Import org-wide AGENTS.md, remove duplicated standards#23
Conversation
References shared standards from petry-projects/.github for TDD, CI gates, PR reviews, security, and agent guidance. Keeps only project-specific content in this repo's CLAUDE.md. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
|
Warning Rate limit exceeded
Your organization is not enrolled in usage-based pricing. Contact your admin to enable usage-based pricing to continue reviews beyond the rate limit, or try again in 10 minutes and 49 seconds. ⌛ How to resolve this issue?After the wait time has elapsed, a review can be triggered using the We recommend that you space out your commits to avoid hitting the rate limit. 🚦 How do rate limits work?CodeRabbit enforces hourly rate limits for each developer per organization. Our paid plans have higher rate limits than the trial, open-source and free plans. In all cases, we re-allow further reviews after a brief timeout. Please see our FAQ for further information. 📝 WalkthroughWalkthroughA new Changes
Estimated code review effort🎯 1 (Trivial) | ⏱️ ~3 minutes 🚥 Pre-merge checks | ✅ 3✅ Passed checks (3 passed)
✏️ Tip: You can configure your own custom pre-merge checks in the settings. ✨ Finishing Touches🧪 Generate unit tests (beta)
Comment |
There was a problem hiding this comment.
Pull request overview
Updates TalkTerm’s CLAUDE.md to reference centralized org-wide agent/development standards and reduce duplicated “generic” policy text, keeping this repo’s document focused on TalkTerm-specific guidance.
Changes:
- Adds references to
petry-projects/.github/AGENTS.mdas the source for shared org-wide standards. - Updates TDD / pre-commit / CI sections to explicitly extend org-wide standards while retaining project-specific configuration.
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
- Clarify that TalkTerm extends org-wide standards, not sole source of truth - Mark .claude/rules/ file references as planned but not yet created Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Follows the org convention where AGENTS.md is the comprehensive agent-agnostic file and CLAUDE.md is a Claude Code-specific summary with @import for org-wide standards. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
There was a problem hiding this comment.
Actionable comments posted: 2
🧹 Nitpick comments (2)
AGENTS.md (2)
84-106: Add language specifier to the directory structure code block.The fenced code block should specify a language for proper syntax highlighting and tooling compatibility. Use
textorplaintextfor the directory tree structure.📝 Proposed fix
-``` +```text src/ shared/types/ DOMAIN LAYER (entities, value objects, domain events)Based on static analysis hint: fenced code blocks should have a language specified (MD040).
🤖 Prompt for AI Agents
Verify each finding against the current code and only fix it if needed. In `@AGENTS.md` around lines 84 - 106, The fenced directory-tree code block (starting with "src/" and listing entries like "shared/types/", "main/", "renderer/", "preload/") needs a language specifier for proper linting; update the opening backticks from ``` to ```text (or ```plaintext) so the block becomes ```text and leave the tree content unchanged.
227-237: Add language specifier to the npm scripts code block.The fenced code block should specify a language. Use
bashorshellfor shell commands.📝 Proposed fix
-``` +```bash npm test → vitest run npm run test:watch → vitestBased on static analysis hint: fenced code blocks should have a language specified (MD040).
🤖 Prompt for AI Agents
Verify each finding against the current code and only fix it if needed. In `@AGENTS.md` around lines 227 - 237, The fenced code block listing npm scripts (the lines starting with "npm test → vitest run", "npm run test:watch → vitest", etc.) is missing a language specifier; update the opening backticks for that block from ``` to ```bash (or ```shell) so the markdown code fence includes a language (fixes MD040).
🤖 Prompt for all review comments with AI agents
Verify each finding against the current code and only fix it if needed.
Inline comments:
In `@CLAUDE.md`:
- Line 23: Update the docs to remove the contradiction between CLAUDE.md and
AGENTS.md by explicitly stating whether pre-commit checks run automatically via
Husky+lint-staged or must be run manually; either (A) change the CLAUDE.md entry
"Pre-commit checks run manually" to mention that Husky v9 + lint-staged v15 run
on every commit and keep the provided command as an alternative manual command,
or (B) if Husky isn't actually configured, update AGENTS.md to remove or
rephrase the Husky statement and note that contributors must run the command
chain (npm run lint && npm run format && npm run typecheck && npm test)
manually; make the change in CLAUDE.md and/or AGENTS.md so both files
consistently state the same workflow.
- Line 1: The CLAUDE.md file contains an invalid external directive
"@https://raw.githubusercontent.com/petry-projects/.github/main/AGENTS.md" which
Claude Code does not support; remove or replace this directive by either copying
the external AGENTS.md content into a local file and referencing it as a local
include (e.g., @./AGENTS.md), embedding the needed rules directly into CLAUDE.md
or .claude/rules/*.md, or switching to an MCP server reference if
available—update the directive accordingly so only supported include forms are
used.
---
Nitpick comments:
In `@AGENTS.md`:
- Around line 84-106: The fenced directory-tree code block (starting with "src/"
and listing entries like "shared/types/", "main/", "renderer/", "preload/")
needs a language specifier for proper linting; update the opening backticks from
``` to ```text (or ```plaintext) so the block becomes ```text and leave the tree
content unchanged.
- Around line 227-237: The fenced code block listing npm scripts (the lines
starting with "npm test → vitest run", "npm run test:watch → vitest", etc.) is
missing a language specifier; update the opening backticks for that block from
``` to ```bash (or ```shell) so the markdown code fence includes a language
(fixes MD040).
🪄 Autofix (Beta)
Fix all unresolved CodeRabbit comments on this PR:
- Push a commit to this branch (recommended)
- Create a new PR with the fixes
ℹ️ Review info
⚙️ Run configuration
Configuration used: Path: .coderabbit.yaml
Review profile: CHILL
Plan: Pro
Run ID: faa0f87e-f2c9-49c2-a3ae-fc4f7722ae52
📒 Files selected for processing (2)
AGENTS.mdCLAUDE.md
| @@ -1,256 +1,25 @@ | |||
| # TalkTerm — Project Context & Implementation Rules | |||
| @https://raw.githubusercontent.com/petry-projects/.github/main/AGENTS.md | |||
There was a problem hiding this comment.
🧩 Analysis chain
🌐 Web query:
What is the correct syntax for Claude Code to reference external rule files or standards documents via URL?
💡 Result:
There is no direct syntax in Claude Code for referencing external rule files or standards documents via URL using a simple @URL or similar construct. The @ syntax is primarily for local files (@filename or @/path/to/file) and MCP resources (@server:protocol://resource/path). To reference external documents via URL: 1. Provide the URL in your prompt (e.g., "Follow the standards at https://example.com/rules.md"). Claude Code can use the WebFetch tool (with permission via WebFetch(domain:example.com)) to fetch and analyze the content, as it supports web pages and PDFs. 2. For standards documents hosted via MCP servers (e.g., docs or GitHub MCP), use @server:file://path/to/document after configuring the MCP server with claude mcp add. Local alternatives for rules/standards: - Add to CLAUDE.md or .claude/rules/*.md (auto-loaded). - Use skills (SKILL.md) or --append-system-prompt-file ./rules.txt. No official docs show a direct @https://... syntax; URLs trigger WebFetch when Claude needs content.
Citations:
- 1: https://stevekinney.com/courses/ai-development/referencing-files-in-claude-code
- 2: https://code.claude.com/docs/en/mcp
- 3: https://docs.claude.com/en/docs/agents-and-tools/tool-use/web-fetch-tool
- 4: https://code.claude.com/docs/en/permissions
- 5: https://mcpcat.io/guides/reference-other-files/
- 6: https://code.claude.com/docs/en/cli-reference
Remove or replace the invalid @https://... directive on line 1.
The @https://... syntax is not supported by Claude Code. The @ directive supports only local file references (@filename or @/path/to/file) and MCP server resources (@server:protocol://resource/path). If you need Claude Code to apply external standards from the referenced URL, either:
- Copy the content from the external AGENTS.md into a local file and reference it locally (e.g.,
@./AGENTS.md). - Add the external rules directly to CLAUDE.md or
.claude/rules/*.md(auto-loaded by Claude Code). - Use an MCP server if the repository is configured with one.
🧰 Tools
🪛 LanguageTool
[uncategorized] ~1-~1: The official name of this software platform is spelled with a capital “H”.
Context: ...w.githubusercontent.com/petry-projects/.github/main/AGENTS.md # TalkTerm — Claude Cod...
(GITHUB)
🤖 Prompt for AI Agents
Verify each finding against the current code and only fix it if needed.
In `@CLAUDE.md` at line 1, The CLAUDE.md file contains an invalid external
directive
"@https://raw.githubusercontent.com/petry-projects/.github/main/AGENTS.md" which
Claude Code does not support; remove or replace this directive by either copying
the external AGENTS.md content into a local file and referencing it as a local
include (e.g., @./AGENTS.md), embedding the needed rules directly into CLAUDE.md
or .claude/rules/*.md, or switching to an MCP server reference if
available—update the directive accordingly so only supported include forms are
used.
| 3. **Mutation testing** — 80% minimum Stryker score | ||
| 4. **Clean Architecture** — dependencies point inward, never import outer from inner layers | ||
| 5. **DDD bounded contexts** — Agent, Storage, Security, Voice, Avatar, Overlay | ||
| 6. **Pre-commit checks run manually** — `npm run lint && npm run format && npm run typecheck && npm test` |
There was a problem hiding this comment.
Resolve inconsistency about pre-commit automation.
Line 23 states "Pre-commit checks run manually" and provides a command chain, but AGENTS.md line 139 states "Husky v9 + lint-staged v15 run on every commit (~15-40s total)", implying automatic pre-commit hooks are configured.
This creates confusion about whether developers need to run checks manually or if they run automatically via Husky. Please clarify and align the documentation.
Suggested resolutions
Option 1: If Husky is configured and runs automatically, update line 23:
-6. **Pre-commit checks run manually** — `npm run lint && npm run format && npm run typecheck && npm test`
+6. **Pre-commit checks run automatically via Husky** — or run manually: `npm run lint && npm run format && npm run typecheck && npm test`Option 2: If the project doesn't have Husky configured yet, update AGENTS.md line 137-139:
## 5. Pre-Commit Quality Checks
-> **Extends org-wide pre-commit standards.** Project-specific tooling below.
-
-Husky v9 + lint-staged v15 run on every commit (~15-40s total):
+> **Extends org-wide pre-commit standards.** Project-specific tooling below. (Husky setup planned)
+
+Run these checks manually before committing (~15-40s total):🤖 Prompt for AI Agents
Verify each finding against the current code and only fix it if needed.
In `@CLAUDE.md` at line 23, Update the docs to remove the contradiction between
CLAUDE.md and AGENTS.md by explicitly stating whether pre-commit checks run
automatically via Husky+lint-staged or must be run manually; either (A) change
the CLAUDE.md entry "Pre-commit checks run manually" to mention that Husky v9 +
lint-staged v15 run on every commit and keep the provided command as an
alternative manual command, or (B) if Husky isn't actually configured, update
AGENTS.md to remove or rephrase the Husky statement and note that contributors
must run the command chain (npm run lint && npm run format && npm run typecheck
&& npm test) manually; make the change in CLAUDE.md and/or AGENTS.md so both
files consistently state the same workflow.
