feat: updates to the py_extension rule for building C extensionsPy extension

.agents/rules/bzl.md

@@ -0,0 +1,10 @@
+---
+trigger: glob
+description: Starlark / Bazel .bzl file coding style rules
+globs: *.bzl
+---
+
+# Starlark Rules
+
+* Use triple-quoted strings for multi-line rule doc args.
+* Don't use backslash line continuation in rule doc args.

.agents/rules/github_actions_workflows.md

@@ -0,0 +1,10 @@
+---
+name: github-actions-workflows
+trigger: glob
+globs: [".github/workflows/*.yml", ".github/workflows/*.yaml", ".github/*.yaml"]
+---
+
+# GitHub Actions Workflows Rule
+
+* When creating files in `.github/workflows/` (such as `.yml` or `.yaml`
+  files), always use the latest version of the referenced GitHub Actions.

.agents/rules/when-to-use-copyright.md

@@ -0,0 +1,8 @@
+---
+trigger: always_on
+---
+
+# When to Use Copyright
+
+Unless directed by the user otherwise, do not add Bazel copyright to new or
+existing files.

.agents/rules/workspace.md

@@ -0,0 +1,18 @@
+---
+trigger: always_on
+---
+
+# Workspace Rules
+
+To avoid confusion from using outdated code states, when starting a new
+conversation/session or when first starting a new branch or worktree, unless
+explicitly instructed otherwise, ensure the latest upstream code is used as the
+basis:
+* Fetch `upstream/main` (`git fetch upstream main`).
+* Base any new branch or worktree upon `upstream/main` (e.g.,
+  `git checkout -b <branch> upstream/main`).
+* Run the workspace helper script to configure upstream tracking and safe
+  pushing:
+  ```bash
+  .agents/scripts/setup_triangle_branch.sh <branch>
+  ```

.agents/scripts/setup_triangle_branch.sh

@@ -0,0 +1,25 @@
+#!/bin/bash
+# Helper script to set up upstream tracking for fork-and-PR workflow.
+set -e
+
+# Detect current branch if not provided as argument
+BRANCH_NAME="${1:-$(git symbolic-ref --short HEAD)}"
+
+if [ -z "$BRANCH_NAME" ]; then
+  echo "Error: Could not detect current branch name." >&2
+  exit 1
+fi
+
+echo "Setting up upstream tracking for branch: $BRANCH_NAME"
+
+# 1. Set the pull/fetch behavior to track the canonical repo's main branch
+git config --local "branch.${BRANCH_NAME}.remote" upstream
+git config --local "branch.${BRANCH_NAME}.merge" refs/heads/main
+
+# 2. Override the destination remote for pushing
+git config --local "branch.${BRANCH_NAME}.pushRemote" origin
+
+# 3. Defend against global push.default settings (ensure it pushes to current branch name)
+git config --local push.default current
+
+echo "Successfully configured upstream/main tracking and origin pushRemote for $BRANCH_NAME!"

.agents/skills/analyze-ci-failure/SKILL.md

@@ -0,0 +1,16 @@
+---
+name: analyze-ci-failure
+description: Download and analyze a CI failure log to construct an actionable suggested fix plan and report back
+---
+
+When a CI monitoring workflow alerts you to a failed Buildkite job or GitHub check, invoke this skill by running:
+```bash
+./.agents/skills/analyze-ci-failure/scripts/analyze_ci_failure.py "<job_name>" "<build_id_or_log_url>" "<job_id>" "<your_conversation_id>"
+```
+
+### ✨ What this Skill Does
+1. **Resolves Log**: Automatically resolves the Buildkite job download URL or locates existing local log artifacts.
+2. **Downloads & Ingests**: Fetches the full raw CI log file and saves it locally.
+3. **Smart Error Extraction**: Scans the log lines for critical failure signatures (`Traceback`, `ERROR:`, `FAILED:`, missing packages, compiler aborts).
+4. **Fix Plan Synthesis**: Constructs a beautifully structured Markdown suggested plan on how to resolve the root cause.
+5. **Natively Notifies**: Dispatches a high-priority summary notification message back to your active agent conversation via `agentapi send-message`!

