plano/.github/workflows/update-providers.yml

name: Update provider_models.yaml

on:
  repository_dispatch:
    types: [update-providers]
  workflow_dispatch:

permissions:
  contents: write
  pull-requests: write

jobs:
  update-providers:
    runs-on: ubuntu-latest
    env:
      RESPONSE_URL: ${{ github.event.client_payload.response_url }}
      SLACK_USER_ID: ${{ github.event.client_payload.user_id }}
      SLACK_USER_NAME: ${{ github.event.client_payload.user_name }}
    steps:
      - name: Checkout main
        uses: actions/checkout@v6
        with:
          ref: main

      - name: Install Rust toolchain
        uses: dtolnay/rust-toolchain@stable

      - name: Configure AWS credentials
        uses: aws-actions/configure-aws-credentials@v4
        with:
          aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
          aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
          aws-region: ${{ secrets.AWS_REGION }}

      - name: Cache cargo build
        uses: actions/cache@v4
        with:
          path: |
            ~/.cargo/registry
            ~/.cargo/git
            crates/target
          key: cargo-fetch-models-${{ hashFiles('crates/**/Cargo.lock', 'crates/**/Cargo.toml') }}
          restore-keys: cargo-fetch-models-

      - name: Run fetch_models
        working-directory: crates/hermesllm
        env:
          OPENAI_API_KEY: ${{ secrets.OPENAI_API_KEY }}
          ANTHROPIC_API_KEY: ${{ secrets.ANTHROPIC_API_KEY }}
          MISTRAL_API_KEY: ${{ secrets.MISTRAL_API_KEY }}
          DEEPSEEK_API_KEY: ${{ secrets.DEEPSEEK_API_KEY }}
          GROK_API_KEY: ${{ secrets.GROK_API_KEY }}
          DASHSCOPE_API_KEY: ${{ secrets.DASHSCOPE_API_KEY }}
          MOONSHOT_API_KEY: ${{ secrets.MOONSHOT_API_KEY }}
          ZHIPU_API_KEY: ${{ secrets.ZHIPU_API_KEY }}
          MIMO_API_KEY: ${{ secrets.MIMO_API_KEY }}
          GOOGLE_API_KEY: ${{ secrets.GOOGLE_API_KEY }}
          OPENROUTER_API_KEY: ${{ secrets.OPENROUTER_API_KEY }}
          AI_GATEWAY_API_KEY: ${{ secrets.AI_GATEWAY_API_KEY }}
        run: cargo run --bin fetch_models --features model-fetch

      - name: Create pull request
        id: cpr
        uses: peter-evans/create-pull-request@v7
        with:
          branch: bot/update-providers-${{ github.run_id }}
          base: main
          commit-message: "chore: refresh provider_models.yaml"
          title: "chore: refresh provider_models.yaml"
          body: |
            Automated refresh of `crates/hermesllm/src/bin/provider_models.yaml`
            via `fetch_models`.

            Requested by ${{ env.SLACK_USER_NAME && format('@{0}', env.SLACK_USER_NAME) || 'workflow_dispatch' }}${{ env.SLACK_USER_ID && format(' (Slack `{0}`)', env.SLACK_USER_ID) || '' }}.

            Workflow run: ${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}
          labels: automated, provider-models
          add-paths: crates/hermesllm/src/bin/provider_models.yaml

      - name: Notify Slack (success)
        if: success() && env.RESPONSE_URL != ''
        env:
          PR_URL: ${{ steps.cpr.outputs.pull-request-url }}
          PR_NUMBER: ${{ steps.cpr.outputs.pull-request-number }}
          PR_OP: ${{ steps.cpr.outputs.pull-request-operation }}
        run: |
          if [ -z "$PR_URL" ]; then
            TEXT=":information_source: No provider model changes detected \u2014 nothing to PR."
            BLOCKS=$(jq -nc --arg text "$TEXT" '{response_type:"ephemeral", replace_original:true, text:$text, blocks:[{type:"section", text:{type:"mrkdwn", text:$text}}]}')
          else
            TEXT=":white_check_mark: provider_models.yaml PR ready: $PR_URL"
            BLOCKS=$(jq -nc \
              --arg pr "$PR_URL" \
              --arg num "$PR_NUMBER" \
              --arg op "$PR_OP" \
              '{
                response_type:"ephemeral",
                replace_original:true,
                text:(":white_check_mark: provider_models.yaml PR #" + $num + " " + $op + ": " + $pr),
                blocks:[
                  {type:"section", text:{type:"mrkdwn", text:(":white_check_mark: *provider_models.yaml* PR <" + $pr + "|#" + $num + "> " + $op + ".")}},
                  {type:"actions", elements:[{type:"button", text:{type:"plain_text", text:"Open PR"}, url:$pr}]}
                ]
              }')
          fi
          curl -sS -X POST -H 'Content-Type: application/json' -d "$BLOCKS" "$RESPONSE_URL"

      - name: Notify Slack (failure)
        if: failure() && env.RESPONSE_URL != ''
        run: |
          RUN_URL="${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}"
          TEXT=":x: provider_models.yaml update failed. Logs: $RUN_URL"
          jq -nc \
            --arg text "$TEXT" \
            --arg run "$RUN_URL" \
            '{
              response_type:"ephemeral",
              replace_original:true,
              text:$text,
              blocks:[
                {type:"section", text:{type:"mrkdwn", text:(":x: *provider_models.yaml update failed.*")}},
                {type:"actions", elements:[{type:"button", text:{type:"plain_text", text:"View logs"}, url:$run}]}
              ]
            }' | curl -sS -X POST -H 'Content-Type: application/json' -d @- "$RESPONSE_URL"