Ensures Claude Code loads both org-wide and repo-specific agent guidelines. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
The @ import is a Claude Code feature that resolves GitHub blob URLs natively — raw.githubusercontent.com is unnecessary. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
|
* Import org-wide AGENTS.md, remove duplicated standards References shared standards from petry-projects/.github for TDD, CI gates, PR reviews, security, and agent guidance. Keeps only project-specific content in this repo's CLAUDE.md. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Address review comments: fix source-of-truth wording, note planned rules - Clarify that TalkTerm extends org-wide standards, not sole source of truth - Mark .claude/rules/ file references as planned but not yet created Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Move project rules to AGENTS.md, make CLAUDE.md a slim pointer Follows the org convention where AGENTS.md is the comprehensive agent-agnostic file and CLAUDE.md is a Claude Code-specific summary with @import for org-wide standards. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Add repo-level AGENTS.md import to CLAUDE.md Ensures Claude Code loads both org-wide and repo-specific agent guidelines. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Use standard GitHub blob URL for org-level import The @ import is a Claude Code feature that resolves GitHub blob URLs natively — raw.githubusercontent.com is unnecessary. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> --------- Co-authored-by: DJ <dj@Rachels-Air.localdomain> Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
* Import org-wide AGENTS.md, remove duplicated standards References shared standards from petry-projects/.github for TDD, CI gates, PR reviews, security, and agent guidance. Keeps only project-specific content in this repo's CLAUDE.md. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Address review comments: fix source-of-truth wording, note planned rules - Clarify that TalkTerm extends org-wide standards, not sole source of truth - Mark .claude/rules/ file references as planned but not yet created Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Move project rules to AGENTS.md, make CLAUDE.md a slim pointer Follows the org convention where AGENTS.md is the comprehensive agent-agnostic file and CLAUDE.md is a Claude Code-specific summary with @import for org-wide standards. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Add repo-level AGENTS.md import to CLAUDE.md Ensures Claude Code loads both org-wide and repo-specific agent guidelines. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Use standard GitHub blob URL for org-level import The @ import is a Claude Code feature that resolves GitHub blob URLs natively — raw.githubusercontent.com is unnecessary. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> --------- Co-authored-by: DJ <dj@Rachels-Air.localdomain> Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
* Import org-wide AGENTS.md, remove duplicated standards References shared standards from petry-projects/.github for TDD, CI gates, PR reviews, security, and agent guidance. Keeps only project-specific content in this repo's CLAUDE.md. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Address review comments: fix source-of-truth wording, note planned rules - Clarify that TalkTerm extends org-wide standards, not sole source of truth - Mark .claude/rules/ file references as planned but not yet created Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Move project rules to AGENTS.md, make CLAUDE.md a slim pointer Follows the org convention where AGENTS.md is the comprehensive agent-agnostic file and CLAUDE.md is a Claude Code-specific summary with @import for org-wide standards. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Add repo-level AGENTS.md import to CLAUDE.md Ensures Claude Code loads both org-wide and repo-specific agent guidelines. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Use standard GitHub blob URL for org-level import The @ import is a Claude Code feature that resolves GitHub blob URLs natively — raw.githubusercontent.com is unnecessary. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> --------- Co-authored-by: DJ <dj@Rachels-Air.localdomain> Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
* Import org-wide AGENTS.md, remove duplicated standards References shared standards from petry-projects/.github for TDD, CI gates, PR reviews, security, and agent guidance. Keeps only project-specific content in this repo's CLAUDE.md. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Address review comments: fix source-of-truth wording, note planned rules - Clarify that TalkTerm extends org-wide standards, not sole source of truth - Mark .claude/rules/ file references as planned but not yet created Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Move project rules to AGENTS.md, make CLAUDE.md a slim pointer Follows the org convention where AGENTS.md is the comprehensive agent-agnostic file and CLAUDE.md is a Claude Code-specific summary with @import for org-wide standards. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Add repo-level AGENTS.md import to CLAUDE.md Ensures Claude Code loads both org-wide and repo-specific agent guidelines. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Use standard GitHub blob URL for org-level import The @ import is a Claude Code feature that resolves GitHub blob URLs natively — raw.githubusercontent.com is unnecessary. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> --------- Co-authored-by: DJ <dj@Rachels-Air.localdomain> Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
* Import org-wide AGENTS.md, remove duplicated standards References shared standards from petry-projects/.github for TDD, CI gates, PR reviews, security, and agent guidance. Keeps only project-specific content in this repo's CLAUDE.md. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Address review comments: fix source-of-truth wording, note planned rules - Clarify that TalkTerm extends org-wide standards, not sole source of truth - Mark .claude/rules/ file references as planned but not yet created Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Move project rules to AGENTS.md, make CLAUDE.md a slim pointer Follows the org convention where AGENTS.md is the comprehensive agent-agnostic file and CLAUDE.md is a Claude Code-specific summary with @import for org-wide standards. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Add repo-level AGENTS.md import to CLAUDE.md Ensures Claude Code loads both org-wide and repo-specific agent guidelines. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Use standard GitHub blob URL for org-level import The @ import is a Claude Code feature that resolves GitHub blob URLs natively — raw.githubusercontent.com is unnecessary. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> --------- Co-authored-by: DJ <dj@Rachels-Air.localdomain> Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
* Import org-wide AGENTS.md, remove duplicated standards References shared standards from petry-projects/.github for TDD, CI gates, PR reviews, security, and agent guidance. Keeps only project-specific content in this repo's CLAUDE.md. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Address review comments: fix source-of-truth wording, note planned rules - Clarify that TalkTerm extends org-wide standards, not sole source of truth - Mark .claude/rules/ file references as planned but not yet created Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Move project rules to AGENTS.md, make CLAUDE.md a slim pointer Follows the org convention where AGENTS.md is the comprehensive agent-agnostic file and CLAUDE.md is a Claude Code-specific summary with @import for org-wide standards. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Add repo-level AGENTS.md import to CLAUDE.md Ensures Claude Code loads both org-wide and repo-specific agent guidelines. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Use standard GitHub blob URL for org-level import The @ import is a Claude Code feature that resolves GitHub blob URLs natively — raw.githubusercontent.com is unnecessary. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> --------- Co-authored-by: DJ <dj@Rachels-Air.localdomain> Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
* Import org-wide AGENTS.md, remove duplicated standards References shared standards from petry-projects/.github for TDD, CI gates, PR reviews, security, and agent guidance. Keeps only project-specific content in this repo's CLAUDE.md. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Address review comments: fix source-of-truth wording, note planned rules - Clarify that TalkTerm extends org-wide standards, not sole source of truth - Mark .claude/rules/ file references as planned but not yet created Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Move project rules to AGENTS.md, make CLAUDE.md a slim pointer Follows the org convention where AGENTS.md is the comprehensive agent-agnostic file and CLAUDE.md is a Claude Code-specific summary with @import for org-wide standards. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Add repo-level AGENTS.md import to CLAUDE.md Ensures Claude Code loads both org-wide and repo-specific agent guidelines. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Use standard GitHub blob URL for org-level import The @ import is a Claude Code feature that resolves GitHub blob URLs natively — raw.githubusercontent.com is unnecessary. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> --------- Co-authored-by: DJ <dj@Rachels-Air.localdomain> Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
* Import org-wide AGENTS.md, remove duplicated standards References shared standards from petry-projects/.github for TDD, CI gates, PR reviews, security, and agent guidance. Keeps only project-specific content in this repo's CLAUDE.md. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Address review comments: fix source-of-truth wording, note planned rules - Clarify that TalkTerm extends org-wide standards, not sole source of truth - Mark .claude/rules/ file references as planned but not yet created Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Move project rules to AGENTS.md, make CLAUDE.md a slim pointer Follows the org convention where AGENTS.md is the comprehensive agent-agnostic file and CLAUDE.md is a Claude Code-specific summary with @import for org-wide standards. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Add repo-level AGENTS.md import to CLAUDE.md Ensures Claude Code loads both org-wide and repo-specific agent guidelines. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Use standard GitHub blob URL for org-level import The @ import is a Claude Code feature that resolves GitHub blob URLs natively — raw.githubusercontent.com is unnecessary. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> --------- Co-authored-by: DJ <dj@Rachels-Air.localdomain> Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
* Import org-wide AGENTS.md, remove duplicated standards References shared standards from petry-projects/.github for TDD, CI gates, PR reviews, security, and agent guidance. Keeps only project-specific content in this repo's CLAUDE.md. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Address review comments: fix source-of-truth wording, note planned rules - Clarify that TalkTerm extends org-wide standards, not sole source of truth - Mark .claude/rules/ file references as planned but not yet created Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Move project rules to AGENTS.md, make CLAUDE.md a slim pointer Follows the org convention where AGENTS.md is the comprehensive agent-agnostic file and CLAUDE.md is a Claude Code-specific summary with @import for org-wide standards. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Add repo-level AGENTS.md import to CLAUDE.md Ensures Claude Code loads both org-wide and repo-specific agent guidelines. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Use standard GitHub blob URL for org-level import The @ import is a Claude Code feature that resolves GitHub blob URLs natively — raw.githubusercontent.com is unnecessary. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> --------- Co-authored-by: DJ <dj@Rachels-Air.localdomain> Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
* Import org-wide AGENTS.md, remove duplicated standards References shared standards from petry-projects/.github for TDD, CI gates, PR reviews, security, and agent guidance. Keeps only project-specific content in this repo's CLAUDE.md. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Address review comments: fix source-of-truth wording, note planned rules - Clarify that TalkTerm extends org-wide standards, not sole source of truth - Mark .claude/rules/ file references as planned but not yet created Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Move project rules to AGENTS.md, make CLAUDE.md a slim pointer Follows the org convention where AGENTS.md is the comprehensive agent-agnostic file and CLAUDE.md is a Claude Code-specific summary with @import for org-wide standards. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Add repo-level AGENTS.md import to CLAUDE.md Ensures Claude Code loads both org-wide and repo-specific agent guidelines. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Use standard GitHub blob URL for org-level import The @ import is a Claude Code feature that resolves GitHub blob URLs natively — raw.githubusercontent.com is unnecessary. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> --------- Co-authored-by: DJ <dj@Rachels-Air.localdomain> Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
