chore(review): activate auth epoch 3 #6369
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: ReviewRouter Interaction | |
| on: | |
| pull_request_review_comment: | |
| types: [created, edited] | |
| issue_comment: | |
| types: [created, edited] | |
| workflow_dispatch: | |
| permissions: | |
| actions: write | |
| contents: read | |
| pull-requests: write | |
| issues: write | |
| id-token: write | |
| jobs: | |
| interaction: | |
| name: interaction | |
| runs-on: ubuntu-24.04 | |
| if: ${{ github.event_name == 'workflow_dispatch' || ((github.event_name != 'issue_comment' || github.event.issue.pull_request) && github.event.comment.user.type != 'Bot') }} | |
| env: | |
| RR_RUNTIME_REF: "626739854b5c67d94b3f0118738c106b4a232c41" | |
| REVIEWROUTER_API_URL: "https://api.reviewrouter.site" | |
| REVIEWROUTER_OIDC_AUDIENCE: "reviewrouter" | |
| REVIEWROUTER_RUNTIME_CONFIG_MODE: "oidc" | |
| REVIEWROUTER_STATIC_CONFIG_FALLBACK: "true" | |
| REVIEWROUTER_COMMENT_TOKEN_MODE: "app-oidc" | |
| CODEX_AUTH_JSON_PRESENT: ${{ secrets.REVIEWROUTER_CODEX_AUTH_JSON != '' && '1' || '0' }} | |
| REVIEW_ROUTER_REVIEW_WORKFLOW_FILE: "reviewrouter-codex.yml" | |
| REVIEW_ROUTER_MEMORY_ENABLED: "true" | |
| REVIEW_ROUTER_MEMORY_PROTOCOL_VERSION: "1" | |
| REVIEW_ROUTER_MEMORY_BUNDLE_ENDPOINT: "/api/action/v1/memory" | |
| REVIEW_ROUTER_MEMORY_CANDIDATE_ENDPOINT: "/api/action/v1/memory-candidates" | |
| REVIEW_ROUTER_MEMORY_COMMAND_ENDPOINT: "/api/action/v1/memory-commands" | |
| steps: | |
| - name: Checkout ReviewRouter interaction runtime | |
| uses: actions/checkout@v6 | |
| with: | |
| repository: 777genius/review-router | |
| ref: ${{ env.RR_RUNTIME_REF }} | |
| path: .reviewrouter-runtime | |
| persist-credentials: false | |
| - name: Setup Node.js | |
| uses: actions/setup-node@v6 | |
| with: | |
| node-version: "24" | |
| - name: Preflight ReviewRouter interaction | |
| id: preflight | |
| shell: bash | |
| env: | |
| GITHUB_TOKEN: ${{ github.token }} | |
| REVIEW_ROUTER_MODE: "interaction-preflight" | |
| REVIEW_ROUTER_DISCUSSION_MODE: ${{ vars.REVIEW_ROUTER_DISCUSSION_MODE || 'off' }} | |
| run: node .reviewrouter-runtime/dist/index.js | |
| - name: Install Codex CLI for discussion replies | |
| if: ${{ steps.preflight.outputs.needs_discussion == 'true' && env.CODEX_AUTH_JSON_PRESENT == '1' }} | |
| shell: bash | |
| run: npm install -g @openai/codex@0.141.0 | |
| - name: Restore Codex subscription auth for discussion replies | |
| if: ${{ steps.preflight.outputs.needs_discussion == 'true' && env.CODEX_AUTH_JSON_PRESENT == '1' }} | |
| shell: bash | |
| env: | |
| CODEX_AUTH_JSON: ${{ secrets.REVIEWROUTER_CODEX_AUTH_JSON }} | |
| run: | | |
| set -euo pipefail | |
| if [ -z "${CODEX_AUTH_JSON:-}" ]; then | |
| echo "::error::REVIEWROUTER_CODEX_AUTH_JSON secret is missing. Re-run ReviewRouter Codex setup." | |
| exit 1 | |
| fi | |
| export CODEX_HOME="${CODEX_HOME:-$HOME/.codex}" | |
| mkdir -p "$CODEX_HOME" | |
| chmod 700 "$CODEX_HOME" | |
| printf '%s' "$CODEX_AUTH_JSON" > "$CODEX_HOME/auth.json" | |
| chmod 600 "$CODEX_HOME/auth.json" | |
| - name: Run ReviewRouter interaction | |
| if: ${{ steps.preflight.outputs.should_run == 'true' }} | |
| shell: bash | |
| env: | |
| GITHUB_TOKEN: ${{ github.token }} | |
| REVIEW_ROUTER_MODE: "interaction" | |
| REVIEW_ROUTER_LEDGER_KEY: ${{ secrets.REVIEW_ROUTER_LEDGER_KEY }} | |
| REVIEW_ROUTER_DISCUSSION_MODE: ${{ vars.REVIEW_ROUTER_DISCUSSION_MODE || 'off' }} | |
| REVIEW_ROUTER_DISCUSSION_MAX_PER_PR: ${{ vars.REVIEW_ROUTER_DISCUSSION_MAX_PER_PR || '20' }} | |
| REVIEW_ROUTER_DISCUSSION_MAX_PER_THREAD: ${{ vars.REVIEW_ROUTER_DISCUSSION_MAX_PER_THREAD || '5' }} | |
| REVIEW_ROUTER_DISCUSSION_TIMEOUT_SECONDS: ${{ vars.REVIEW_ROUTER_DISCUSSION_TIMEOUT_SECONDS || '60' }} | |
| CODEX_MODEL: ${{ vars.REVIEW_CODEX_MODEL || 'gpt-5.5' }} | |
| CODEX_REASONING_EFFORT: ${{ vars.REVIEW_CODEX_EFFORT || 'medium' }} | |
| run: node .reviewrouter-runtime/dist/index.js |