Repository navigation

ci: run workflows on main (not master); rebaseline bundle gate; fix stale embed test #5

	name: Claude Code Review

	on:
	pull_request:
	types: [opened, synchronize, ready_for_review, reopened]
	# Optional: Only run on specific file changes
	# paths:
	# - "src/*/.ts"
	# - "src/*/.tsx"
	# - "src/*/.js"
	# - "src/*/.jsx"

	jobs:
	claude-review:
	# Optional: Filter by PR author
	# if: \|
	# github.event.pull_request.user.login == 'external-contributor' \|\|
	# github.event.pull_request.user.login == 'new-developer' \|\|
	# github.event.pull_request.author_association == 'FIRST_TIME_CONTRIBUTOR'

	runs-on: ubuntu-latest
	permissions:
	contents: read
	pull-requests: read
	issues: read
	id-token: write

	steps:
	- name: Checkout repository
	uses: actions/checkout@v4
	with:
	fetch-depth: 1

	- name: Run Claude Code Review
	id: claude-review
	uses: anthropics/claude-code-action@v1
	with:
	# Either credential works; the public repo (post 2026-07-07
	# re-publish) has ANTHROPIC_API_KEY set. Keep both inputs so
	# whichever secret exists is picked up.
	claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
	anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
	plugin_marketplaces: 'https://github.com/anthropics/claude-code.git'
	plugins: 'code-review@claude-code-plugins'
	prompt: '/code-review:code-review ${{ github.repository }}/pull/${{ github.event.pull_request.number }}'
	# See https://github.com/anthropics/claude-code-action/blob/main/docs/usage.md
	# or https://code.claude.com/docs/en/cli-reference for available options