* Import org-wide AGENTS.md, remove duplicated standards References shared standards from petry-projects/.github for TDD, CI gates, PR reviews, security, and agent guidance. Keeps only project-specific content in this repo's CLAUDE.md. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Address review comments: fix source-of-truth wording, note planned rules - Clarify that TalkTerm extends org-wide standards, not sole source of truth - Mark .claude/rules/ file references as planned but not yet created Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Move project rules to AGENTS.md, make CLAUDE.md a slim pointer Follows the org convention where AGENTS.md is the comprehensive agent-agnostic file and CLAUDE.md is a Claude Code-specific summary with @import for org-wide standards. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Add repo-level AGENTS.md import to CLAUDE.md Ensures Claude Code loads both org-wide and repo-specific agent guidelines. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Use standard GitHub blob URL for org-level import The @ import is a Claude Code feature that resolves GitHub blob URLs natively — raw.githubusercontent.com is unnecessary. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> --------- Co-authored-by: DJ <dj@Rachels-Air.localdomain> Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
* Import org-wide AGENTS.md, remove duplicated standards References shared standards from petry-projects/.github for TDD, CI gates, PR reviews, security, and agent guidance. Keeps only project-specific content in this repo's CLAUDE.md. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Address review comments: fix source-of-truth wording, note planned rules - Clarify that TalkTerm extends org-wide standards, not sole source of truth - Mark .claude/rules/ file references as planned but not yet created Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Move project rules to AGENTS.md, make CLAUDE.md a slim pointer Follows the org convention where AGENTS.md is the comprehensive agent-agnostic file and CLAUDE.md is a Claude Code-specific summary with @import for org-wide standards. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Add repo-level AGENTS.md import to CLAUDE.md Ensures Claude Code loads both org-wide and repo-specific agent guidelines. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Use standard GitHub blob URL for org-level import The @ import is a Claude Code feature that resolves GitHub blob URLs natively — raw.githubusercontent.com is unnecessary. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> --------- Co-authored-by: DJ <dj@Rachels-Air.localdomain> Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
* Import org-wide AGENTS.md, remove duplicated standards References shared standards from petry-projects/.github for TDD, CI gates, PR reviews, security, and agent guidance. Keeps only project-specific content in this repo's CLAUDE.md. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Address review comments: fix source-of-truth wording, note planned rules - Clarify that TalkTerm extends org-wide standards, not sole source of truth - Mark .claude/rules/ file references as planned but not yet created Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Move project rules to AGENTS.md, make CLAUDE.md a slim pointer Follows the org convention where AGENTS.md is the comprehensive agent-agnostic file and CLAUDE.md is a Claude Code-specific summary with @import for org-wide standards. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Add repo-level AGENTS.md import to CLAUDE.md Ensures Claude Code loads both org-wide and repo-specific agent guidelines. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Use standard GitHub blob URL for org-level import The @ import is a Claude Code feature that resolves GitHub blob URLs natively — raw.githubusercontent.com is unnecessary. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> --------- Co-authored-by: DJ <dj@Rachels-Air.localdomain> Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
* Import org-wide AGENTS.md, remove duplicated standards References shared standards from petry-projects/.github for TDD, CI gates, PR reviews, security, and agent guidance. Keeps only project-specific content in this repo's CLAUDE.md. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Address review comments: fix source-of-truth wording, note planned rules - Clarify that TalkTerm extends org-wide standards, not sole source of truth - Mark .claude/rules/ file references as planned but not yet created Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Move project rules to AGENTS.md, make CLAUDE.md a slim pointer Follows the org convention where AGENTS.md is the comprehensive agent-agnostic file and CLAUDE.md is a Claude Code-specific summary with @import for org-wide standards. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Add repo-level AGENTS.md import to CLAUDE.md Ensures Claude Code loads both org-wide and repo-specific agent guidelines. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Use standard GitHub blob URL for org-level import The @ import is a Claude Code feature that resolves GitHub blob URLs natively — raw.githubusercontent.com is unnecessary. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> --------- Co-authored-by: DJ <dj@Rachels-Air.localdomain> Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
* Import org-wide AGENTS.md, remove duplicated standards References shared standards from petry-projects/.github for TDD, CI gates, PR reviews, security, and agent guidance. Keeps only project-specific content in this repo's CLAUDE.md. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Address review comments: fix source-of-truth wording, note planned rules - Clarify that TalkTerm extends org-wide standards, not sole source of truth - Mark .claude/rules/ file references as planned but not yet created Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Move project rules to AGENTS.md, make CLAUDE.md a slim pointer Follows the org convention where AGENTS.md is the comprehensive agent-agnostic file and CLAUDE.md is a Claude Code-specific summary with @import for org-wide standards. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Add repo-level AGENTS.md import to CLAUDE.md Ensures Claude Code loads both org-wide and repo-specific agent guidelines. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Use standard GitHub blob URL for org-level import The @ import is a Claude Code feature that resolves GitHub blob URLs natively — raw.githubusercontent.com is unnecessary. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> --------- Co-authored-by: DJ <dj@Rachels-Air.localdomain> Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
* Import org-wide AGENTS.md, remove duplicated standards References shared standards from petry-projects/.github for TDD, CI gates, PR reviews, security, and agent guidance. Keeps only project-specific content in this repo's CLAUDE.md. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Address review comments: fix source-of-truth wording, note planned rules - Clarify that TalkTerm extends org-wide standards, not sole source of truth - Mark .claude/rules/ file references as planned but not yet created Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Move project rules to AGENTS.md, make CLAUDE.md a slim pointer Follows the org convention where AGENTS.md is the comprehensive agent-agnostic file and CLAUDE.md is a Claude Code-specific summary with @import for org-wide standards. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Add repo-level AGENTS.md import to CLAUDE.md Ensures Claude Code loads both org-wide and repo-specific agent guidelines. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Use standard GitHub blob URL for org-level import The @ import is a Claude Code feature that resolves GitHub blob URLs natively — raw.githubusercontent.com is unnecessary. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> --------- Co-authored-by: DJ <dj@Rachels-Air.localdomain> Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
* Import org-wide AGENTS.md, remove duplicated standards References shared standards from petry-projects/.github for TDD, CI gates, PR reviews, security, and agent guidance. Keeps only project-specific content in this repo's CLAUDE.md. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Address review comments: fix source-of-truth wording, note planned rules - Clarify that TalkTerm extends org-wide standards, not sole source of truth - Mark .claude/rules/ file references as planned but not yet created Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Move project rules to AGENTS.md, make CLAUDE.md a slim pointer Follows the org convention where AGENTS.md is the comprehensive agent-agnostic file and CLAUDE.md is a Claude Code-specific summary with @import for org-wide standards. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Add repo-level AGENTS.md import to CLAUDE.md Ensures Claude Code loads both org-wide and repo-specific agent guidelines. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Use standard GitHub blob URL for org-level import The @ import is a Claude Code feature that resolves GitHub blob URLs natively — raw.githubusercontent.com is unnecessary. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> --------- Co-authored-by: DJ <dj@Rachels-Air.localdomain> Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
* Import org-wide AGENTS.md, remove duplicated standards References shared standards from petry-projects/.github for TDD, CI gates, PR reviews, security, and agent guidance. Keeps only project-specific content in this repo's CLAUDE.md. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Address review comments: fix source-of-truth wording, note planned rules - Clarify that TalkTerm extends org-wide standards, not sole source of truth - Mark .claude/rules/ file references as planned but not yet created Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Move project rules to AGENTS.md, make CLAUDE.md a slim pointer Follows the org convention where AGENTS.md is the comprehensive agent-agnostic file and CLAUDE.md is a Claude Code-specific summary with @import for org-wide standards. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Add repo-level AGENTS.md import to CLAUDE.md Ensures Claude Code loads both org-wide and repo-specific agent guidelines. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Use standard GitHub blob URL for org-level import The @ import is a Claude Code feature that resolves GitHub blob URLs natively — raw.githubusercontent.com is unnecessary. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> --------- Co-authored-by: DJ <dj@Rachels-Air.localdomain> Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
* Import org-wide AGENTS.md, remove duplicated standards References shared standards from petry-projects/.github for TDD, CI gates, PR reviews, security, and agent guidance. Keeps only project-specific content in this repo's CLAUDE.md. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Address review comments: fix source-of-truth wording, note planned rules - Clarify that TalkTerm extends org-wide standards, not sole source of truth - Mark .claude/rules/ file references as planned but not yet created Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Move project rules to AGENTS.md, make CLAUDE.md a slim pointer Follows the org convention where AGENTS.md is the comprehensive agent-agnostic file and CLAUDE.md is a Claude Code-specific summary with @import for org-wide standards. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Add repo-level AGENTS.md import to CLAUDE.md Ensures Claude Code loads both org-wide and repo-specific agent guidelines. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Use standard GitHub blob URL for org-level import The @ import is a Claude Code feature that resolves GitHub blob URLs natively — raw.githubusercontent.com is unnecessary. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> --------- Co-authored-by: DJ <dj@Rachels-Air.localdomain> Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
* Import org-wide AGENTS.md, remove duplicated standards References shared standards from petry-projects/.github for TDD, CI gates, PR reviews, security, and agent guidance. Keeps only project-specific content in this repo's CLAUDE.md. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Address review comments: fix source-of-truth wording, note planned rules - Clarify that TalkTerm extends org-wide standards, not sole source of truth - Mark .claude/rules/ file references as planned but not yet created Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Move project rules to AGENTS.md, make CLAUDE.md a slim pointer Follows the org convention where AGENTS.md is the comprehensive agent-agnostic file and CLAUDE.md is a Claude Code-specific summary with @import for org-wide standards. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Add repo-level AGENTS.md import to CLAUDE.md Ensures Claude Code loads both org-wide and repo-specific agent guidelines. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Use standard GitHub blob URL for org-level import The @ import is a Claude Code feature that resolves GitHub blob URLs natively — raw.githubusercontent.com is unnecessary. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> --------- Co-authored-by: DJ <dj@Rachels-Air.localdomain> Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
* Import org-wide AGENTS.md, remove duplicated standards References shared standards from petry-projects/.github for TDD, CI gates, PR reviews, security, and agent guidance. Keeps only project-specific content in this repo's CLAUDE.md. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Address review comments: fix source-of-truth wording, note planned rules - Clarify that TalkTerm extends org-wide standards, not sole source of truth - Mark .claude/rules/ file references as planned but not yet created Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Move project rules to AGENTS.md, make CLAUDE.md a slim pointer Follows the org convention where AGENTS.md is the comprehensive agent-agnostic file and CLAUDE.md is a Claude Code-specific summary with @import for org-wide standards. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Add repo-level AGENTS.md import to CLAUDE.md Ensures Claude Code loads both org-wide and repo-specific agent guidelines. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Use standard GitHub blob URL for org-level import The @ import is a Claude Code feature that resolves GitHub blob URLs natively — raw.githubusercontent.com is unnecessary. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> --------- Co-authored-by: DJ <dj@Rachels-Air.localdomain> Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