.agents/skills/analyze-ci-failure/scripts/analyze_ci_failure.py

@@ -0,0 +1,142 @@
+#!/usr/bin/env python3
+
+import argparse
+import os
+import re
+import subprocess
+import sys
+import urllib.request
+
+
+def fetch_log(build_id, job_id, output_path):
+    if build_id.startswith("http"):
+        log_url = build_id
+    elif job_id.startswith("http"):
+        log_url = job_id
+    else:
+        log_url = f"https://buildkite.com/organizations/bazel/pipelines/rules-python-python/builds/{build_id}/jobs/{job_id}/download.txt"
+
+    if not log_url.endswith("/download.txt") and "buildkite.com" in log_url:
+        log_url = re.sub(r"/log$", "/download.txt", log_url)
+
+    print(f"📥 Downloading CI failure log from {log_url}...")
+    req = urllib.request.Request(log_url, headers={"User-Agent": "ci-analyzer"})
+    try:
+        with urllib.request.urlopen(req) as resp:
+            content = resp.read()
+            with open(output_path, "wb") as f:
+                f.write(content)
+        return True
+    except Exception as e:
+        print(f"⚠️ Failed to download log from {log_url}: {e}", file=sys.stderr)
+        with open(output_path, "w") as f:
+            f.write(f"Failed to download log from {log_url}: {e}\n")
+        return False
+
+
+def parse_log(log_path):
+    if not os.path.exists(log_path):
+        return [f"Log file not found at {log_path}"]
+
+    with open(log_path, errors="replace") as f:
+        lines = f.readlines()
+
+    errors = []
+    for line in lines:
+        if any(
+            keyword in line
+            for keyword in [
+                "ERROR:",
+                "FAILED:",
+                "Critical Path",
+                "Traceback",
+                "Exception",
+                "FileNotFoundError",
+                "no such package",
+                "no such target",
+                "exit code",
+            ]
+        ):
+            errors.append(line.strip())
+
+    return errors[:30]
+
+
+def create_plan(job_name, log_path, errors):
+    err_str = (
+        "\n".join(errors)
+        if errors
+        else "No obvious keyword error lines matched. Please inspect the raw log file."
+    )
+
+    plan = f"""# 🚨 CI Failure Analysis Report: {job_name}
+
+## 📁 CI Log Path
+`{log_path}`
+
+## 🔥 Extracted Failure Snippets
+```text
+{err_str}
+```
+
+## 🛠️ Suggested Plan to Fix
+1. **Inspect Log**: Review the exact log snippets above or read the full raw log file at `{log_path}`.
+2. **Reproduce Locally**: Run `./replicate_ci "{job_name}"` or the matching `bazel build/test` command locally.
+3. **Apply Fix**: Resolve the root cause in the relevant `BUILD.bazel` or Starlark files.
+4. **Verify & Push**: Run local verification with `--config=fast-tests` and push the updated branch to trigger a clean pipeline.
+"""
+    return plan
+
+
+def main():
+    parser = argparse.ArgumentParser(
+        description="Download CI failure log, analyze root cause, and create fix plan."
+    )
+    parser.add_argument("job_name", help="Name of the failed job")
+    parser.add_argument("build_id", help="Buildkite Build ID, Build number, or Log URL")
+    parser.add_argument("job_id", help="Buildkite Job ID or link")
+    parser.add_argument("conv_id", help="Conversation ID to report back to")
+    args = parser.parse_args()
+
+    skill_dir = os.path.abspath(os.path.dirname(__file__))
+    logs_dir = os.path.join(skill_dir, "ci_logs")
+    os.makedirs(logs_dir, exist_ok=True)
+
+    safe_jname = re.sub(r"[^a-zA-Z0-9]", "_", args.job_name)
+    log_path = os.path.join(logs_dir, f"ci_{safe_jname}_{args.job_id}.log")
+
+    fetch_log(args.build_id, args.job_id, log_path)
+
+    print(f"🚀 Analyzing CI failure log for '{args.job_name}' at '{log_path}'...")
+    errors = parse_log(log_path)
+    plan = create_plan(args.job_name, log_path, errors)
+
+    plan_file = os.path.join(logs_dir, f"ci_plan_{safe_jname}.md")
+    with open(plan_file, "w") as f:
+        f.write(plan)
+
+    print(
+        f"📄 Plan generated at '{plan_file}'. Dispatching notification to conversation {args.conv_id}..."
+    )
+
+    msg = (
+        f"⚠️ Remote CI Job '{args.job_name}' Analysis Complete!\n\n"
+        f"I downloaded and analyzed the failure log. Findings and suggested fix plan compiled at artifact file: `{plan_file}`.\n\n"
+        f"Raw CI Log Path: `{log_path}`"
+    )
+
+    res = subprocess.run(
+        [
+            "agentapi",
+            "send-message",
+            "--title=CI Failure Analysis Plan",
+            args.conv_id,
+            msg,
+        ]
+    )
+    if res.returncode != 0:
+        print(f"❌ Failed to send agentapi message. Printing plan directly:\n{plan}")
+
+
+if __name__ == "__main__":
+    main()

.agents/skills/buildkite-get-results/SKILL.md

@@ -0,0 +1,10 @@
+---
+name: buildkite-get-results
+description: Gets buildkite build results
+---
+
+Pass the PR number, Build URL, or Build ID to the `scripts/get_buildkite_results.py` script.
+
+The `--jobs` flag can do glob-style filtering of jobs.
+
+The `--download` flag will download job logs.

