Workflow Templates

Workflow templates are thin caller workflows (~20 lines each) that the bucky CLI installs into target repositories. Each caller declares its trigger event and permissions, then delegates to the corresponding shared reusable workflow in buck-bronson.

Installed workflows

Workflow	Trigger	What it does
bucky-dispatch.yml	repository_dispatch (bucky-session)	Agent-dispatched Claude sessions with callback (default: Claude decides; plan mode restricts to planning only)
bucky-comments.yml	issue_comment, pull_request_review_comment	Handles @bucky on PRs (ad-hoc). Issue comments handled by agent service
bucky-code-review.yml	pull_request	AI code review when PRs are opened or updated

How they work

Each caller workflow:

1. Declares trigger events and required permissions
2. Calls the corresponding reusable workflow in buck-bronson with @v1
3. Passes the preset input (substituted by the CLI at install time)
4. Uses secrets: inherit to forward all repo/org secrets

Example: bucky-dispatch.yml

name: Bucky Dispatch
on:
  repository_dispatch:
    types: [bucky-session]

permissions:
  contents: write
  pull-requests: write
  issues: write
  id-token: write
  actions: read

jobs:
  dispatch:
    uses: fetch-rewards/buck-bronson/.github/workflows/bucky-dispatch.yml@v1
    with:
      preset: web  # substituted by CLI from --preset
    secrets: inherit

CLI substitutions

When the CLI generates caller workflows, it performs two substitutions:

1. __PRESET__ placeholder — replaced with the selected preset name (web, golang, or none)
2. @main refs — rewritten to @v{major} (e.g., @v1) on lines referencing the buck-bronson repo

Selecting specific workflows

By default, the CLI installs all three workflows. Use --workflows to install only specific ones:

# Only code review
bucky fetch-rewards/my-service --workflows bucky-code-review --preset web

# Dispatch and code review (no comment handling)
bucky fetch-rewards/my-service --workflows bucky-dispatch,bucky-code-review

Permissions

All caller workflows request these permissions:

Permission	Level	Purpose
contents	write	Read/write repo files, create branches
pull-requests	write	Create and comment on PRs
issues	write	Comment on issues, manage labels
id-token	write	OIDC authentication for AWS Bedrock
actions	read	Read workflow run information