Apply CodeRabbit suggestions for PR AutoForgeAI#118

- Fix workflows to trigger on master branch instead of main
- Protect DuckDNS cron file with chmod 600 (security fix)
- Fix gemini_client.py to handle string delta.content in streaming
- Fix scripts/deploy.sh to extract DuckDNS subdomain properly

Author: Agent-Planner

.github/workflows/ci.yml

@@ -2,7 +2,7 @@ name: Push CI
 
 on:
   push:
-    branches: [main]
+    branches: [master]
 
 jobs:
   repo-guards:

.github/workflows/deploy.yml

@@ -3,7 +3,7 @@ name: Deploy to VPS
 on:
   workflow_run:
     workflows: ["Push CI"]
-    branches: [main]
+    branches: [master]
     types:
       - completed
 

.github/workflows/pr-check.yml

@@ -2,7 +2,7 @@ name: PR Check
 
 on:
   pull_request:
-    branches: [main]
+    branches: [master]
 
 permissions:
   contents: read

deploy.sh

@@ -169,7 +169,7 @@ configure_duckdns() {
   cat > "${cron_file}" <<EOF
 */5 * * * * root curl -fsS "https://www.duckdns.org/update?domains=${DUCKDNS_SUBDOMAIN}&token=${DUCKDNS_TOKEN}&ip=" >/var/log/duckdns.log 2>&1
 EOF
-  chmod 644 "${cron_file}"
+  chmod 600 "${cron_file}"
 
   # Run once immediately.
   curl -fsS "https://www.duckdns.org/update?domains=${DUCKDNS_SUBDOMAIN}&token=${DUCKDNS_TOKEN}&ip=" \

scripts/deploy.sh

@@ -30,6 +30,13 @@ prompt_required DOMAIN "Enter your DuckDNS domain (e.g., myapp.duckdns.org)"
 prompt_required DUCKDNS_TOKEN "Enter your DuckDNS token"
 prompt_required LETSENCRYPT_EMAIL "Enter email for Let's Encrypt notifications"
 
+# Extract subdomain for DuckDNS API (it expects just the subdomain, not full domain)
+if [[ "${DOMAIN}" == *.duckdns.org ]]; then
+  DUCKDNS_SUBDOMAIN="${DOMAIN%.duckdns.org}"
+else
+  DUCKDNS_SUBDOMAIN="${DOMAIN}"
+fi
+
 read -r -p "Git repo URL [https://github.com/heidi-dang/autocoder.git]: " REPO_URL
 REPO_URL=${REPO_URL:-https://github.com/heidi-dang/autocoder.git}
 
@@ -75,11 +82,11 @@ configure_duckdns() {
   echo "Configuring DuckDNS..."
   local cron_file="/etc/cron.d/duckdns"
   cat > "$cron_file" <<EOF
-*/5 * * * * root curl -fsS "https://www.duckdns.org/update?domains=$DOMAIN&token=$DUCKDNS_TOKEN&ip=" >/var/log/duckdns.log 2>&1
+*/5 * * * * root curl -fsS "https://www.duckdns.org/update?domains=$DUCKDNS_SUBDOMAIN&token=$DUCKDNS_TOKEN&ip=" >/var/log/duckdns.log 2>&1
 EOF
-  chmod 644 "$cron_file"
+  chmod 600 "$cron_file"
   # Run once immediately
-  curl -fsS "https://www.duckdns.org/update?domains=$DOMAIN&token=$DUCKDNS_TOKEN&ip=" >/var/log/duckdns.log 2>&1 || true
+  curl -fsS "https://www.duckdns.org/update?domains=$DUCKDNS_SUBDOMAIN&token=$DUCKDNS_TOKEN&ip=" >/var/log/duckdns.log 2>&1 || true
 }
 
 clone_repo() {

server/gemini_client.py

@@ -73,8 +73,12 @@ async def stream_chat(
         for choice in chunk.choices:
             delta = choice.delta
             if delta and delta.content:
-                # delta.content is a list of content parts
-                for part in delta.content:
-                    text = getattr(part, "text", None) or part.get("text") if isinstance(part, dict) else None
-                    if text:
-                        yield text
+                # OpenAI SDK 1.52+ returns delta.content as a string
+                if isinstance(delta.content, str):
+                    yield delta.content
+                else:
+                    # Fallback for list-based content parts (older versions)
+                    for part in delta.content:
+                        text = getattr(part, "text", None) or (part.get("text") if isinstance(part, dict) else None)
+                        if text:
+                            yield text