A repository owner wants an agent to run only when a maintainer manually starts a GitHub Actions workflow. The workflow must accept an issue number, read issue context, create a branch with proposed changes, and open a draft pull request. Which option completes the workflow?

name: invoke-agent

on:
  (Missing value 1):
    inputs:
      issue_number:
        description: Issue number for the agent task
        required: true
        type: string
      run_mode:
        description: plan or implement
        required: true
        type: choice
        options:
          - plan
          - implement

permissions:
  contents: write
  (Missing value 2): read
  pull-requests: write

jobs:
  agent:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4

         - name: Invoke repository agent
           env:
             GH_TOKEN: ${{ github.token }}
             ISSUE_NUMBER: ${{ inputs.issue_number }}
             RUN_MODE: ${{ inputs.run_mode }}
           (Missing value 3): |
             ./scripts/repo-agent \
                --issue "$ISSUE_NUMBER" \
                --mode "$RUN_MODE" \
                --draft-pr