fix(ci): open a PR for generated samples instead of pushing to protected main

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

.github/workflows/generate-samples.yml

@@ -12,10 +12,12 @@ on:
 
 permissions:
   contents: write
+  pull-requests: write
 
 jobs:
   generate:
     runs-on: ubuntu-latest
+    timeout-minutes: 20
     steps:
       - uses: actions/checkout@v4
       - uses: actions/setup-node@v4
@@ -32,14 +34,18 @@ jobs:
           fi
           node scripts/build-samples.mjs --generate-missing
 
-      - name: Commit new samples
+      # main is protected (requires PRs), so open a PR instead of pushing directly.
-        run: |
+      - name: Open a PR with the new samples
-          if ! git diff --quiet -- examples/samples web/samples.json; then
+        uses: peter-evans/create-pull-request@v7
-            git config user.name "github-actions[bot]"
+        with:
-            git config user.email "github-actions[bot]@users.noreply.github.com"
+          add-paths: |
-            git add examples/samples web/samples.json
+            examples/samples
-            git commit -m "chore(samples): generate sample outputs for the gallery"
+            web/samples.json
-            git push
+          branch: sample-outputs
-          else
+          delete-branch: true
-            echo "No new samples to commit."
+          commit-message: "chore(samples): generate sample outputs for the gallery"
-          fi
+          title: "chore(samples): generate sample outputs for the gallery"
+          body: |
+            Auto-generated by the **Generate Sample Outputs** workflow using the
+            ANTHROPIC_API_KEY secret. Adds real model outputs to the sample gallery
+            (examples.html). Hand-written samples are never overwritten.