-
Notifications
You must be signed in to change notification settings - Fork 2
fix: issue and latest version pre-release #90
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: master
Are you sure you want to change the base?
Changes from all commits
aafaefe
20b64bf
f986504
72485f0
d89cdc4
cf825b0
File filter
Filter by extension
Conversations
Jump to
Diff view
Diff view
There are no files selected for viewing
Large diffs are not rendered by default.
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,27 @@ | ||
# GPT Computer Agent Configuration | ||
# Copy this file and rename it to .env, then fill in your actual API keys | ||
|
||
# OpenAI API Key - Get from https://platform.openai.com/api-keys | ||
OPENAI_API_KEY=your-openai-api-key-here | ||
|
||
# Anthropic API Key - Get from https://console.anthropic.com/ | ||
ANTHROPIC_API_KEY=your-anthropic-api-key-here | ||
|
||
# Application Settings | ||
DEBUG=false | ||
LOG_LEVEL=INFO | ||
|
||
# Database (SQLite by default) | ||
DATABASE_URL=sqlite:///./gpt_agent.db | ||
|
||
# First admin user (change these!) | ||
[email protected] | ||
FIRST_SUPERUSER_PASSWORD=changeme123 | ||
|
||
# JWT Settings | ||
SECRET_KEY=your-secret-key-here-change-this-in-production | ||
ACCESS_TOKEN_EXPIRE_MINUTES=1440 | ||
REFRESH_TOKEN_EXPIRE_DAYS=30 | ||
|
||
# LLM Provider (openai or anthropic) | ||
LLM_PROVIDER=openai |
This file was deleted.
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,53 @@ | ||
name: Claude Code Review | ||
|
||
on: | ||
pull_request: | ||
types: [opened, synchronize] | ||
# Optional: Only run on specific file changes | ||
# paths: | ||
# - "src/**/*.ts" | ||
# - "src/**/*.tsx" | ||
# - "src/**/*.js" | ||
# - "src/**/*.jsx" | ||
|
||
jobs: | ||
claude-review: | ||
# Optional: Filter by PR author | ||
# if: | | ||
# github.event.pull_request.user.login == 'external-contributor' || | ||
# github.event.pull_request.user.login == 'new-developer' || | ||
# github.event.pull_request.author_association == 'FIRST_TIME_CONTRIBUTOR' | ||
|
||
runs-on: ubuntu-latest | ||
permissions: | ||
contents: read | ||
pull-requests: read | ||
issues: read | ||
id-token: write | ||
|
||
steps: | ||
- name: Checkout repository | ||
uses: actions/checkout@v4 | ||
with: | ||
fetch-depth: 1 | ||
|
||
- name: Run Claude Code Review | ||
id: claude-review | ||
uses: anthropics/claude-code-action@v1 | ||
with: | ||
claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }} | ||
prompt: | | ||
Please review this pull request and provide feedback on: | ||
- Code quality and best practices | ||
- Potential bugs or issues | ||
- Performance considerations | ||
- Security concerns | ||
- Test coverage | ||
|
||
Use the repository's CLAUDE.md for guidance on style and conventions. Be constructive and helpful in your feedback. | ||
|
||
Use `gh pr comment` with your Bash tool to leave your review as a comment on the PR. | ||
|
||
# See https://github.com/anthropics/claude-code-action/blob/main/docs/usage.md | ||
# or https://docs.anthropic.com/en/docs/claude-code/sdk#command-line for available options | ||
claude_args: '--allowed-tools "Bash(gh issue view:*),Bash(gh search:*),Bash(gh issue list:*),Bash(gh pr comment:*),Bash(gh pr diff:*),Bash(gh pr view:*),Bash(gh pr list:*)"' |
Original file line number | Diff line number | Diff line change | ||||||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
@@ -0,0 +1,49 @@ | ||||||||||||||||||
name: Claude Code | ||||||||||||||||||
|
||||||||||||||||||
on: | ||||||||||||||||||
issue_comment: | ||||||||||||||||||
types: [created] | ||||||||||||||||||
pull_request_review_comment: | ||||||||||||||||||
types: [created] | ||||||||||||||||||
issues: | ||||||||||||||||||
types: [opened, assigned] | ||||||||||||||||||
pull_request_review: | ||||||||||||||||||
types: [submitted] | ||||||||||||||||||
|
||||||||||||||||||
jobs: | ||||||||||||||||||
claude: | ||||||||||||||||||
if: | | ||||||||||||||||||
(github.event_name == 'issue_comment' && contains(github.event.comment.body, '@claude')) || | ||||||||||||||||||
(github.event_name == 'pull_request_review_comment' && contains(github.event.comment.body, '@claude')) || | ||||||||||||||||||
(github.event_name == 'pull_request_review' && contains(github.event.review.body, '@claude')) || | ||||||||||||||||||
(github.event_name == 'issues' && (contains(github.event.issue.body, '@claude') || contains(github.event.issue.title, '@claude'))) | ||||||||||||||||||
