Skip to content

feat: agents post reviews as the App, and automation reaches the MCP with a token - #118

Draft
fiddur wants to merge 2 commits into
developfrom
post-as-bot
Draft

fiddur wants to merge 2 commits into
developfrom
post-as-bot

Conversation

@fiddur

@fiddur fiddur commented Oct 16, 2026

Copy link
Copy Markdown
Collaborator

post_review posts a session's open findings as diffity[bot] on an installation token the server mints from the App's private key; COMMENT or REQUEST_CHANGES only, and the review names the user who asked. Automation tokens (automation_token, automation_tokens, automation_token_revoke) let an agent that cannot sign in — a scheduled routine — reach /mcp as the user who minted the token. Principle: humans post as themselves from the page, agents only ever as the bot.

Deploy: repository variable DIFFITY_GITHUB_APP_ID (set) and a version of the secret diffity-github-app-private-key (still to add).

🤖 Generated with Claude Code

https://claude.ai/code/session_01Bwp5QefjsjMFeq6CK6cT6w

fiddur and others added 2 commits October 16, 2026 18:05
…with a token

Humans post as themselves, from the page; agents only ever post as `diffity[bot]`, and the review names who asked for it. `post_review { session, event }` posts a session's open findings on an installation token the server mints from the App's private key (`DIFFITY_GITHUB_APP_ID` + `DIFFITY_GITHUB_APP_PRIVATE_KEY`); COMMENT or REQUEST_CHANGES only. An agent that cannot sign in, such as a routine, reaches `/mcp` with an automation token minted by `automation_token { name }`, stored hashed, acting as the user who minted it until revoked.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Bwp5QefjsjMFeq6CK6cT6w
…ry cannot use the private shared ones

Every run on the hosted branch failed at "Unable to resolve action naturalcycles/ci-typescript": diffity is public, ci-typescript is private. pnpm/action-setup + actions/setup-node do the same job; the push trigger follows the branch rename to develop.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Bwp5QefjsjMFeq6CK6cT6w
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant