planning: revise 2.1-build-git-filter-repo-ci plan to sequential single wave

Author: cowwoc

.cat/issues/v2/v2.1/build-git-filter-repo-ci/plan.md

@@ -26,36 +26,42 @@ None
 ## Sub-Agent Waves
 
 ### Wave 1
-- Create `.github/workflows/build-git-filter-repo.yml` file with full workflow definition
-  - Build matrix for 4 platforms: linux-x64, linux-aarch64, macos-x64, macos-aarch64
+
+Execute the following steps **in order**. Steps 2 and 3 are git/CLI operations with no file commits.
+
+**Step 1: Create CI workflow file**
+- Create `.github/workflows/build-git-filter-repo.yml` with the full workflow definition:
+  - Build matrix for 4 platforms: `linux-x64`, `linux-aarch64`, `macos-x64`, `macos-aarch64`
   - PyInstaller to create standalone binaries
-  - SHA256 checksum generation for all artifacts
+  - SHA256 checksum generation for each platform artifact
   - GitHub release creation with checksums in release notes
-  - Files: `.github/workflows/build-git-filter-repo.yml`
+- Commit both the workflow file AND an index.json progress update together:
+  - Workflow file: `.github/workflows/build-git-filter-repo.yml`
+  - index.json: set `"progress": 50` (keep `"status": "open"`)
+  - Commit message: `feature: add GitHub Actions CI workflow for git-filter-repo binary builds`
 
-### Wave 2
-- Push the branch to GitHub remote to make the workflow available
-  - Command: `git push -u origin 2.1-build-git-filter-repo-ci` (or current branch name)
-  - Files: (git push only)
+**Step 2: Push branch to GitHub remote**
+- Run: `git push -u origin 2.1-build-git-filter-repo-ci`
+- This is a git push only — no new commit needed
 
-### Wave 3
-- Trigger the workflow via GitHub Actions `workflow_dispatch`
-  - Command: `gh workflow run build-git-filter-repo.yml --ref <branch-name>`
-  - Wait for CI to complete and all 4 platform builds to succeed
-  - Command: Poll `gh run list --workflow=build-git-filter-repo.yml --limit 1` until status is `completed`
-  - Files: (CI execution only)
+**Step 3: Trigger CI workflow and wait for completion**
+- Trigger: `gh workflow run build-git-filter-repo.yml --ref 2.1-build-git-filter-repo-ci`
+- Poll until complete: `gh run list --workflow=build-git-filter-repo.yml --limit 1 --json status,conclusion`
+- Wait for all 4 platform jobs to succeed (status=completed, conclusion=success)
+- If any job fails, report the failure and stop
 
-### Wave 4
-- Download SHA256 artifacts from the completed CI run
-  - Extract RELEASE_TAG from the CI build output
-  - Download `.sha256` files from GitHub release or CI artifacts
-  - Update `plugin/.git-filter-repo-config/release.conf` with:
-    - `RELEASE_TAG` (from CI run tag or "git-filter-repo-latest")
-    - `PLATFORM_SHA256_linux_x64` (from git-filter-repo-linux-x64.sha256)
-    - `PLATFORM_SHA256_linux_aarch64` (from git-filter-repo-linux-aarch64.sha256)
-    - `PLATFORM_SHA256_macos_x64` (from git-filter-repo-macos-x64.sha256)
-    - `PLATFORM_SHA256_macos_aarch64` (from git-filter-repo-macos-aarch64.sha256)
-  - Files: `plugin/.git-filter-repo-config/release.conf`
+**Step 4: Collect SHA256 hashes and update release.conf**
+- Download the `.sha256` artifact files from the completed CI run using `gh run download`
+- Update `plugin/.git-filter-repo-config/release.conf` with the real SHA256 values:
+  - `RELEASE_TAG` — from the CI run's tag or release name
+  - `PLATFORM_SHA256_linux_x64` — from `git-filter-repo-linux-x64.sha256`
+  - `PLATFORM_SHA256_linux_aarch64` — from `git-filter-repo-linux-aarch64.sha256`
+  - `PLATFORM_SHA256_macos_x64` — from `git-filter-repo-macos-x64.sha256`
+  - `PLATFORM_SHA256_macos_aarch64` — from `git-filter-repo-macos-aarch64.sha256`
+- Final commit with both the updated release.conf AND the closed index.json:
+  - release.conf: `plugin/.git-filter-repo-config/release.conf`
+  - index.json: set `"status": "closed"`, `"progress": 100`
+  - Commit message: `feature: update release.conf with real SHA256 hashes from CI builds`
 
 ## Post-conditions
 - [ ] `.github/workflows/build-git-filter-repo.yml` exists with all 4 platform build configs