Maniacs_Mansion/NestQuest
11
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Keep Claude reviews noninteractive and read-only

Browse Source
This commit is contained in:
orchestrator-agent
2026-09-22 10:52:38 -04:00
parent 883c985707
commit 26f812ac07
2 changed files with 4 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
ORCHESTRATION.md
+2 -1
View File
@@ -17,7 +17,8 @@ The approver's shell permission permits only the installed
Claude approval evidence, an exact-head Gitea approval by `review_agent`, Claude approval evidence, an exact-head Gitea approval by `review_agent`,
the `dev` target, a mergeable PR, and passing configured checks before it the `dev` target, a mergeable PR, and passing configured checks before it
requests a squash merge. `scripts/nq-review` launches the independent requests a squash merge. `scripts/nq-review` launches the independent
Claude review in the task worktree, checks the head again afterward, saves Claude review in a noninteractive read-only session in the task worktree,
checks the head again afterward, saves
the output under `/tmp/opencode`, and posts the Gitea approval. the output under `/tmp/opencode`, and posts the Gitea approval.
The approver verifies the reviewed head again before a merge. The approver verifies the reviewed head again before a merge.
scripts/nq-review
+2 -1
View File
@@ -71,7 +71,8 @@ def main() -> int:
) )
result = subprocess.run( result = subprocess.run(
[CLAUDE, "-p", prompt, "--model", "claude-sonnet-5", "--effort", "high", [CLAUDE, "-p", prompt, "--model", "claude-sonnet-5", "--effort", "high",
"--permission-mode", "plan", "--allowedTools", "Read", "Grep", "Glob", "--permission-mode", "dontAsk", "--disallowedTools", "Edit", "Write",
"NotebookEdit", "--allowedTools", "Read", "Grep", "Glob",
"Bash(git diff:*)", "Bash(git log:*)", "Bash(git show:*)", "Bash(git status:*)"], "Bash(git diff:*)", "Bash(git log:*)", "Bash(git show:*)", "Bash(git status:*)"],
cwd=args.worktree, text=True, capture_output=True, timeout=1200, cwd=args.worktree, text=True, capture_output=True, timeout=1200,
) )