* Import org-wide AGENTS.md, remove duplicated standards References shared standards from petry-projects/.github for TDD, CI gates, PR reviews, security, and agent guidance. Keeps only project-specific content in this repo's CLAUDE.md. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Address review comments: fix source-of-truth wording, note planned rules - Clarify that TalkTerm extends org-wide standards, not sole source of truth - Mark .claude/rules/ file references as planned but not yet created Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Move project rules to AGENTS.md, make CLAUDE.md a slim pointer Follows the org convention where AGENTS.md is the comprehensive agent-agnostic file and CLAUDE.md is a Claude Code-specific summary with @import for org-wide standards. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Add repo-level AGENTS.md import to CLAUDE.md Ensures Claude Code loads both org-wide and repo-specific agent guidelines. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Use standard GitHub blob URL for org-level import The @ import is a Claude Code feature that resolves GitHub blob URLs natively — raw.githubusercontent.com is unnecessary. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> --------- Co-authored-by: DJ <dj@Rachels-Air.localdomain> Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
…— .github/workflows/sonarcloud.yml (#290) * Initial commit * Install BMad Method v6.2.0 with Claude Code integration Sets up BMad Method (Agile AI-Driven Development framework) with the BMM module, 36 skills and 9 agents configured for Claude Code. https://claude.ai/code/session_01VY2xiQ7rg51abGxTBCfcVj * fix: configure CodeQL to scan Python only (#6) * fix: add CodeQL workflow targeting Python only * fix: add contents:read permission for checkout step * chore: add ECC integration, TEA module, and slim CLAUDE.md - Slim CLAUDE.md from 22KB to 12KB by extracting enforcement rules into references (ECC rules installed globally via ~/.claude/rules/) - Add ECC-for-BMad integration guide (docs/ecc-for-bmad.md) - Install BMad TEA (Test Architect) module with 9 testing workflows (ATDD, automate, CI, framework, NFR, test-design, test-review, trace, teach-me-testing) plus TEA agent persona - Register TEA workflow skills in .claude/skills/ for Claude Code access - Update BMad core to v6.2.2 (restructured _bmad/ directory layout) - AgentShield security scan: Grade A (100/100) Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Add Claude Code GitHub Action (#15) * Add Claude Code GitHub Action for PR reviews * fix: address review feedback on Claude Code workflow - Restrict issue_comment trigger to PR comments only - Add author-association check (OWNER/MEMBER/COLLABORATOR) - Add pull_request_review_comment trigger - Add timeout-minutes to prevent runaway jobs Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * fix: use CLAUDE_CODE_OAUTH_TOKEN org secret Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * fix: add id-token: write permission for OAuth auth Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * fix: address remaining review comments - Pin claude-code-action to commit SHA for supply-chain safety - Add fork PR guard (secrets unavailable for fork PRs) - Scope pull_request trigger to main branch - Use >- folded scalar for if expression Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> --------- Co-authored-by: DJ <dj@Rachels-MacBook-Air.local> Co-authored-by: DJ <dj@Rachels-Air.localdomain> Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * fix: address OpenSSF Scorecard findings (#22) * fix: address OpenSSF Scorecard findings - Add SECURITY.md (#18) - Scope workflow token permissions to read-all with per-job overrides (#19) - Pin all GitHub Action dependencies to commit SHAs (#20) - Ensure SAST (CodeQL) runs on all push commits to main (#21) Closes #18, #19, #20, #21 Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * fix: address PR review comments - Replace permissions: read-all with permissions: {} (deny-by-default) - Add concrete security contact email to SECURITY.md Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * fix: use claude_code_oauth_token instead of anthropic_api_key The action has separate inputs for API keys vs OAuth tokens. CLAUDE_CODE_OAUTH_TOKEN is an OAuth token, not an API key. --------- Co-authored-by: DJ <dj@Rachels-Air.localdomain> Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * chore(deps): bump github/codeql-action from 3.35.1 to 4.35.1 (#27) Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.35.1 to 4.35.1. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/5c8a8a642e79153f5d047b10ec1cba1d1cc65699...c10b8064de6f491fea524254123dbe5e09572f13) --- updated-dependencies: - dependency-name: github/codeql-action dependency-version: 4.35.1 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps): bump actions/checkout from 4.3.1 to 6.0.2 (#24) Bumps [actions/checkout](https://github.com/actions/checkout) from 4.3.1 to 6.0.2. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/34e114876b0b11c390a56381ad16ebd13914f8d5...de0fac2e4500dabe0009e67214ff5f5447ce83dd) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 6.0.2 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * ci: skip Claude Code reviewer on Dependabot PRs (#28) * ci: skip Claude Code reviewer on Dependabot PRs The claude workflow fails on Dependabot PRs because secrets (CLAUDE_CODE_OAUTH_TOKEN) are not available to the dependabot actor. This blocks the dependabot auto-merge automation when claude is a required status check. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * ci: use PR author login instead of github.actor for Dependabot check github.actor reflects who triggered the workflow run (e.g. a maintainer reopening), not the PR author. Use github.event.pull_request.user.login for reliable Dependabot detection, consistent with dependabot-automerge.yml. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> --------- Co-authored-by: DJ <dj@Rachels-Air.localdomain> Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * ci: move Dependabot exclusion to step-level in Claude workflow (#30) * ci: move Dependabot exclusion to step-level in Claude workflow Move the dependabot[bot] check from job-level `if` to step-level `if` so the claude job runs and reports SUCCESS (with a skipped step) instead of being skipped entirely. A skipped job doesn't satisfy required status checks in branch protection, but a successful job with a skipped step does. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * ci: guard step-level Dependabot check for pull_request events only The step-level if needs to handle issue_comment and pull_request_review_comment events where github.event.pull_request is not present. Use event_name guard to avoid null dereference. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> --------- Co-authored-by: DJ <dj@Rachels-Air.localdomain> Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * chore(deps): bump anthropics/claude-code-action from 1.0.80 to 1.0.82 (#26) Bumps [anthropics/claude-code-action](https://github.com/anthropics/claude-code-action) from 1.0.80 to 1.0.82. - [Release notes](https://github.com/anthropics/claude-code-action/releases) - [Commits](https://github.com/anthropics/claude-code-action/compare/094bd24d575e7b30ac1576024817bf1a97c81262...88c168b39e7e64da0286d812b6e9fbebb6708185) --- updated-dependencies: - dependency-name: anthropics/claude-code-action dependency-version: 1.0.82 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps): bump anthropics/claude-code-action from 1.0.83 to 1.0.88 (#34) Bumps [anthropics/claude-code-action](https://github.com/anthropics/claude-code-action) from 1.0.83 to 1.0.88. - [Release notes](https://github.com/anthropics/claude-code-action/releases) - [Commits](https://github.com/anthropics/claude-code-action/compare/bee87b3258c251f9279e5371b0cc3660f37f3f77...1eddb334cfa79fdb21ecbe2180ca1a016e8e7d47) --- updated-dependencies: - dependency-name: anthropics/claude-code-action dependency-version: 1.0.88 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore: enable Claude issue trigger per org CI standard (#48) Add issues:[labeled] event trigger and claude label support so Claude can work issues autonomously — reading the issue, creating a branch, implementing the fix, and opening a PR. Matches the standard defined in petry-projects/.github#24. Co-authored-by: DJ <dj@Rachels-MacBook-Air.local> Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * fix: add checkout step to Claude workflow for issue-triggered mode (#49) The claude-code-action runs git fetch/checkout internally during branch setup but requires the repository to already be cloned on the runner. Without actions/checkout, issue-triggered runs fail with: fatal: not a git repository Co-authored-by: DJ <dj@Rachels-MacBook-Air.local> Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * feat: split Claude workflow into interactive + issue automation jobs (#61) * feat: split Claude workflow into interactive + issue automation jobs Aligns with the org standard in petry-projects/.github. The claude-issue job runs in automation mode with tools to create PRs, self-review, check CI, and tag code owners when ready. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * fix: add concurrency guard and comment tools to claude-issue job - Add concurrency group keyed on issue number to prevent duplicate runs - Add gh pr comment and gh issue comment to allowedTools for review replies, thread resolution, and code owner tagging - Remove Bash(cat:*) since the Read tool already covers file reads Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> --------- Co-authored-by: DJ <dj@Rachels-MacBook-Air.local> Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * feat: switch to org-level reusable Claude Code workflow (#62) * chore: add CODEOWNERS file for code review enforcement Adds .github/CODEOWNERS assigning @don-petry as default code owner for all files, satisfying the compliance requirement for code owner review enforcement on pull requests. Closes #47 Co-authored-by: don-petry <don-petry@users.noreply.github.com> * fix: rename codeql workflow and add javascript-typescript + actions matrix (#81) - Rename codeql-analysis.yml → codeql.yml (compliance: exact filename required) - Replace Python with javascript-typescript (matches TalkTerm stack) - Add actions language scan (required: repo has .github/workflows/*.yml) - Use matrix strategy for multi-language scanning per ci-standards.md - Update schedule to Friday 17:00 UTC per org standard Closes #41 Co-authored-by: claude[bot] <41898282+claude[bot]@users.noreply.github.com> Co-authored-by: don-petry <don-petry@users.noreply.github.com> * chore(workflows): adopt centralized stubs from petry-projects/.github (#82) Replace inline copies of standardized workflows with the canonical thin caller stubs from petry-projects/.github/standards/workflows/. Each stub delegates to a versioned reusable workflow at petry-projects/.github/.github/workflows/<name>-reusable.yml@v1, so future updates to the standard propagate automatically and drift is caught by the org-wide compliance audit. See petry-projects/.github#87, #88, #89 for context. Co-authored-by: DJ <dj@Rachels-MacBook-Air.local> Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * fix: correct reusable workflow path (remove duplicate .github/) (#135) fix: correct reusable workflow path (remove duplicate .github/ segment) Changed: petry-projects/.github/.github/workflows/... To: petry-projects/.github/workflows/... Co-authored-by: Claude Haiku 4.5 <noreply@anthropic.com> * Revert "fix: correct reusable workflow path (remove duplicate .github/) (#135)" This reverts commit 2f121a1dc0e4c66291f9e68c2bae297c23b1fe7a. * ci: add auto-rebase workflow and check_run trigger to claude.yml * add check_run trigger to claude.yml * add auto-rebase.yml workflow * chore(ci): remove stray codeql.yml workflow (#115) The org now uses GitHub-managed CodeQL default setup. The per-repo codeql.yml was drift and ran a duplicate analysis alongside default setup. Removing it per the org standard. Closes #96 Co-authored-by: claude[bot] <41898282+claude[bot]@users.noreply.github.com> Co-authored-by: don-petry <don-petry@users.noreply.github.com> Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> * chore(security): remove drift codeql.yml, enable GitHub-managed default setup (#117) Per org CI standard §2, CodeQL must use GitHub-managed default setup (Settings → Code security → Code scanning), not a per-repo workflow file. Per-repo codeql.yml files are treated as drift by the compliance audit. Actions taken: - Removed .github/workflows/codeql.yml (drift per-repo advanced setup) - Re-confirmed default setup via API: state=configured, query_suite=default The GitHub-managed default setup is already running CodeQL scans. The compliance audit 403 is a PAT scope issue in the audit bot (needs Administration:read scope on the audit bot token in petry-projects/.github). Closes #95 Co-authored-by: claude[bot] <41898282+claude[bot]@users.noreply.github.com> Co-authored-by: don-petry <don-petry@users.noreply.github.com> Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> * fix(ci): pin agent-shield reusable workflow to SHA (#126) Pins agent-shield-reusable.yml@v1 to its full commit SHA (ee22b427cbce9ecadcf2b436acb57c3adf0cb63d) to satisfy the org-wide action-pinning policy. Closes #85 Co-authored-by: claude[bot] <41898282+claude[bot]@users.noreply.github.com> Co-authored-by: don-petry <don-petry@users.noreply.github.com> Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com> Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> * chore: add bot accounts to CODEOWNERS for auto-merge support * chore: standardize CODEOWNERS on @petry-projects/org-leads (#160) Per the org-wide standard defined in petry-projects/.github (standards/codeowners-standard.md), replace individual user/bot listings with the @petry-projects/org-leads team. Closes the CODEOWNERS gap from pr-review-agent#27. Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com> * chore(dev-lead): remove claude.yml — replaced by dev-lead.yml (#176) * feat: implement issue #162 — Compliance: codeowners-no-catchall (#182) Co-authored-by: donpetry-bot <281750570+donpetry-bot@users.noreply.github.com> * feat: implement issue #175 — Compliance: non-stub-pr-review-mention.yml (#185) Co-authored-by: donpetry-bot <281750570+donpetry-bot@users.noreply.github.com> * feat: implement issue #161 — Compliance: codeowners-org-leads-not-first (#189) Co-authored-by: donpetry-bot <281750570+donpetry-bot@users.noreply.github.com> * feat: implement issue #200 — [Fleet Monitor] petry-projects/TalkTerm — dev-lead.yml (#202) Co-authored-by: donpetry-bot <281750570+donpetry-bot@users.noreply.github.com> Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> * feat: implement issue #86 — Compliance: unpinned-actions-claude.yml (#196) Co-authored-by: donpetry-bot <281750570+donpetry-bot@users.noreply.github.com> * feat: implement issue #163 — Compliance: check-suite-auto-trigger-1236702 (#206) Co-authored-by: donpetry-bot <281750570+donpetry-bot@users.noreply.github.com> * rollout: deploy pr-review-mention standard workflow (#236) * rollout: deploy pr-review-mention standard workflow * fix(bot): address bot feedback [skip ci-relay] --------- Co-authored-by: donpetry-bot <281750570+donpetry-bot@users.noreply.github.com> * feat: implement issue #217 — Compliance: codeowners-org-leads-not-first (#270) Co-authored-by: donpetry-bot <281750570+donpetry-bot@users.noreply.github.com> Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> * feat: implement issue #219 — Compliance: non-stub-dev-lead.yml (#258) * feat: implement issue #219 — Compliance: non-stub-dev-lead.yml * fix(bot): address bot feedback [skip ci-relay] * fix(bot): address bot feedback [skip ci-relay] * fix(bot): address bot feedback [skip ci-relay] * chore: apply manual instructions [skip ci-relay] * fix(gitleaks): suppress false positive SHA256 checksums in manifest Commit c5099d1d contains the same SHA256 content checksums in _bmad/_config/files-manifest.csv that were already documented as false positives in earlier commits. Added gitleaks ignore entries for lines 281, 282, 284, 300, 409, 433. Co-Authored-By: Claude Haiku 4.5 <noreply@anthropic.com> --------- Co-authored-by: donpetry-bot <281750570+donpetry-bot@users.noreply.github.com> Co-authored-by: Claude Haiku 4.5 <noreply@anthropic.com> Co-authored-by: Don Petry Bot <donpetry+bot@gmail.com> * Initial commit * Install BMad Method v6.2.0 with Claude Code integration Sets up BMad Method (Agile AI-Driven Development framework) with the BMM module, 36 skills and 9 agents configured for Claude Code. https://claude.ai/code/session_01VY2xiQ7rg51abGxTBCfcVj * fix: configure CodeQL to scan Python only (#6) * fix: add CodeQL workflow targeting Python only * fix: add contents:read permission for checkout step * chore: add ECC integration, TEA module, and slim CLAUDE.md - Slim CLAUDE.md from 22KB to 12KB by extracting enforcement rules into references (ECC rules installed globally via ~/.claude/rules/) - Add ECC-for-BMad integration guide (docs/ecc-for-bmad.md) - Install BMad TEA (Test Architect) module with 9 testing workflows (ATDD, automate, CI, framework, NFR, test-design, test-review, trace, teach-me-testing) plus TEA agent persona - Register TEA workflow skills in .claude/skills/ for Claude Code access - Update BMad core to v6.2.2 (restructured _bmad/ directory layout) - AgentShield security scan: Grade A (100/100) Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Add Claude Code GitHub Action (#15) * Add Claude Code GitHub Action for PR reviews * fix: address review feedback on Claude Code workflow - Restrict issue_comment trigger to PR comments only - Add author-association check (OWNER/MEMBER/COLLABORATOR) - Add pull_request_review_comment trigger - Add timeout-minutes to prevent runaway jobs Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * fix: use CLAUDE_CODE_OAUTH_TOKEN org secret Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * fix: add id-token: write permission for OAuth auth Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * fix: address remaining review comments - Pin claude-code-action to commit SHA for supply-chain safety - Add fork PR guard (secrets unavailable for fork PRs) - Scope pull_request trigger to main branch - Use >- folded scalar for if expression Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> --------- Co-authored-by: DJ <dj@Rachels-MacBook-Air.local> Co-authored-by: DJ <dj@Rachels-Air.localdomain> Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * fix: address OpenSSF Scorecard findings (#22) * fix: address OpenSSF Scorecard findings - Add SECURITY.md (#18) - Scope workflow token permissions to read-all with per-job overrides (#19) - Pin all GitHub Action dependencies to commit SHAs (#20) - Ensure SAST (CodeQL) runs on all push commits to main (#21) Closes #18, #19, #20, #21 Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * fix: address PR review comments - Replace permissions: read-all with permissions: {} (deny-by-default) - Add concrete security contact email to SECURITY.md Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * fix: use claude_code_oauth_token instead of anthropic_api_key The action has separate inputs for API keys vs OAuth tokens. CLAUDE_CODE_OAUTH_TOKEN is an OAuth token, not an API key. --------- Co-authored-by: DJ <dj@Rachels-Air.localdomain> Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * chore(deps): bump github/codeql-action from 3.35.1 to 4.35.1 (#27) Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.35.1 to 4.35.1. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/5c8a8a642e79153f5d047b10ec1cba1d1cc65699...c10b8064de6f491fea524254123dbe5e09572f13) --- updated-dependencies: - dependency-name: github/codeql-action dependency-version: 4.35.1 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps): bump actions/checkout from 4.3.1 to 6.0.2 (#24) Bumps [actions/checkout](https://github.com/actions/checkout) from 4.3.1 to 6.0.2. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/34e114876b0b11c390a56381ad16ebd13914f8d5...de0fac2e4500dabe0009e67214ff5f5447ce83dd) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 6.0.2 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * ci: skip Claude Code reviewer on Dependabot PRs (#28) * ci: skip Claude Code reviewer on Dependabot PRs The claude workflow fails on Dependabot PRs because secrets (CLAUDE_CODE_OAUTH_TOKEN) are not available to the dependabot actor. This blocks the dependabot auto-merge automation when claude is a required status check. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * ci: use PR author login instead of github.actor for Dependabot check github.actor reflects who triggered the workflow run (e.g. a maintainer reopening), not the PR author. Use github.event.pull_request.user.login for reliable Dependabot detection, consistent with dependabot-automerge.yml. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> --------- Co-authored-by: DJ <dj@Rachels-Air.localdomain> Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * ci: move Dependabot exclusion to step-level in Claude workflow (#30) * ci: move Dependabot exclusion to step-level in Claude workflow Move the dependabot[bot] check from job-level `if` to step-level `if` so the claude job runs and reports SUCCESS (with a skipped step) instead of being skipped entirely. A skipped job doesn't satisfy required status checks in branch protection, but a successful job with a skipped step does. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * ci: guard step-level Dependabot check for pull_request events only The step-level if needs to handle issue_comment and pull_request_review_comment events where github.event.pull_request is not present. Use event_name guard to avoid null dereference. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> --------- Co-authored-by: DJ <dj@Rachels-Air.localdomain> Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * chore(deps): bump anthropics/claude-code-action from 1.0.80 to 1.0.82 (#26) Bumps [anthropics/claude-code-action](https://github.com/anthropics/claude-code-action) from 1.0.80 to 1.0.82. - [Release notes](https://github.com/anthropics/claude-code-action/releases) - [Commits](https://github.com/anthropics/claude-code-action/compare/094bd24d575e7b30ac1576024817bf1a97c81262...88c168b39e7e64da0286d812b6e9fbebb6708185) --- updated-dependencies: - dependency-name: anthropics/claude-code-action dependency-version: 1.0.82 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps): bump anthropics/claude-code-action from 1.0.83 to 1.0.88 (#34) Bumps [anthropics/claude-code-action](https://github.com/anthropics/claude-code-action) from 1.0.83 to 1.0.88. - [Release notes](https://github.com/anthropics/claude-code-action/releases) - [Commits](https://github.com/anthropics/claude-code-action/compare/bee87b3258c251f9279e5371b0cc3660f37f3f77...1eddb334cfa79fdb21ecbe2180ca1a016e8e7d47) --- updated-dependencies: - dependency-name: anthropics/claude-code-action dependency-version: 1.0.88 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore: enable Claude issue trigger per org CI standard (#48) Add issues:[labeled] event trigger and claude label support so Claude can work issues autonomously — reading the issue, creating a branch, implementing the fix, and opening a PR. Matches the standard defined in petry-projects/.github#24. Co-authored-by: DJ <dj@Rachels-MacBook-Air.local> Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * fix: add checkout step to Claude workflow for issue-triggered mode (#49) The claude-code-action runs git fetch/checkout internally during branch setup but requires the repository to already be cloned on the runner. Without actions/checkout, issue-triggered runs fail with: fatal: not a git repository Co-authored-by: DJ <dj@Rachels-MacBook-Air.local> Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * feat: split Claude workflow into interactive + issue automation jobs (#61) * feat: split Claude workflow into interactive + issue automation jobs Aligns with the org standard in petry-projects/.github. The claude-issue job runs in automation mode with tools to create PRs, self-review, check CI, and tag code owners when ready. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * fix: add concurrency guard and comment tools to claude-issue job - Add concurrency group keyed on issue number to prevent duplicate runs - Add gh pr comment and gh issue comment to allowedTools for review replies, thread resolution, and code owner tagging - Remove Bash(cat:*) since the Read tool already covers file reads Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> --------- Co-authored-by: DJ <dj@Rachels-MacBook-Air.local> Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * feat: switch to org-level reusable Claude Code workflow (#62) * chore: add CODEOWNERS file for code review enforcement Adds .github/CODEOWNERS assigning @don-petry as default code owner for all files, satisfying the compliance requirement for code owner review enforcement on pull requests. Closes #47 Co-authored-by: don-petry <don-petry@users.noreply.github.com> * fix: rename codeql workflow and add javascript-typescript + actions matrix (#81) - Rename codeql-analysis.yml → codeql.yml (compliance: exact filename required) - Replace Python with javascript-typescript (matches TalkTerm stack) - Add actions language scan (required: repo has .github/workflows/*.yml) - Use matrix strategy for multi-language scanning per ci-standards.md - Update schedule to Friday 17:00 UTC per org standard Closes #41 Co-authored-by: claude[bot] <41898282+claude[bot]@users.noreply.github.com> Co-authored-by: don-petry <don-petry@users.noreply.github.com> * chore(workflows): adopt centralized stubs from petry-projects/.github (#82) Replace inline copies of standardized workflows with the canonical thin caller stubs from petry-projects/.github/standards/workflows/. Each stub delegates to a versioned reusable workflow at petry-projects/.github/.github/workflows/<name>-reusable.yml@v1, so future updates to the standard propagate automatically and drift is caught by the org-wide compliance audit. See petry-projects/.github#87, #88, #89 for context. Co-authored-by: DJ <dj@Rachels-MacBook-Air.local> Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * fix: correct reusable workflow path (remove duplicate .github/) (#135) fix: correct reusable workflow path (remove duplicate .github/ segment) Changed: petry-projects/.github/.github/workflows/... To: petry-projects/.github/workflows/... Co-authored-by: Claude Haiku 4.5 <noreply@anthropic.com> * Revert "fix: correct reusable workflow path (remove duplicate .github/) (#135)" This reverts commit 2f121a1dc0e4c66291f9e68c2bae297c23b1fe7a. * ci: add auto-rebase workflow and check_run trigger to claude.yml * add check_run trigger to claude.yml * add auto-rebase.yml workflow * chore(ci): remove stray codeql.yml workflow (#115) The org now uses GitHub-managed CodeQL default setup. The per-repo codeql.yml was drift and ran a duplicate analysis alongside default setup. Removing it per the org standard. Closes #96 Co-authored-by: claude[bot] <41898282+claude[bot]@users.noreply.github.com> Co-authored-by: don-petry <don-petry@users.noreply.github.com> Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> * chore(security): remove drift codeql.yml, enable GitHub-managed default setup (#117) Per org CI standard §2, CodeQL must use GitHub-managed default setup (Settings → Code security → Code scanning), not a per-repo workflow file. Per-repo codeql.yml files are treated as drift by the compliance audit. Actions taken: - Removed .github/workflows/codeql.yml (drift per-repo advanced setup) - Re-confirmed default setup via API: state=configured, query_suite=default The GitHub-managed default setup is already running CodeQL scans. The compliance audit 403 is a PAT scope issue in the audit bot (needs Administration:read scope on the audit bot token in petry-projects/.github). Closes #95 Co-authored-by: claude[bot] <41898282+claude[bot]@users.noreply.github.com> Co-authored-by: don-petry <don-petry@users.noreply.github.com> Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> * fix(ci): pin agent-shield reusable workflow to SHA (#126) Pins agent-shield-reusable.yml@v1 to its full commit SHA (ee22b427cbce9ecadcf2b436acb57c3adf0cb63d) to satisfy the org-wide action-pinning policy. Closes #85 Co-authored-by: claude[bot] <41898282+claude[bot]@users.noreply.github.com> Co-authored-by: don-petry <don-petry@users.noreply.github.com> Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com> Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> * chore: add bot accounts to CODEOWNERS for auto-merge support * chore: standardize CODEOWNERS on @petry-projects/org-leads (#160) Per the org-wide standard defined in petry-projects/.github (standards/codeowners-standard.md), replace individual user/bot listings with the @petry-projects/org-leads team. Closes the CODEOWNERS gap from pr-review-agent#27. Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com> * chore(dev-lead): remove claude.yml — replaced by dev-lead.yml (#176) * feat: implement issue #162 — Compliance: codeowners-no-catchall (#182) Co-authored-by: donpetry-bot <281750570+donpetry-bot@users.noreply.github.com> * feat: implement issue #175 — Compliance: non-stub-pr-review-mention.yml (#185) Co-authored-by: donpetry-bot <281750570+donpetry-bot@users.noreply.github.com> * feat: implement issue #161 — Compliance: codeowners-org-leads-not-first (#189) Co-authored-by: donpetry-bot <281750570+donpetry-bot@users.noreply.github.com> * feat: implement issue #200 — [Fleet Monitor] petry-projects/TalkTerm — dev-lead.yml (#202) Co-authored-by: donpetry-bot <281750570+donpetry-bot@users.noreply.github.com> Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> * feat: implement issue #86 — Compliance: unpinned-actions-claude.yml (#196) Co-authored-by: donpetry-bot <281750570+donpetry-bot@users.noreply.github.com> * feat: implement issue #163 — Compliance: check-suite-auto-trigger-1236702 (#206) Co-authored-by: donpetry-bot <281750570+donpetry-bot@users.noreply.github.com> * rollout: deploy pr-review-mention standard workflow (#236) * rollout: deploy pr-review-mention standard workflow * fix(bot): address bot feedback [skip ci-relay] --------- Co-authored-by: donpetry-bot <281750570+donpetry-bot@users.noreply.github.com> * feat: implement issue #272 — Compliance: dev-lead-stub-pin (#297) * feat: implement issue #272 — Compliance: dev-lead-stub-pin * chore: apply manual instructions [skip ci-relay] --------- Co-authored-by: donpetry-bot <281750570+donpetry-bot@users.noreply.github.com> Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> * feat: implement issue #217 — Compliance: codeowners-org-leads-not-first (#270) Co-authored-by: donpetry-bot <281750570+donpetry-bot@users.noreply.github.com> Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> * Initial commit * Install BMad Method v6.2.0 with Claude Code integration Sets up BMad Method (Agile AI-Driven Development framework) with the BMM module, 36 skills and 9 agents configured for Claude Code. https://claude.ai/code/session_01VY2xiQ7rg51abGxTBCfcVj * Add TalkTerm Product Requirements Document Complete PRD covering executive summary, success criteria, user journeys, innovation analysis, mobile app requirements, phased scope, 35 functional requirements, and 15 non-functional requirements. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> * Enhance PRD v1.1 with multi-agent review findings Full review cycle: validation (12-step BMAD), adversarial review (15 findings), edge case hunt (20 unhandled paths), pre-mortem analysis. Key improvements applied: - Fix 15/20-min success criteria contradiction (→ ≤25 min) - Decompose NFR1 latency into acknowledgement (≤1s) + first-response (≤3s) via streaming TTS; retire implausible 2s end-to-end target - Add FR16 (file upload), FR36 (user identity), FR37 (barge-in), FR38 (network recovery) - Remove implementation leakage: "Claude API" → "AI agent backend" in FR11/NFR13; remove NFR14 (architecture constraint) - Elevate store compliance from deferred to required pre-design gate - Add BYOK API key model with rationale - Quantify all business success metrics - Harden 10 FR + 8 NFR measurability specs - Add NFR16 (conversation data privacy) - Annotate Journey 2 Phase 2 persona references - Structural: remove redundant Project Classification section, merge Executive Summary sub-heading, condense Phase 3 list - 10 prose editorial fixes Add prd-validation-report.md with full 12-step validation findings. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * chore: add Dependabot with auto-merge via GitHub App (#3) * chore: add Dependabot configuration * chore: add Dependabot auto-merge workflow * fix(ci): use pull_request_target for Dependabot secret access * Add UX design spec, architecture, research, and Figma screen mockups - UX Design Specification v1.3: three-zone layout, 5 user journeys, design system (PwC Flame palette, Inter, Tailwind), component strategy, responsive/accessibility specs - 8 HTML screen mockups + design system reference + interactive prototype - Architecture document for technical solution design - Market research on agentic AI interfaces - PRD updated to v2.2: strengthened FR8 (text input co-equal with voice, paste support), added FR48-50 (external system writeback via MCP to Azure DevOps/GitHub), added FR51 (preference memory via context-scribe with per-agent-type scoping) - All screens include version/date stamps and Figma capture scripts - Clickable prototype with full user journey flow navigation Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Enhance UX designs with workspace selection, contextual writeback, preference memory, and text input improvements PRD v2.2: - FR8: Text input co-equal with voice, paste/multi-line support - FR48-50: External system writeback via MCP (Azure DevOps, GitHub) - FR51: Preference memory via context-scribe (per agent type/workspace) - FR52-53: Workspace selection (user repo or silent BMAD-method clone) - FR54: Contextual writeback (ADO→ADO, repo→PR, local→file) - FR55: Pull request creation flow - FR56: Azure DevOps writeback flow UX Spec v1.5: - New workspace selection screen (screen 03b) with browse/clone/skip paths - Repo-aware confirm action with commit/PR/local options - Preference memory UX patterns (★ Your usual badges, avatar verbal cues) - Contextual writeback behavior based on session origin - Enhanced text input with paste support and multi-line Prototype v1.5: - Added workspace screen to setup flow - Decision screen shows preference indicators - Confirm screen shows repo-aware commit/PR flow - Writeback screen shows ADO preference badge - All screen version badges updated to v1.5 Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Address PR review: fix contradictions, remove capture scripts, fix JS bug - Architecture: update FR count to 56, fix SDK-vs-subprocess contradiction, clarify structured memory vs verbatim transcript storage - PRD: fix Journey 2 Claude Code CLI vs SDK wording, reconcile MVP platform scope to macOS + Windows consistently - HTML screens: remove external mcp.figma.com capture scripts from all 10 screen files and design system (security: no third-party JS on open) - ux-design-directions.html: fix showDirection() implicit global event bug, pass event explicitly through onclick handlers Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * fix: configure CodeQL to scan Python only (#6) * fix: add CodeQL workflow targeting Python only * fix: add contents:read permission for checkout step * Add comprehensive story files for all 12 epics (45 stories) Create implementation-ready story files with BDD acceptance criteria, TDD-ordered tasks, architecture guardrails, and dev notes for the complete TalkTerm backlog. Update sprint-status.yaml to ready-for-dev. Also adds CLAUDE.md project rules, epics.md, and implementation readiness report. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Address PR review: fix FR references, story count, and installer terminology - Story 2.1: FR2 → FR40/FR41/FR42 for API key entry, NFR6 for security - Story 1.2: FR1 → FR39 for admin check, NFR3 → NFR4/NFR9 - CLAUDE.md: 42 stories → 45 stories - Story 12.1: Align to Squirrel installer terminology (not NSIS) Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * chore: add CodeRabbit config for AI-powered PR reviews (#11) Enable automated AI code reviews on pull requests with Python-specific review instructions for best practices, type hints, and security. Co-authored-by: Root <donpetry@users.noreply.github.com> Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * chore: enable SonarCloud code quality analysis (#10) * chore: add CodeRabbit config for AI-powered PR reviews Enable automated AI code reviews on pull requests with Python-specific review instructions for best practices, type hints, and security. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * chore: enable SonarCloud code quality analysis Add SonarCloud project configuration and GitHub Actions workflow to run automated code quality analysis on pushes to main and PRs. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * chore: upgrade sonarqube-scan-action to v6 for security fix Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * fix: address PR review feedback for SonarCloud config - Remove deprecated sonar.language property (auto-detected) - Add sonar.exclusions for _bmad-output/** and .claude/** - Add if-guard to skip SonarCloud scan when token unavailable (fork PRs) - Remove .coderabbit.yaml (belongs in separate PR #11) Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * fix: pin GitHub Actions to full commit SHAs for security Resolves SonarCloud security hotspot: "Use full commit SHA hash for this dependency." Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * fix: add explicit least-privilege permissions to SonarCloud workflow Pins minimal token permissions (contents: read, pull-requests: read) instead of relying on repo/org defaults. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * fix: move SONAR_TOKEN to job-level env for correct if-condition gating Step-level env is not available during if evaluation. Move secret to job-level env so the step's if condition can properly gate execution on fork PRs where the secret is unavailable. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> --------- Co-authored-by: Root <donpetry@users.noreply.github.com> Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * chore: add ECC integration, TEA module, and slim CLAUDE.md - Slim CLAUDE.md from 22KB to 12KB by extracting enforcement rules into references (ECC rules installed globally via ~/.claude/rules/) - Add ECC-for-BMad integration guide (docs/ecc-for-bmad.md) - Install BMad TEA (Test Architect) module with 9 testing workflows (ATDD, automate, CI, framework, NFR, test-design, test-review, trace, teach-me-testing) plus TEA agent persona - Register TEA workflow skills in .claude/skills/ for Claude Code access - Update BMad core to v6.2.2 (restructured _bmad/ directory layout) - AgentShield security scan: Grade A (100/100) Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * fix: address PR review comments and SonarCloud exclusions - Add _bmad/** and docs/** to SonarCloud exclusions (non-code config files were failing coverage/duplication/security gates) - Fix TEA resume dashboard step reference (step-03f → step-03) - Fix subagent output path to use {test_artifacts} instead of /tmp - Fix fake timer suggestion to be framework-agnostic (Vitest/Jest) - Fix grammar in ATDD skill description (lets → let's) Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * chore: refine CodeRabbit config to exclude non-code directories (#13) Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Add Claude Code GitHub Action (#15) * Add Claude Code GitHub Action for PR reviews * fix: address review feedback on Claude Code workflow - Restrict issue_comment trigger to PR comments only - Add author-association check (OWNER/MEMBER/COLLABORATOR) - Add pull_request_review_comment trigger - Add timeout-minutes to prevent runaway jobs Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * fix: use CLAUDE_CODE_OAUTH_TOKEN org secret Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * fix: add id-token: write permission for OAuth auth Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * fix: address remaining review comments - Pin claude-code-action to commit SHA for supply-chain safety - Add fork PR guard (secrets unavailable for fork PRs) - Scope pull_request trigger to main branch - Use >- folded scalar for if expression Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> --------- Co-authored-by: DJ <dj@Rachels-MacBook-Air.local> Co-authored-by: DJ <dj@Rachels-Air.localdomain> Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * fix: address OpenSSF Scorecard findings (#22) * fix: address OpenSSF Scorecard findings - Add SECURITY.md (#18) - Scope workflow token permissions to read-all with per-job overrides (#19) - Pin all GitHub Action dependencies to commit SHAs (#20) - Ensure SAST (CodeQL) runs on all push commits to main (#21) Closes #18, #19, #20, #21 Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * fix: address PR review comments - Replace permissions: read-all with permissions: {} (deny-by-default) - Add concrete security contact email to SECURITY.md Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * fix: use claude_code_oauth_token instead of anthropic_api_key The action has separate inputs for API keys vs OAuth tokens. CLAUDE_CODE_OAUTH_TOKEN is an OAuth token, not an API key. --------- Co-authored-by: DJ <dj@Rachels-Air.localdomain> Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Import org-wide AGENTS.md, remove duplicated standards (#23) * Import org-wide AGENTS.md, remove duplicated standards References shared standards from petry-projects/.github for TDD, CI gates, PR reviews, security, and agent guidance. Keeps only project-specific content in this repo's CLAUDE.md. