Repository navigation
Conversation
…with a token
Humans post as themselves, from the page; agents only ever post as `diffity[bot]`, and the review names who asked for it. `post_review { session, event }` posts a session's open findings on an installation token the server mints from the App's private key (`DIFFITY_GITHUB_APP_ID` + `DIFFITY_GITHUB_APP_PRIVATE_KEY`); COMMENT or REQUEST_CHANGES only. An agent that cannot sign in, such as a routine, reaches `/mcp` with an automation token minted by `automation_token { name }`, stored hashed, acting as the user who minted it until revoked.
Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Bwp5QefjsjMFeq6CK6cT6w
…ry cannot use the private shared ones Every run on the hosted branch failed at "Unable to resolve action naturalcycles/ci-typescript": diffity is public, ci-typescript is private. pnpm/action-setup + actions/setup-node do the same job; the push trigger follows the branch rename to develop. Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01Bwp5QefjsjMFeq6CK6cT6w
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
post_reviewposts a session's open findings asdiffity[bot]on an installation token the server mints from the App's private key; COMMENT or REQUEST_CHANGES only, and the review names the user who asked. Automation tokens (automation_token,automation_tokens,automation_token_revoke) let an agent that cannot sign in — a scheduled routine — reach/mcpas the user who minted the token. Principle: humans post as themselves from the page, agents only ever as the bot.Deploy: repository variable
DIFFITY_GITHUB_APP_ID(set) and a version of the secretdiffity-github-app-private-key(still to add).🤖 Generated with Claude Code
https://claude.ai/code/session_01Bwp5QefjsjMFeq6CK6cT6w