Run an agent harness unattended in CI

codex exec --sandbox workspace-write \
  -o summary.md \
  "Run npm run lint, fix the errors, and summarize what you changed"
# machine-readable events instead:
codex exec --json "summarize the repo structure" | jq

claude --bare -p "Run the tests and fix any failures" \
  --permission-mode dontAsk \
  --allowedTools "Read,Edit,Bash(npm test *)" \
  --output-format json > result.json

{
  "$schema": "https://opencode.ai/config.json",
  "permission": { "*": "deny", "read": "allow", "grep": "allow", "glob": "allow", "edit": "allow", "bash": { "*": "deny", "npm test*": "allow" } }
}

opencode run --format json -m <provider>/<model> "Run npm test and fix failures"

goose run --recipe weekly-report.yaml \
  --params week=2026-W42 \
  --no-session --max-turns 10

gemini -p "Summarize open TODOs in src/" --output-format json
aider --message "add descriptive docstrings to all the functions" src/utils.py

name: nightly-agent
on:
  schedule: [{ cron: "0 9 * * 1-5" }]
jobs:
  run:
    runs-on: ubuntu-latest
    permissions: { contents: read }
    steps:
      - uses: actions/checkout@v4
      - run: npm install -g @openai/codex
      - run: codex exec -o report.md "Read the repo and list the 5 riskiest TODOs with file and line"
        env: { CODEX_API_KEY: "${{ secrets.CODEX_API_KEY }}" }
      - uses: actions/upload-artifact@v4
        with: { name: report, path: report.md }