Fix Claude Review error

Signed-off-by: Quanyi Ma <eli@patch.sh>

Author: genedna

.github/workflows/claude-review.yml

@@ -33,33 +33,16 @@ jobs:
   claude-review-with-tracking:
     runs-on: ubuntu-latest
 
-    # Only run for trusted authors or when explicitly mentioned by them
+    # Run on PRs or when explicitly triggered via comments
     if: |
-          (
-            github.event_name == 'pull_request_target' &&
-            (
-              github.event.pull_request.author_association == 'OWNER' ||
-              github.event.pull_request.author_association == 'MEMBER' ||
-              github.event.pull_request.author_association == 'COLLABORATOR'
-            )
-          ) ||
+          github.event_name == 'pull_request_target' ||
           (
             (github.event_name == 'issue_comment' || github.event_name == 'pull_request_review_comment') &&
-            contains(github.event.comment.body, '@claude') &&
-            (
-              github.event.comment.author_association == 'OWNER' ||
-              github.event.comment.author_association == 'MEMBER' ||
-              github.event.comment.author_association == 'COLLABORATOR'
-            )
+            contains(github.event.comment.body, '@claude')
           ) ||
           (
             github.event_name == 'pull_request_review' &&
-            contains(github.event.review.body, '@claude') &&
-            (
-              github.event.review.author_association == 'OWNER' ||
-              github.event.review.author_association == 'MEMBER' ||
-              github.event.review.author_association == 'COLLABORATOR'
-            )
+            contains(github.event.review.body, '@claude')
           )
 
     steps:
@@ -71,15 +54,35 @@ jobs:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: |
           PR_NUMBER=${{ github.event.issue.number }}
-          echo "Resolving HEAD SHA for PR #$PR_NUMBER..."
-          PR_SHA=$(gh pr view $PR_NUMBER --repo ${{ github.repository }} --json headRefOid -q .headRefOid)
+          echo "Resolving HEAD SHA and Repo for PR #$PR_NUMBER..."
+          
+          # Get SHA and Repo Name using gh
+          # Note: Using awk implies fields are space-separated and don't contain spaces themselves,
+          # which is safe for git SHAs and "owner/repo" strings.
+          # We use a conditional template to handle cases where the head repository (fork) might be deleted/null.
+          RESOLVED=$(gh pr view $PR_NUMBER --repo ${{ github.repository }} --json headRefOid,headRepository --template '{{.headRefOid}} {{if .headRepository}}{{.headRepository.owner.login}}/{{.headRepository.name}}{{else}}MISSING{{end}}')
+          
+          PR_SHA=$(echo "$RESOLVED" | awk '{print $1}')
+          PR_REPO=$(echo "$RESOLVED" | awk '{print $2}')
+          
           echo "Resolved SHA: $PR_SHA"
+          echo "Resolved Repo: $PR_REPO"
+          
+          # Check for valid repository format (owner/repo)
+          if [ "$PR_REPO" = "MISSING" ] || [[ "$PR_REPO" != *"/"* ]]; then
+              echo "Warning: Could not resolve source repository (fork might be deleted). Falling back to base repository."
+              PR_REPO="${{ github.repository }}"
+          fi
+          
           echo "pr_sha=$PR_SHA" >> $GITHUB_OUTPUT
+          echo "pr_repo=$PR_REPO" >> $GITHUB_OUTPUT
 
       # Checkout the repository at the appropriate commit for review
       - name: Checkout repository
         uses: actions/checkout@v6
         with:
+          # Checkout the PR source repository (fork) to ensure branches exist for the action
+          repository: ${{ steps.resolve-pr-ref.outputs.pr_repo || github.event.pull_request.head.repo.full_name || github.repository }}
           # Use PR head SHA for pull_request_target to review the actual PR code
           # For comment events, this will default to the base branch (PR context is inferred by Claude action)
           ref: ${{ steps.resolve-pr-ref.outputs.pr_sha || github.event.pull_request.head.sha || github.sha }}
@@ -105,6 +108,7 @@ jobs:
         with:
           anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
           github_token: ${{ secrets.GITHUB_TOKEN }}
+          allowed_non_write_users: "*"
 
           # Enable progress tracking and show full Claude output in logs
           track_progress: true
@@ -145,4 +149,4 @@ jobs:
 
           # Restrict tools that Claude can use during the review
           claude_args: |
-            --allowedTools "mcp__github_inline_comment__create_inline_comment,Bash(gh pr comment:*),Bash(gh pr diff:*),Bash(gh pr view:*)"
+            --allowedTools "mcp__github__,mcp__github_inline_comment__,Bash(gh)"