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Address review comments: fix source-of-truth wording, note planned rules - Clarify that TalkTerm extends org-wide standards, not sole source of truth - Mark .claude/rules/ file references as planned but not yet created Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Move project rules to AGENTS.md, make CLAUDE.md a slim pointer Follows the org convention where AGENTS.md is the comprehensive agent-agnostic file and CLAUDE.md is a Claude Code-specific summary with @import for org-wide standards. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Add repo-level AGENTS.md import to CLAUDE.md Ensures Claude Code loads both org-wide and repo-specific agent guidelines. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Use standard GitHub blob URL for org-level import The @ import is a Claude Code feature that resolves GitHub blob URLs natively — raw.githubusercontent.com is unnecessary. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> --------- Co-authored-by: DJ <dj@Rachels-Air.localdomain> Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * chore(deps): bump github/codeql-action from 3.35.1 to 4.35.1 (#27) Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.35.1 to 4.35.1. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/5c8a8a642e79153f5d047b10ec1cba1d1cc65699...c10b8064de6f491fea524254123dbe5e09572f13) --- updated-dependencies: - dependency-name: github/codeql-action dependency-version: 4.35.1 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps): bump actions/checkout from 4.3.1 to 6.0.2 (#24) Bumps [actions/checkout](https://github.com/actions/checkout) from 4.3.1 to 6.0.2. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/34e114876b0b11c390a56381ad16ebd13914f8d5...de0fac2e4500dabe0009e67214ff5f5447ce83dd) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 6.0.2 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * ci: skip Claude Code reviewer on Dependabot PRs (#28) * ci: skip Claude Code reviewer on Dependabot PRs The claude workflow fails on Dependabot PRs because secrets (CLAUDE_CODE_OAUTH_TOKEN) are not available to the dependabot actor. This blocks the dependabot auto-merge automation when claude is a required status check. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * ci: use PR author login instead of github.actor for Dependabot check github.actor reflects who triggered the workflow run (e.g. a maintainer reopening), not the PR author. Use github.event.pull_request.user.login for reliable Dependabot detection, consistent with dependabot-automerge.yml. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> --------- Co-authored-by: DJ <dj@Rachels-Air.localdomain> Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * ci: move Dependabot exclusion to step-level in Claude workflow (#30) * ci: move Dependabot exclusion to step-level in Claude workflow Move the dependabot[bot] check from job-level `if` to step-level `if` so the claude job runs and reports SUCCESS (with a skipped step) instead of being skipped entirely. A skipped job doesn't satisfy required status checks in branch protection, but a successful job with a skipped step does. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * ci: guard step-level Dependabot check for pull_request events only The step-level if needs to handle issue_comment and pull_request_review_comment events where github.event.pull_request is not present. Use event_name guard to avoid null dereference. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> --------- Co-authored-by: DJ <dj@Rachels-Air.localdomain> Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * chore(deps): bump anthropics/claude-code-action from 1.0.80 to 1.0.82 (#26) Bumps [anthropics/claude-code-action](https://github.com/anthropics/claude-code-action) from 1.0.80 to 1.0.82. - [Release notes](https://github.com/anthropics/claude-code-action/releases) - [Commits](https://github.com/anthropics/claude-code-action/compare/094bd24d575e7b30ac1576024817bf1a97c81262...88c168b39e7e64da0286d812b6e9fbebb6708185) --- updated-dependencies: - dependency-name: anthropics/claude-code-action dependency-version: 1.0.82 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore: add Dependabot security-only update config (#32) * chore: add Dependabot security-only update config Align TalkTerm with the petry-projects org standard for security-only dependency updates: - Replace pip ecosystem with npm in dependabot.yml and add security/dependencies labels to both ecosystems - Update dependabot-automerge workflow to match org standard (simpler approve + squash-merge, removes thread resolution logic) - Add dependency-audit workflow for automated vulnerability scanning on PRs and pushes to main Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * fix: update to latest security-only standards (limit:0, improved audit) Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * chore: strip template header comments from deployed workflows Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> --------- Co-authored-by: DJ <dj@Rachels-MacBook-Air.local> Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * chore(deps): bump anthropics/claude-code-action from 1.0.83 to 1.0.88 (#34) Bumps [anthropics/claude-code-action](https://github.com/anthropics/claude-code-action) from 1.0.83 to 1.0.88. - [Release notes](https://github.com/anthropics/claude-code-action/releases) - [Commits](https://github.com/anthropics/claude-code-action/compare/bee87b3258c251f9279e5371b0cc3660f37f3f77...1eddb334cfa79fdb21ecbe2180ca1a016e8e7d47) --- updated-dependencies: - dependency-name: anthropics/claude-code-action dependency-version: 1.0.88 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore: enable Claude issue trigger per org CI standard (#48) Add issues:[labeled] event trigger and claude label support so Claude can work issues autonomously — reading the issue, creating a branch, implementing the fix, and opening a PR. Matches the standard defined in petry-projects/.github#24. Co-authored-by: DJ <dj@Rachels-MacBook-Air.local> Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * fix: add checkout step to Claude workflow for issue-triggered mode (#49) The claude-code-action runs git fetch/checkout internally during branch setup but requires the repository to already be cloned on the runner. Without actions/checkout, issue-triggered runs fail with: fatal: not a git repository Co-authored-by: DJ <dj@Rachels-MacBook-Air.local> Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * feat: add dependabot update-and-merge workflow (#54) Add workflow to update behind Dependabot PRs and merge eligible ones. Add skip-commit-verification to automerge workflow for compatibility. Co-authored-by: DJ <dj@Rachels-MacBook-Air.local> Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * feat: split Claude workflow into interactive + issue automation jobs (#61) * feat: split Claude workflow into interactive + issue automation jobs Aligns with the org standard in petry-projects/.github. The claude-issue job runs in automation mode with tools to create PRs, self-review, check CI, and tag code owners when ready. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * fix: add concurrency guard and comment tools to claude-issue job - Add concurrency group keyed on issue number to prevent duplicate runs - Add gh pr comment and gh issue comment to allowedTools for review replies, thread resolution, and code owner tagging - Remove Bash(cat:*) since the Read tool already covers file reads Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> --------- Co-authored-by: DJ <dj@Rachels-MacBook-Air.local> Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * feat: switch to org-level reusable Claude Code workflow (#62) * chore: add CODEOWNERS file for code review enforcement Adds .github/CODEOWNERS assigning @don-petry as default code owner for all files, satisfying the compliance requirement for code owner review enforcement on pull requests. Closes #47 Co-authored-by: don-petry <don-petry@users.noreply.github.com> * fix: sync dependency-audit.yml with org template (closes #42) (#80) fix: replace dtolnay/rust-toolchain with rustup in dependency-audit.yml Syncs dependency-audit.yml with the org template from petry-projects/.github/standards/workflows/dependency-audit.yml. The template eliminates the unpinned dtolnay/rust-toolchain@stable action entirely by using 'rustup toolchain install stable --profile minimal' directly, which needs no third-party action and no SHA pinning. Also updates pinned SHAs for other actions to match the template: - actions/checkout v4 → v6.0.2 - actions/setup-node v4 → v6.3.0 - pnpm/action-setup SHA updated - actions/setup-go SHA updated - cargo-audit 0.21.1 → 0.22.1 Closes #42 Co-authored-by: claude[bot] <41898282+claude[bot]@users.noreply.github.com> Co-authored-by: don-petry <don-petry@users.noreply.github.com> * fix: rename codeql workflow and add javascript-typescript + actions matrix (#81) - Rename codeql-analysis.yml → codeql.yml (compliance: exact filename required) - Replace Python with javascript-typescript (matches TalkTerm stack) - Add actions language scan (required: repo has .github/workflows/*.yml) - Use matrix strategy for multi-language scanning per ci-standards.md - Update schedule to Friday 17:00 UTC per org standard Closes #41 Co-authored-by: claude[bot] <41898282+claude[bot]@users.noreply.github.com> Co-authored-by: don-petry <don-petry@users.noreply.github.com> * ci: add agent-shield.yml workflow (#78) Copies the org-standard AgentShield workflow verbatim from petry-projects/.github/standards/workflows/agent-shield.yml. Closes #51 Co-authored-by: claude[bot] <41898282+claude[bot]@users.noreply.github.com> Co-authored-by: don-petry <don-petry@users.noreply.github.com> * chore(workflows): adopt centralized stubs from petry-projects/.github (#82) Replace inline copies of standardized workflows with the canonical thin caller stubs from petry-projects/.github/standards/workflows/. Each stub delegates to a versioned reusable workflow at petry-projects/.github/.github/workflows/<name>-reusable.yml@v1, so future updates to the standard propagate automatically and drift is caught by the org-wide compliance audit. See petry-projects/.github#87, #88, #89 for context. Co-authored-by: DJ <dj@Rachels-MacBook-Air.local> Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * fix: correct reusable workflow path (remove duplicate .github/) (#135) fix: correct reusable workflow path (remove duplicate .github/ segment) Changed: petry-projects/.github/.github/workflows/... To: petry-projects/.github/workflows/... Co-authored-by: Claude Haiku 4.5 <noreply@anthropic.com> * Revert "fix: correct reusable workflow path (remove duplicate .github/) (#135)" This reverts commit 2f121a1dc0e4c66291f9e68c2bae297c23b1fe7a. * ci: add auto-rebase workflow and check_run trigger to claude.yml * add check_run trigger to claude.yml * add auto-rebase.yml workflow * fix: update auto-rebase ref to SHA containing the reusable workflow * fix: pin auto-rebase.yml to canonical @v1 stub per org standard (#139) Replace SHA-pinned reusable reference with the canonical @v1 tag as required by the org compliance standard for the auto-rebase workflow stub. Closes #138 Co-authored-by: claude[bot] <41898282+claude[bot]@users.noreply.github.com> Co-authored-by: don-petry <don-petry@users.noreply.github.com> * chore(ci): remove stray codeql.yml workflow (#115) The org now uses GitHub-managed CodeQL default setup. The per-repo codeql.yml was drift and ran a duplicate analysis alongside default setup. Removing it per the org standard. Closes #96 Co-authored-by: claude[bot] <41898282+claude[bot]@users.noreply.github.com> Co-authored-by: don-petry <don-petry@users.noreply.github.com> Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> * fix(compliance): add CI secret-scan job and org .gitignore baseline (#116) * fix(compliance): add ci.yml secret-scan job and org .gitignore baseline Addresses compliance checks from issue #98: - secret_scan_ci_job_present: adds .github/workflows/ci.yml with a gitleaks/gitleaks-action@v2.3.9 secret-scan job (full history, --redact, required check per push-protection standard Layer 3) - gitignore_secrets_block: adds .gitignore from the petry-projects org secrets baseline plus TalkTerm-specific Node.js/Electron entries Note: security_and_analysis_unavailable requires org-admin API scope to resolve — this is a platform-level setting beyond a code PR. Co-authored-by: don-petry <don-petry@users.noreply.github.com> * fix(ci): use gitleaks CLI for enforcement; action step for compliance The gitleaks-action requires a GITLEAKS_LICENSE for org repos. Structure the secret-scan job with two steps: - gitleaks/gitleaks-action (continue-on-error: true): satisfies the compliance check text search for `uses: gitleaks/gitleaks-action@` - gitleaks CLI v8.30.1 (checksum-verified): enforces the full-history scan and fails CI on any finding, independent of the license Co-authored-by: don-petry <don-petry@users.noreply.github.com> * fix(ci): add .gitleaksignore for historical false positives Eight false positives in git history flagged by gitleaks generic-api-key: 1. Commit 1f83957: .gitleaksignore comment in a prior unmerged branch quoted a test string inline — not a real credential. 2. Commit e8cc0956: api-testing-patterns.md L681 — `const expiredToken` is explicitly labelled "Expired token" in test-design documentation. 