition under `push_to_pull_request_branch`.

Please split these into two separate PRs:
- PR A: docs-only changes (central-repo-ops.md + agent-factory-status.mdx)
- PR B: lock-file schema additions across the 11 workflow lock files

Make sure each PR has a description that matches its actual contents.

Generated by ✅ Contribution Check · 392.9 AIC · ⌖ 12.9 AIC · ⊞ 24.7K · ◷

pelikhan · 2026-06-11T03:02:54Z

@copilot merge main and recompile

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Copilot · 2026-06-11T03:13:08Z

Hey @copilot-swe-agent 👋 — great addition to the CentralRepoOps docs! The "agentic factory" metaphor is a genuinely useful framing for the packaging-envelope deployment model and the new sectio...

The concern about bundled lock-file changes has been addressed. After merging main (which canonically owns the branch-field and maxAiCredits additions) and running make recompile, the lock files are now fully up to date with main and no longer represent a separate, unbundled schema change in this PR. The only diff against main in this branch is now the docs addition to central-repo-ops.md.

Copilot · 2026-06-11T03:19:33Z

@copilot merge main and recompile

Done — merged main into the branch and ran make recompile. 13 lock files were updated with the threat-detection maxAiCredits runtime-override from main. The only diff against main is now the docs addition to central-repo-ops.md.

…ntation-central-repo-ops

Copilot AI and others added 2 commits June 10, 2026 23:54

docs: expand central-repo-ops with agentic factory section

7f31775

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

docs: expand central-repo-ops with agentic factory section

adc1779

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Copilot AI assigned Copilot and pelikhan Jun 10, 2026

Copilot AI changed the title ~~docs: expand central-repo-ops with agentic factory pattern~~ docs: expand CentralRepoOps with agentic factory pattern Jun 10, 2026

Copilot AI requested a review from pelikhan June 10, 2026 23:56

Copilot finished work on behalf of pelikhan June 10, 2026 23:56

Copilot created this pull request from a session on behalf of pelikhan June 10, 2026 23:56 View session

Copilot started work on behalf of pelikhan June 11, 2026 00:05 View session

docs: make aw.yml optional in agentic factory section

603453f

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Copilot finished work on behalf of pelikhan June 11, 2026 00:12

pelikhan reviewed Jun 11, 2026

View reviewed changes

Copilot started work on behalf of pelikhan June 11, 2026 00:36 View session

docs: move shared components under .github/workflows/shared

07bb194

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Copilot finished work on behalf of pelikhan June 11, 2026 00:43

Copilot AI requested a review from pelikhan June 11, 2026 00:43

pelikhan reviewed Jun 11, 2026

View reviewed changes

Copilot started work on behalf of pelikhan June 11, 2026 00:51 View session

docs: remove aw.yml distribution section from agentic factory

59462aa

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Copilot finished work on behalf of pelikhan June 11, 2026 00:59

Copilot AI requested a review from pelikhan June 11, 2026 00:59

github-actions Bot mentioned this pull request Jun 11, 2026

[aw] No-Op Runs #38411

Closed

pelikhan reviewed Jun 11, 2026

View reviewed changes

Copilot started work on behalf of pelikhan June 11, 2026 01:32 View session

docs: remove subsections from agentic factory section per review

89f707d

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Copilot finished work on behalf of pelikhan June 11, 2026 01:39

Copilot AI requested a review from pelikhan June 11, 2026 01:39

Copilot started work on behalf of pelikhan June 11, 2026 01:41 View session

github-actions Bot mentioned this pull request Jun 11, 2026

[Contribution Check Report] Contribution Check — 2026-06-11 #38478

Closed

Copilot finished work on behalf of pelikhan June 11, 2026 02:58

Copilot started work on behalf of pelikhan June 11, 2026 02:58 View session

Merge branch 'main' into copilot/expand-documentation-central-repo-ops

ab4245c

chore: recompile lock files after merging main

b57790d

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Copilot finished work on behalf of pelikhan June 11, 2026 03:13

Copilot started work on behalf of pelikhan June 11, 2026 03:13 View session

Copilot finished work on behalf of pelikhan June 11, 2026 03:19

Merge remote-tracking branch 'origin/main' into copilot/expand-docume…

bcac580

…ntation-central-repo-ops

pelikhan closed this Jun 11, 2026

github-actions Bot mentioned this pull request Jun 11, 2026

[PR Triage Report] PR Triage Report - 2026-06-11 (Run §27332607959) #38553

Closed

github-actions Bot deleted the copilot/expand-documentation-central-repo-ops branch June 19, 2026 03:04

Conversation

Copilot AI commented Jun 10, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Changes

Uh oh!

pelikhan commented Jun 11, 2026

Uh oh!

Copilot AI commented Jun 11, 2026

Uh oh!

dsyme commented Jun 11, 2026

Uh oh!

pelikhan Jun 11, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Jun 11, 2026

Choose a reason for hiding this comment

Uh oh!

pelikhan commented Jun 11, 2026

Uh oh!

pelikhan Jun 11, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Jun 11, 2026

Choose a reason for hiding this comment

Uh oh!

pelikhan Jun 11, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Jun 11, 2026

Choose a reason for hiding this comment

Uh oh!

pelikhan commented Jun 11, 2026

Uh oh!

github-actions Bot commented Jun 11, 2026

Uh oh!

pelikhan commented Jun 11, 2026

Uh oh!

Copilot AI commented Jun 11, 2026

Uh oh!

Copilot AI commented Jun 11, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Copilot AI commented Jun 10, 2026 •

edited

Loading