claude: grant claude more capabilities to make fixes, but gated on triggering it from @natemcmaster

Author: natemcmaster

.github/actions/setup-dotnet/action.yml

@@ -0,0 +1,21 @@
+name: Setup .NET
+description: Checkout the repository and install .NET SDK versions used by this project
+
+inputs:
+  fetch-depth:
+    description: Number of commits to fetch (0 for full history)
+    default: "1"
+
+runs:
+  using: composite
+  steps:
+    - uses: actions/checkout@v6
+      with:
+        fetch-depth: ${{ inputs.fetch-depth }}
+    - name: Setup .NET
+      uses: actions/setup-dotnet@v5
+      with:
+        dotnet-version: |
+          8.x
+          9.x
+          10.x

.github/workflows/ci.yml

@@ -33,14 +33,7 @@ jobs:
       package_version: ${{ steps.build_script.outputs.package_version }}
 
     steps:
-      - uses: actions/checkout@v6
-      - name: Setup .NET
-        uses: actions/setup-dotnet@v5
-        with:
-          dotnet-version: |
-            8.x
-            9.x
-            10.x
+      - uses: ./.github/actions/setup-dotnet
       - name: Run build script
         id: build_script
         run: ./build.ps1 -ci

.github/workflows/claude.yml

@@ -14,23 +14,24 @@ jobs:
   claude:
     if: |
       (
-        (github.event_name == 'issue_comment' && contains(github.event.comment.body, '@claude')) ||
-        (github.event_name == 'pull_request_review_comment' && contains(github.event.comment.body, '@claude')) ||
-        (github.event_name == 'pull_request_review' && contains(github.event.review.body, '@claude')) ||
-        (github.event_name == 'issues' && (contains(github.event.issue.body, '@claude') || contains(github.event.issue.title, '@claude')))
+        (github.event_name == 'issue_comment' && contains(github.event.comment.body, '@claude') &&
+          (github.event.comment.author_association == 'OWNER' || github.event.comment.author_association == 'MEMBER' || github.event.comment.author_association == 'COLLABORATOR')) ||
+        (github.event_name == 'pull_request_review_comment' && contains(github.event.comment.body, '@claude') &&
+          (github.event.comment.author_association == 'OWNER' || github.event.comment.author_association == 'MEMBER' || github.event.comment.author_association == 'COLLABORATOR')) ||
+        (github.event_name == 'pull_request_review' && contains(github.event.review.body, '@claude') &&
+          (github.event.review.author_association == 'OWNER' || github.event.review.author_association == 'MEMBER' || github.event.review.author_association == 'COLLABORATOR')) ||
+        (github.event_name == 'issues' && (contains(github.event.issue.body, '@claude') || contains(github.event.issue.title, '@claude')) &&
+          (github.event.issue.author_association == 'OWNER' || github.event.issue.author_association == 'MEMBER' || github.event.issue.author_association == 'COLLABORATOR'))
       )
     runs-on: ubuntu-latest
     permissions:
-      contents: read
+      contents: write
       pull-requests: write
       issues: write
       id-token: write
       actions: read # Required for Claude to read CI results on PRs
     steps:
-      - name: Checkout repository
-        uses: actions/checkout@v6
-        with:
-          fetch-depth: 1
+      - uses: ./.github/actions/setup-dotnet
 
       - name: Run Claude Code
         id: claude
@@ -45,5 +46,5 @@ jobs:
           # Optional: Add claude_args to customize behavior and configuration
           # See https://github.com/anthropics/claude-code-action/blob/main/docs/usage.md
           # or https://code.claude.com/docs/en/cli-reference for available options
-          claude_args: '--model opus --allowed-tools "Bash(gh issue view:*),Bash(gh issue comment:*),Bash(gh search:*),Bash(gh issue list:*),Bash(gh pr comment:*),Bash(gh pr diff:*),Bash(gh pr view:*),Bash(gh pr list:*)"'
+          claude_args: '--model opus'
 

.github/workflows/docs.yml

@@ -20,14 +20,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-    - uses: actions/checkout@v6
-    - name: Setup .NET
-      uses: actions/setup-dotnet@v5
-      with:
-        dotnet-version: |
-          8.x
-          9.x
-          10.x
+    - uses: ./.github/actions/setup-dotnet
     - name: Run docs generation
       run: ./docs/generate.ps1
 

CLAUDE.md

@@ -96,7 +96,7 @@ return app.Execute(args);
 - Nullable reference types enabled
 - Warnings treated as errors
 - Code style enforced in build (`EnforceCodeStyleInBuild=true`)
-- Format check: `dotnet tool run dotnet-format`
+- Run `dotnet format` to auto-fix formatting before committing
 
 ## Testing
 
@@ -130,6 +130,17 @@ The build script runs the complete validation pipeline including tests, samples,
 
 This approach ensures code correctness, prevents regressions, and validates that tests actually catch the issues they're meant to detect. The test suite already has good coverage and patterns to follow.
 
+## Pull Requests
+
+When asked to fix an issue or implement a change via GitHub, follow this workflow:
+
+1. Create a branch with the `claude/` prefix (e.g., `claude/fix-null-ref`, `claude/issue-123`). Never push directly to `main`.
+2. Make the changes, following the TDD approach described above when applicable.
+3. Run `pwsh -File build.ps1` to validate the full build passes before pushing.
+4. Push the branch and open a PR.
+5. Link the PR to the relevant issue using `Fixes #N` in the PR body.
+6. Keep PRs focused — only change what's needed to address the issue. Don't refactor surrounding code or add unrelated improvements.
+
 ## Commit Guidelines
 
 **IMPORTANT:** Use Conventional Commit format for all commit messages. This ensures consistency and enables automated changelog generation.