First the tools, this is all the agent have access to, no bash or shell tool, it cant run anything but these appbuilder behaviors and the appbuilder behaviours have input validation (must be integer etc) to make it safe

name: ffd-pr-triage
description: Free-For-Dev PR Reviewer

# avoid some repetition
numbered_exec: &numbered_exec
  type: exec
  flags:
    - name: number
      description: The PR to act on
      type: integer
      required: true

commands:
  - name: pr
    type: parent
    description: Pull Requests
    commands:
    - name: list
      type: exec
      description: List open Pull requests bodies
      command: gh pr list -R ripienaar/free-for-dev --json body,labels,number

    - name: diff
      description: Views the diff of a Pull request
      command: gh pr diff -R ripienaar/free-for-dev {{.Flags.number }}
      <<: *numbered_exec

    - name: slop
      description: Marks a PR as potentially AI generated
      command: gh pr edit -R ripienaar/free-for-dev {{.Flags.number }} --add-label slop
      <<: *numbered_exec

    - name: invalid
      description: Marks a PR as invalid
      command: gh pr edit -R ripienaar/free-for-dev {{.Flags.number }} --add-label invalid
      <<: *numbered_exec

    - name: triage
      description: Marks a PR needs human review
      command: gh pr edit -R ripienaar/free-for-dev {{.Flags.number }} --add-label triage
      <<: *numbered_exec

    - name: ready
      description: Marks a PR as ready to merge
      command: gh pr edit -R ripienaar/free-for-dev {{.Flags.number }} --add-label ready
      <<: *numbered_exec