runs-on: ubuntu-latest | ||||||||||||||||||
permissions: | ||||||||||||||||||
contents: read | ||||||||||||||||||
pull-requests: read | ||||||||||||||||||
issues: read | ||||||||||||||||||
id-token: write | ||||||||||||||||||
actions: read # Required for Claude to read CI results on PRs | ||||||||||||||||||
steps: | ||||||||||||||||||
- name: Checkout repository | ||||||||||||||||||
uses: actions/checkout@v4 | ||||||||||||||||||
with: | ||||||||||||||||||
fetch-depth: 1 | ||||||||||||||||||
|
||||||||||||||||||
- name: Run Claude Code | ||||||||||||||||||
id: claude | ||||||||||||||||||
uses: anthropics/claude-code-action@v1 | ||||||||||||||||||
with: | ||||||||||||||||||
Comment on lines
+33
to
+36
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. Lock the Claude workflow action to a commit SHA Same risk here— Apply this diff to constrain the action: - uses: anthropics/claude-code-action@v1
+ uses: anthropics/claude-code-action@<commit-sha> 📝 Committable suggestion
Suggested change
🤖 Prompt for AI Agents
|
||||||||||||||||||
claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }} | ||||||||||||||||||
|
||||||||||||||||||
# This is an optional setting that allows Claude to read CI results on PRs | ||||||||||||||||||
additional_permissions: | | ||||||||||||||||||
actions: read | ||||||||||||||||||
|
||||||||||||||||||
# Optional: Give a custom prompt to Claude. If this is not specified, Claude will perform the instructions specified in the comment that tagged it. | ||||||||||||||||||
# prompt: 'Update the pull request description to include a summary of changes.' | ||||||||||||||||||
|
||||||||||||||||||
# Optional: Add claude_args to customize behavior and configuration | ||||||||||||||||||
# See https://github.com/anthropics/claude-code-action/blob/main/docs/usage.md | ||||||||||||||||||
# or https://docs.anthropic.com/en/docs/claude-code/sdk#command-line for available options | ||||||||||||||||||
# claude_args: '--model claude-opus-4-1-20250805 --allowed-tools Bash(gh pr:*)' |
This file was deleted.
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,31 @@ | ||
# publish.yml | ||
|
||
name: "Publish" | ||
|
||
on: | ||
release: | ||
types: ["published"] | ||
|
||
jobs: | ||
pypi: | ||
name: "Build and publish release" | ||
runs-on: ubuntu-latest | ||
|
||
steps: | ||
- uses: actions/checkout@v4 | ||
|
||
- name: Install uv | ||
uses: astral-sh/setup-uv@v3 | ||
with: | ||
enable-cache: true | ||
cache-dependency-glob: uv.lock | ||
|
||
Comment on lines
+17
to
+22
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. 🛠️ Refactor suggestion | 🟠 Major 🧩 Analysis chainPin a Python version and verify cache input name
Suggested change: - - name: Install uv
- uses: astral-sh/setup-uv@v3
- with:
- enable-cache: true
- cache-dependency-glob: uv.lock
+ - name: Install uv
+ uses: astral-sh/setup-uv@v3
+ with:
+ enable-cache: true
+ python-version: "3.12"
+ cache-dependency-glob: uv.lock Also, consider adding --frozen to uv sync to enforce the lock: - - name: Run UV Sync
- run: |
- uv sync
+ - name: Run UV Sync
+ run: |
+ uv sync --frozen 🌐 Web query:
💡 Result: The action uses the input named cache-dependency-glob (not cache-dependency-path). The v3 README documents cache-dependency-glob and other inputs such as enable-cache, cache-suffix, cache-local-path, prune-cache, etc. [1][2] Sources: 🌐 Web query:
💡 Result: Short answer: No — the v3 action.yml for astral-sh/setup-uv does not provide a python-version input. The python-version input was added in later releases (examples/docs show it in v4/v6). Sources: astral-sh setup-uv v3 docs/README and later docs showing python-version. [1][2] Sources
Pin Python version and enforce UV lock
🤖 Prompt for AI Agents
|
||
- name: Run UV Sync | ||
run: | | ||
uv sync | ||
|
||
- name: Build | ||
run: uv build | ||
|
||
- name: Publish | ||
run: uv publish -t ${{ secrets.THE_PYPI_TOKEN }} |
This file was deleted.
This file was deleted.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Pin third-party action to an immutable revision
This workflow references
anthropics/claude-code-action@v1
, a mutable tag. If Anthropic ever force-pushes that tag, our reviews will execute unvetted code. Pin the action to a specific commit SHA (and document how to bump it) to keep the supply-chain surface bounded.Apply this diff to pin the action:
📝 Committable suggestion
🤖 Prompt for AI Agents