Skip to content

docs(chat): clarify injectThreadRouting usage prerequisites #11

docs(chat): clarify injectThreadRouting usage prerequisites

docs(chat): clarify injectThreadRouting usage prerequisites #11

Workflow file for this run

name: Claude Review
# Genuine, advisory AI code review on every PR. Posts findings as PR
# comments. NOT a required status check — it never blocks a merge.
# Uses `pull_request` (not pull_request_target) so ANTHROPIC_API_KEY is
# never exposed to fork PRs.
on:
pull_request:
types: [opened, synchronize, reopened, ready_for_review]
permissions:
contents: read
jobs:
review:
runs-on: ubuntu-latest
timeout-minutes: 15
permissions:
contents: read
pull-requests: write
id-token: write # claude-code-action mints its GitHub token via OIDC
steps:
- name: Checkout
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
with:
fetch-depth: 1
- name: Claude review
uses: anthropics/claude-code-action@806af32823ef69c8ef357086c573a902af641307 # v1
with:
anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
track_progress: true
prompt: |
REPO: ${{ github.repository }}
PR NUMBER: ${{ github.event.pull_request.number }}
Review this pull request and post your findings as GitHub PR comments.
Read the diff with `gh pr diff` and the description with `gh pr view`.
This is an Nx monorepo of Angular/TypeScript libraries published as
`@threadplane/*`, plus a Python middleware. Focus on:
- Correctness bugs and broken behaviour
- Security issues (injection, secrets, unsafe input handling, workflow
script injection in .github/workflows)
- TypeScript type-safety problems and unsafe casts
- Angular/RxJS pitfalls (subscription leaks, change-detection misuse)
- Public API / DX regressions on the published `@threadplane/*` surface
- Missing or weak test coverage for the change
Post a concise top-level summary via `gh pr comment`. Post specific
issues as inline comments. Be brief; skip nitpicks and style unless
they affect correctness. If the PR looks good, say so briefly.
claude_args: |
--model claude-sonnet-4-6
--max-turns 15
--allowedTools "mcp__github_inline_comment__create_inline_comment,Bash(gh pr comment:*),Bash(gh pr diff:*),Bash(gh pr view:*)"