3-8. Commit e8cc0956: files-manifest.csv (6 rows) — SHA256 content checksums of BMAD skill files; high-entropy hex flagged as API key. All verified as non-credentials. Justifications documented in-file. Co-authored-by: don-petry <don-petry@users.noreply.github.com> * fix(ci): correct ci-standards.md reference to org-standard path Addresses review feedback: - Update action pinning policy comment from ci-standards.md to the correct org-standard path: petry-projects/.github/standards/ci-standards.md#action-pinning-policy - Clarify that gitleaks-action v2 does not expose --redact; the CLI step handles redaction for the enforcement scan Co-authored-by: don-petry <don-petry@users.noreply.github.com> --------- Co-authored-by: claude[bot] <41898282+claude[bot]@users.noreply.github.com> Co-authored-by: don-petry <don-petry@users.noreply.github.com> Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> * chore(security): remove drift codeql.yml, enable GitHub-managed default setup (#117) Per org CI standard §2, CodeQL must use GitHub-managed default setup (Settings → Code security → Code scanning), not a per-repo workflow file. Per-repo codeql.yml files are treated as drift by the compliance audit. Actions taken: - Removed .github/workflows/codeql.yml (drift per-repo advanced setup) - Re-confirmed default setup via API: state=configured, query_suite=default The GitHub-managed default setup is already running CodeQL scans. The compliance audit 403 is a PAT scope issue in the audit bot (needs Administration:read scope on the audit bot token in petry-projects/.github). Closes #95 Co-authored-by: claude[bot] <41898282+claude[bot]@users.noreply.github.com> Co-authored-by: don-petry <don-petry@users.noreply.github.com> Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> * chore(settings): add .github/settings.yml to codify repo settings (#118) Documents required repository settings per the petry-projects org standard (standards/github-settings.md), including `delete_branch_on_merge: true`. This creates an auditable, reviewable infrastructure-as-code record of the intended settings. The Probot GitHub Settings app will enforce these automatically if installed in the future; for now, settings are applied via the GitHub API (apply-repo-settings.sh). Closes #92 Co-authored-by: claude[bot] <41898282+claude[bot]@users.noreply.github.com> Co-authored-by: don-petry <don-petry@users.noreply.github.com> Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> * fix(ci): pin agent-shield reusable workflow to SHA (#126) Pins agent-shield-reusable.yml@v1 to its full commit SHA (ee22b427cbce9ecadcf2b436acb57c3adf0cb63d) to satisfy the org-wide action-pinning policy. Closes #85 Co-authored-by: claude[bot] <41898282+claude[bot]@users.noreply.github.com> Co-authored-by: don-petry <don-petry@users.noreply.github.com> Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com> Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> * chore: add bot accounts to CODEOWNERS for auto-merge support * chore: standardize CODEOWNERS on @petry-projects/org-leads (#160) Per the org-wide standard defined in petry-projects/.github (standards/codeowners-standard.md), replace individual user/bot listings with the @petry-projects/org-leads team. Closes the CODEOWNERS gap from pr-review-agent#27. Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com> * chore: sync org-standard pr-review-mention.yml stub from petry-projects/.github * fix: pin pr-review-mention reusable to SHA d3d768d (#173) The @v1 tag in petry-projects/.github pointed to commit 0cb4bba1 which predates the existence of pr-review-mention-reusable.yml, causing a parse-time 'workflow was not found' error in all caller repos. Pin to the correct SHA d3d768dabb7f28cc63283cdfe48630da53700e50 (latest main). Ref: petry-projects/.github#267 * feat(dev-lead): adopt dev-lead agent (Phase 8 cross-repo rollout) * chore(dev-lead): remove claude.yml — replaced by dev-lead.yml (#176) * chore: sync org-standard pr-review-mention.yml stub from petry-projects/.github * chore: sync org-standard pr-review-mention.yml stub from petry-projects/.github * feat: implement issue #171 — Compliance: secret_scanning_ai_detection (#183) Co-authored-by: donpetry-bot <281750570+donpetry-bot@users.noreply.github.com> * feat: implement issue #162 — Compliance: codeowners-no-catchall (#182) Co-authored-by: donpetry-bot <281750570+donpetry-bot@users.noreply.github.com> * feat: implement issue #174 — Compliance: unpinned-actions-dev-lead.yml (#184) Co-authored-by: donpetry-bot <281750570+donpetry-bot@users.noreply.github.com> * feat: implement issue #172 — Compliance: secret_scanning_non_provider_patterns (#188) Co-authored-by: donpetry-bot <281750570+donpetry-bot@users.noreply.github.com> * feat: implement issue #164 — Compliance: check-suite-auto-trigger-347564 (#187) Co-authored-by: donpetry-bot <281750570+donpetry-bot@users.noreply.github.com> * feat: imple…
* Import org-wide AGENTS.md, remove duplicated standards References shared standards from petry-projects/.github for TDD, CI gates, PR reviews, security, and agent guidance. Keeps only project-specific content in this repo's CLAUDE.md. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Address review comments: fix source-of-truth wording, note planned rules - Clarify that TalkTerm extends org-wide standards, not sole source of truth - Mark .claude/rules/ file references as planned but not yet created Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Move project rules to AGENTS.md, make CLAUDE.md a slim pointer Follows the org convention where AGENTS.md is the comprehensive agent-agnostic file and CLAUDE.md is a Claude Code-specific summary with @import for org-wide standards. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Add repo-level AGENTS.md import to CLAUDE.md Ensures Claude Code loads both org-wide and repo-specific agent guidelines. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Use standard GitHub blob URL for org-level import The @ import is a Claude Code feature that resolves GitHub blob URLs natively — raw.githubusercontent.com is unnecessary. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> --------- Co-authored-by: DJ <dj@Rachels-Air.localdomain> Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
* Import org-wide AGENTS.md, remove duplicated standards References shared standards from petry-projects/.github for TDD, CI gates, PR reviews, security, and agent guidance. Keeps only project-specific content in this repo's CLAUDE.md. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Address review comments: fix source-of-truth wording, note planned rules - Clarify that TalkTerm extends org-wide standards, not sole source of truth - Mark .claude/rules/ file references as planned but not yet created Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Move project rules to AGENTS.md, make CLAUDE.md a slim pointer Follows the org convention where AGENTS.md is the comprehensive agent-agnostic file and CLAUDE.md is a Claude Code-specific summary with @import for org-wide standards. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Add repo-level AGENTS.md import to CLAUDE.md Ensures Claude Code loads both org-wide and repo-specific agent guidelines. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Use standard GitHub blob URL for org-level import The @ import is a Claude Code feature that resolves GitHub blob URLs natively — raw.githubusercontent.com is unnecessary. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> --------- Co-authored-by: DJ <dj@Rachels-Air.localdomain> Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
* Import org-wide AGENTS.md, remove duplicated standards References shared standards from petry-projects/.github for TDD, CI gates, PR reviews, security, and agent guidance. Keeps only project-specific content in this repo's CLAUDE.md. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Address review comments: fix source-of-truth wording, note planned rules - Clarify that TalkTerm extends org-wide standards, not sole source of truth - Mark .claude/rules/ file references as planned but not yet created Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Move project rules to AGENTS.md, make CLAUDE.md a slim pointer Follows the org convention where AGENTS.md is the comprehensive agent-agnostic file and CLAUDE.md is a Claude Code-specific summary with @import for org-wide standards. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Add repo-level AGENTS.md import to CLAUDE.md Ensures Claude Code loads both org-wide and repo-specific agent guidelines. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Use standard GitHub blob URL for org-level import The @ import is a Claude Code feature that resolves GitHub blob URLs natively — raw.githubusercontent.com is unnecessary. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> --------- Co-authored-by: DJ <dj@Rachels-Air.localdomain> Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
* Import org-wide AGENTS.md, remove duplicated standards References shared standards from petry-projects/.github for TDD, CI gates, PR reviews, security, and agent guidance. Keeps only project-specific content in this repo's CLAUDE.md. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Address review comments: fix source-of-truth wording, note planned rules - Clarify that TalkTerm extends org-wide standards, not sole source of truth - Mark .claude/rules/ file references as planned but not yet created Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Move project rules to AGENTS.md, make CLAUDE.md a slim pointer Follows the org convention where AGENTS.md is the comprehensive agent-agnostic file and CLAUDE.md is a Claude Code-specific summary with @import for org-wide standards. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Add repo-level AGENTS.md import to CLAUDE.md Ensures Claude Code loads both org-wide and repo-specific agent guidelines. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Use standard GitHub blob URL for org-level import The @ import is a Claude Code feature that resolves GitHub blob URLs natively — raw.githubusercontent.com is unnecessary. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> --------- Co-authored-by: DJ <dj@Rachels-Air.localdomain> Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
* Import org-wide AGENTS.md, remove duplicated standards References shared standards from petry-projects/.github for TDD, CI gates, PR reviews, security, and agent guidance. Keeps only project-specific content in this repo's CLAUDE.md. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Address review comments: fix source-of-truth wording, note planned rules - Clarify that TalkTerm extends org-wide standards, not sole source of truth - Mark .claude/rules/ file references as planned but not yet created Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Move project rules to AGENTS.md, make CLAUDE.md a slim pointer Follows the org convention where AGENTS.md is the comprehensive agent-agnostic file and CLAUDE.md is a Claude Code-specific summary with @import for org-wide standards. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Add repo-level AGENTS.md import to CLAUDE.md Ensures Claude Code loads both org-wide and repo-specific agent guidelines. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Use standard GitHub blob URL for org-level import The @ import is a Claude Code feature that resolves GitHub blob URLs natively — raw.githubusercontent.com is unnecessary. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> --------- Co-authored-by: DJ <dj@Rachels-Air.localdomain> Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
* Import org-wide AGENTS.md, remove duplicated standards References shared standards from petry-projects/.github for TDD, CI gates, PR reviews, security, and agent guidance. Keeps only project-specific content in this repo's CLAUDE.md. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Address review comments: fix source-of-truth wording, note planned rules - Clarify that TalkTerm extends org-wide standards, not sole source of truth - Mark .claude/rules/ file references as planned but not yet created Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Move project rules to AGENTS.md, make CLAUDE.md a slim pointer Follows the org convention where AGENTS.md is the comprehensive agent-agnostic file and CLAUDE.md is a Claude Code-specific summary with @import for org-wide standards. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Add repo-level AGENTS.md import to CLAUDE.md Ensures Claude Code loads both org-wide and repo-specific agent guidelines. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Use standard GitHub blob URL for org-level import The @ import is a Claude Code feature that resolves GitHub blob URLs natively — raw.githubusercontent.com is unnecessary. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> --------- Co-authored-by: DJ <dj@Rachels-Air.localdomain> Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
* Import org-wide AGENTS.md, remove duplicated standards References shared standards from petry-projects/.github for TDD, CI gates, PR reviews, security, and agent guidance. Keeps only project-specific content in this repo's CLAUDE.md. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Address review comments: fix source-of-truth wording, note planned rules - Clarify that TalkTerm extends org-wide standards, not sole source of truth - Mark .claude/rules/ file references as planned but not yet created Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Move project rules to AGENTS.md, make CLAUDE.md a slim pointer Follows the org convention where AGENTS.md is the comprehensive agent-agnostic file and CLAUDE.md is a Claude Code-specific summary with @import for org-wide standards. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Add repo-level AGENTS.md import to CLAUDE.md Ensures Claude Code loads both org-wide and repo-specific agent guidelines. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Use standard GitHub blob URL for org-level import The @ import is a Claude Code feature that resolves GitHub blob URLs natively — raw.githubusercontent.com is unnecessary. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> --------- Co-authored-by: DJ <dj@Rachels-Air.localdomain> Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>



Summary
Depends on
Test plan
🤖 Generated with Claude Code
Summary by CodeRabbit