From fa4a1791f39bbd83b1fd135cc2ed3774294f5c33 Mon Sep 17 00:00:00 2001 From: AmirHossein Roozbahani Date: Thu, 23 Jul 2026 04:46:43 +0200 Subject: [PATCH 1/5] ci: let review agent read the plugin cache (fixes code-review skill) The requesting-code-review skill reads code-reviewer.md from the plugin cache (~/.claude/plugins), which claude-code-action's repo-only sandbox blocks. Grant read access via project settings (settingSources: project), loaded without touching the workflow file. Track the shared settings file via a .gitignore negation instead of force-add. Verified: review ran full (21 turns, is_error:false) on this branch. Co-Authored-By: Claude Opus 4.8 --- .claude/settings.json | 5 +++++ .gitignore | 5 +++-- 2 files changed, 8 insertions(+), 2 deletions(-) create mode 100644 .claude/settings.json diff --git a/.claude/settings.json b/.claude/settings.json new file mode 100644 index 0000000..fe99239 --- /dev/null +++ b/.claude/settings.json @@ -0,0 +1,5 @@ +{ + "permissions": { + "additionalDirectories": ["/home/runner/.claude/plugins"] + } +} diff --git a/.gitignore b/.gitignore index 75e546b..1c09cc8 100644 --- a/.gitignore +++ b/.gitignore @@ -9,8 +9,9 @@ wheels/ # Virtual environments .venv -# Claude Code settings -.claude +# Claude Code settings (track shared project settings; ignore everything else) +.claude/* +!.claude/settings.json .worktrees/ From c34a7babf5882cfe5d920b1b1ca1fde455ce1105 Mon Sep 17 00:00:00 2001 From: AmirHossein Roozbahani Date: Thu, 23 Jul 2026 04:54:26 +0200 Subject: [PATCH 2/5] ci: allow the agent App bot to trigger PR review Agents push feature branches as claude-agent-ahrzb (App identity), which claude-code-action blocks by default. Scope allowed_bots to that bot only (not '*') so only our agents' pushes trigger a review. Co-Authored-By: Claude Opus 4.8 --- .github/workflows/claude-review.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/claude-review.yml b/.github/workflows/claude-review.yml index 7eae945..5d7d0dc 100644 --- a/.github/workflows/claude-review.yml +++ b/.github/workflows/claude-review.yml @@ -25,6 +25,7 @@ jobs: - uses: anthropics/claude-code-action@v1 with: claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }} + allowed_bots: claude-agent-ahrzb # agents push feature branches as this App bot plugin_marketplaces: https://github.com/anthropics/claude-plugins-official.git plugins: superpowers@claude-plugins-official claude_args: --model claude-sonnet-5 --max-turns 20 From 797f1bce35f179609d5d92993fc89bbbef6233cc Mon Sep 17 00:00:00 2001 From: AmirHossein Roozbahani Date: Thu, 23 Jul 2026 05:00:21 +0200 Subject: [PATCH 3/5] ci: drop show_full_output debug flag from review workflow MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Public repo — show_full_output publishes the review agent's full transcript to public Actions logs. It was a temporary capture flag; remove it so the merge to master also clears it there. Co-Authored-By: Claude Opus 4.8 --- .github/workflows/claude-review.yml | 1 - 1 file changed, 1 deletion(-) diff --git a/.github/workflows/claude-review.yml b/.github/workflows/claude-review.yml index 5d7d0dc..6fde852 100644 --- a/.github/workflows/claude-review.yml +++ b/.github/workflows/claude-review.yml @@ -29,7 +29,6 @@ jobs: plugin_marketplaces: https://github.com/anthropics/claude-plugins-official.git plugins: superpowers@claude-plugins-official claude_args: --model claude-sonnet-5 --max-turns 20 - show_full_output: true prompt: | Review this pull request. From 3bb3987bd21089e81bad71204393afc5186885d2 Mon Sep 17 00:00:00 2001 From: AmirHossein Roozbahani Date: Thu, 23 Jul 2026 05:25:21 +0200 Subject: [PATCH 4/5] ci: post the review to the PR (track_progress + sticky comment) The review agent produced its findings as final text but never called a GitHub comment tool, and every auto-post flag was off, so nothing landed on the PR. track_progress posts the report as a tracking comment; use_sticky_comment keeps it to one comment per PR across pushes. Co-Authored-By: Claude Opus 4.8 --- .github/workflows/claude-review.yml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/.github/workflows/claude-review.yml b/.github/workflows/claude-review.yml index 6fde852..3c3ddd2 100644 --- a/.github/workflows/claude-review.yml +++ b/.github/workflows/claude-review.yml @@ -29,6 +29,8 @@ jobs: plugin_marketplaces: https://github.com/anthropics/claude-plugins-official.git plugins: superpowers@claude-plugins-official claude_args: --model claude-sonnet-5 --max-turns 20 + track_progress: true # post the review to the PR as a comment + use_sticky_comment: true # reuse one comment per PR instead of one per push prompt: | Review this pull request. From 220b8df7741f0feba80e97553ee58c581282cfe2 Mon Sep 17 00:00:00 2001 From: AmirHossein Roozbahani Date: Thu, 23 Jul 2026 05:40:12 +0200 Subject: [PATCH 5/5] =?UTF-8?q?ci:=20actually=20post=20the=20review=20?= =?UTF-8?q?=E2=80=94=20grant=20comment=20tools=20+=20instruct=20posting?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit track_progress alone was not enough. Per Anthropic's canonical pr-review-comprehensive.yml example, the agent needs the comment tools granted in --allowedTools (mcp__github_inline_comment + gh pr comment) and an explicit instruction to post; otherwise it reviews and exits without writing anything to the PR. Drop use_sticky_comment (not in the recipe). Co-Authored-By: Claude Opus 4.8 --- .github/workflows/claude-review.yml | 23 ++++++++++++++++------- 1 file changed, 16 insertions(+), 7 deletions(-) diff --git a/.github/workflows/claude-review.yml b/.github/workflows/claude-review.yml index 3c3ddd2..9395fdf 100644 --- a/.github/workflows/claude-review.yml +++ b/.github/workflows/claude-review.yml @@ -28,14 +28,23 @@ jobs: allowed_bots: claude-agent-ahrzb # agents push feature branches as this App bot plugin_marketplaces: https://github.com/anthropics/claude-plugins-official.git plugins: superpowers@claude-plugins-official - claude_args: --model claude-sonnet-5 --max-turns 20 - track_progress: true # post the review to the PR as a comment - use_sticky_comment: true # reuse one comment per PR instead of one per push + # Grant the comment tools — without these the agent has no way to + # write anything back to the PR (this was the "nothing gets posted" bug). + claude_args: >- + --model claude-sonnet-5 --max-turns 30 + --allowedTools "mcp__github_inline_comment__create_inline_comment,Bash(gh pr comment:*),Bash(gh pr diff:*),Bash(gh pr view:*)" + track_progress: true # tracking comment + PR context prompt: | - Review this pull request. + Review this pull request. Use the superpowers:requesting-code-review + skill for the review methodology, diffing the PR branch against + ${{ github.event.pull_request.base.ref }}. - Use the superpowers:requesting-code-review skill and follow it exactly. - Diff the PR branch against ${{ github.event.pull_request.base.ref }}. + Then POST the review to GitHub — a review that isn't posted is useless: + - inline comments (mcp__github_inline_comment__create_inline_comment) + for specific, line-level issues + - one top-level PR comment (`gh pr comment`) for the overall summary + and assessment Report only what you verified in the diff. No speculative findings, no - style nits. If nothing needs changing, say so in one line. + style nits. If nothing needs changing, post a one-line top-level + comment saying so.