review-router/.github/workflows/reviewrouter-t0-reusable.yml at main · 777genius/review-router · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
name: ReviewRouter T0 Reusable

on:
  workflow_call:
    inputs:
      runtime_ref:
        description: 'Immutable ReviewRouter runtime commit SHA'
        required: true
        type: string
      api_url:
        description: 'ReviewRouter API URL used for OIDC runtime config'
        required: false
        type: string
        default: https://api.reviewrouter.site
      control_plane_url:
        description: 'ReviewRouter control plane URL; overrides api_url when set'
        required: false
        type: string
        default: ''
      runtime_config_mode:
        description: 'Runtime config mode; the T0 lane requires oidc'
        required: false
        type: string
        default: oidc
      static_runtime_env_json:
        description: 'JSON object with non-secret static fallback env values'
        required: false
        type: string
        default: '{}'
      pr_number:
        description: 'Pull request number selected by ReviewRouter'
        required: true
        type: string
      review_head_sha:
        description: 'Exact pull request head selected by ReviewRouter'
        required: true
        type: string
      provider_instance_id:
        description: 'Server-registered provider instance used by the T0 lane'
        required: true
        type: string
      workflow_schema_version:
        description: 'Server-registered hosted workflow schema version'
        required: true
        type: number
      codex_session_mode:
        description: 'Exact Codex session mode; empty preserves repository-owned execution'
        required: false
        type: string
        default: ''
      session_binding_id:
        description: 'Exact hosted pool repository binding identity'
        required: false
        type: string
        default: ''
      session_binding_version:
        description: 'Exact hosted pool repository binding revision'
        required: false
        type: number
        default: 0
      review_timeout_minutes:
        description: 'Full review lifecycle budget, including publication reconciliation and cleanup'
        required: false
        type: number
        default: 240
      max_changed_lines:
        description: 'Skip review above this changed-line count; zero disables the limit'
        required: false
        type: string
        default: '0'
    secrets:
      REVIEW_ROUTER_LEDGER_KEY:
        required: false
      CODEX_AUTH_JSON:
        required: false
      CODEX_CONFIG_TOML:
        required: false
      CLAUDE_CODE_OAUTH_TOKEN:
        required: false
      OPENAI_API_KEY:
        required: false
      OPENROUTER_API_KEY:
        required: false

jobs:
  review:
    name: review
    if: ${{ inputs.codex_session_mode != 'codex_subscription_oauth_hosted_pool' }}
    permissions:
      contents: read
      pull-requests: read
      id-token: write
    uses: ./.github/workflows/reviewrouter-execution-reusable.yml
    with:
      review_action_lane: t0
      runtime_ref: ${{ inputs.runtime_ref }}
      api_url: ${{ inputs.control_plane_url || inputs.api_url }}
      control_plane_url: ${{ inputs.control_plane_url }}
      runtime_config_mode: ${{ inputs.runtime_config_mode }}
      static_runtime_env_json: ${{ inputs.static_runtime_env_json }}
      pr_number: ${{ inputs.pr_number }}
      review_head_sha: ${{ inputs.review_head_sha }}
      review_app_client_id: ''
      review_app_repository: ''
      provider_instance_id: ${{ inputs.provider_instance_id }}
      workflow_schema_version: ${{ inputs.workflow_schema_version }}
      codex_session_mode: ${{ inputs.codex_session_mode }}
      session_binding_id: ${{ inputs.session_binding_id }}
      session_binding_version: ${{ inputs.session_binding_version }}
      review_timeout_minutes: ${{ inputs.review_timeout_minutes }}
      max_changed_lines: ${{ inputs.max_changed_lines }}
    secrets:
      REVIEW_ROUTER_LEDGER_KEY: ${{ secrets.REVIEW_ROUTER_LEDGER_KEY }}
      CODEX_AUTH_JSON: ${{ secrets.CODEX_AUTH_JSON }}
      CODEX_CONFIG_TOML: ${{ secrets.CODEX_CONFIG_TOML }}
      CLAUDE_CODE_OAUTH_TOKEN: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
      OPENAI_API_KEY: ${{ secrets.OPENAI_API_KEY }}
      OPENROUTER_API_KEY: ${{ secrets.OPENROUTER_API_KEY }}

  review-hosted-pool:
    name: review
    if: ${{ inputs.codex_session_mode == 'codex_subscription_oauth_hosted_pool' }}
    permissions:
      contents: read
      pull-requests: read
      id-token: write
    uses: ./.github/workflows/reviewrouter-execution-reusable.yml
    with:
      review_action_lane: t0
      runtime_ref: ${{ inputs.runtime_ref }}
      api_url: ${{ inputs.control_plane_url || inputs.api_url }}
      control_plane_url: ${{ inputs.control_plane_url }}
      runtime_config_mode: ${{ inputs.runtime_config_mode }}
      static_runtime_env_json: ${{ inputs.static_runtime_env_json }}
      pr_number: ${{ inputs.pr_number }}
      review_head_sha: ${{ inputs.review_head_sha }}
      review_app_client_id: ''
      review_app_repository: ''
      provider_instance_id: ${{ inputs.provider_instance_id }}
      workflow_schema_version: ${{ inputs.workflow_schema_version }}
      codex_session_mode: ${{ inputs.codex_session_mode }}
      session_binding_id: ${{ inputs.session_binding_id }}
      session_binding_version: ${{ inputs.session_binding_version }}
      review_timeout_minutes: ${{ inputs.review_timeout_minutes }}
      max_changed_lines: ${{ inputs.max_changed_lines }}