.agents/skills/buildkite-get-results/scripts/get_buildkite_results.py

@@ -0,0 +1,96 @@
+#!/usr/bin/env python3
+
+import argparse
+import json
+import re
+import subprocess
+import sys
+
+
+def check_cli(cmd_name, install_url):
+    try:
+        subprocess.run(
+            [cmd_name, "--version"],
+            check=True,
+            stdout=subprocess.DEVNULL,
+            stderr=subprocess.DEVNULL,
+        )
+    except Exception:
+        print(
+            f"❌ Error: '{cmd_name}' CLI is not installed or not in PATH.",
+            file=sys.stderr,
+        )
+        print(f"Please install it from {install_url}", file=sys.stderr)
+        sys.exit(1)
+
+
+def get_build_url_from_pr(pr_number):
+    check_cli("gh", "https://cli.github.com/")
+    cmd = ["gh", "pr", "checks", str(pr_number), "--json", "name,link"]
+    try:
+        res = subprocess.run(cmd, capture_output=True, text=True, check=True)
+        checks = json.loads(res.stdout)
+        for c in checks:
+            link = c.get("link", "")
+            if "buildkite.com" in link:
+                return link.split("#")[0]
+        print(f"❌ No Buildkite checks found for PR #{pr_number}.", file=sys.stderr)
+        sys.exit(1)
+    except subprocess.CalledProcessError as e:
+        print(f"❌ Error fetching PR checks: {e.stderr}", file=sys.stderr)
+        sys.exit(1)
+
+
+def normalize_build_target(target):
+    # Transforms https://buildkite.com/bazel/rules-python-python/builds/15707
+    # into bazel/rules-python-python/15707
+    m = re.search(r"buildkite\.com/([^/]+)/([^/]+)/builds/(\d+)", target)
+    if m:
+        return f"{m.group(1)}/{m.group(2)}/{m.group(3)}"
+    return target
+
+
+def main():
+    parser = argparse.ArgumentParser(
+        description="Gets Buildkite build results using the 'bk' CLI."
+    )
+    parser.add_argument(
+        "pr", help="PR number, Build URL, or Build ID (org/pipeline/build)"
+    )
+    parser.add_argument(
+        "--jobs",
+        help="Glob-style filtering of job names to display or download",
+    )
+    parser.add_argument("--download", action="store_true", help="Download job logs")
+    args = parser.parse_args()
+
+    check_cli("bk", "https://github.com/buildkite/cli")
+
+    target = args.pr
+    if target.isdigit() and len(target) < 10:
+        print(f"🔍 Inspecting PR #{target} via gh to find Buildkite URL...")
+        target = get_build_url_from_pr(target)
+
+    build_id = normalize_build_target(target)
+    print(f"🚀 Querying Buildkite for build: {build_id}\n")
+
+    # Run bk build view
+    res = subprocess.run(["bk", "build", "view", build_id])
+    if res.returncode != 0:
+        print(
+            f"❌ Failed to view build '{build_id}' via 'bk' CLI.",
+            file=sys.stderr,
+        )
+        sys.exit(res.returncode)
+
+    if args.download:
+        print(f"\n📥 Downloading logs for build: {build_id}")
+        dl_res = subprocess.run(["bk", "build", "download", build_id])
+        if dl_res.returncode != 0:
+            print(
+                "⚠️ 'bk build download' failed or not supported. Try using 'bk job log <job-id>' for specific jobs."
+            )
+
+
+if __name__ == "__main__":
+    main()

.agents/skills/buildkite-retry-job/SKILL.md

@@ -0,0 +1,17 @@
+---
+name: buildkite-retry-job
+description: Retry a failed build kite job
+---
+
+Use `scripts/retry_buildkite_jobs.py` to retry a job. This is best used
+when there are network failures.
+
+
+example:
+
+```
+retry_buildkite_jobs.py org pipeline build
+```
+You can also simply pass a PR number or a direct Buildkite build URL.
+
+The `--jobs` flag can be used to retry specific jobs.