@vicoa/cli 1.3.11-linux-x64 → 1.3.11-win32-x64

package/bin/_internal/integrations/github/claude-code-action/docs/migration-guide.md

@@ -1,261 +1,261 @@
-# Migration Guide: v0.x to v1.0
-
-This guide helps you migrate from Claude Code Action v0.x to v1.0. The new version introduces intelligent mode detection and simplified configuration while maintaining backward compatibility for most use cases.
-
-## Overview of Changes
-
-### 🎯 Key Improvements in v1.0
-
-1. **Automatic Mode Detection** - No more manual `mode` configuration
-2. **Simplified Configuration** - Unified `prompt` and `claude_args` inputs
-3. **Better SDK Alignment** - Closer integration with Claude Code CLI
-
-### ⚠️ Breaking Changes
-
-The following inputs have been deprecated and replaced:
-
-| Deprecated Input      | Replacement                      | Notes                                         |
-| --------------------- | -------------------------------- | --------------------------------------------- |
-| `mode`                | Auto-detected                    | Action automatically chooses based on context |
-| `direct_prompt`       | `prompt`                         | Direct drop-in replacement                    |
-| `override_prompt`     | `prompt`                         | Use GitHub context variables instead          |
-| `custom_instructions` | `claude_args: --system-prompt`   | Move to CLI arguments                         |
-| `max_turns`           | `claude_args: --max-turns`       | Use CLI format                                |
-| `model`               | `claude_args: --model`           | Specify via CLI                               |
-| `allowed_tools`       | `claude_args: --allowedTools`    | Use CLI format                                |
-| `disallowed_tools`    | `claude_args: --disallowedTools` | Use CLI format                                |
-| `claude_env`          | `settings` with env object       | Use settings JSON                             |
-| `mcp_config`          | `claude_args: --mcp-config`      | Pass MCP config via CLI arguments             |
-
-## Migration Examples
-
-### Basic Interactive Workflow (@claude mentions)
-
-**Before (v0.x):**
-
-```yaml
-- uses: anthropics/claude-code-action@beta
-  with:
-    mode: "tag"
-    anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
-    custom_instructions: "Follow our coding standards"
-    max_turns: "10"
-    allowed_tools: "Edit,Read,Write"
-```
-
-**After (v1.0):**
-
-```yaml
-- uses: anthropics/claude-code-action@v1
-  with:
-    anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
-    claude_args: |
-      --max-turns 10
-      --system-prompt "Follow our coding standards"
-      --allowedTools Edit,Read,Write
-```
-
-### Automation Workflow
-
-**Before (v0.x):**
-
-```yaml
-- uses: anthropics/claude-code-action@beta
-  with:
-    mode: "agent"
-    direct_prompt: "Review this PR for security issues"
-    anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
-    model: "claude-3-5-sonnet-20241022"
-    allowed_tools: "Edit,Read,Write"
-```
-
-**After (v1.0):**
-
-```yaml
-- uses: anthropics/claude-code-action@v1
-  with:
-    prompt: "Review this PR for security issues"
-    anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
-    claude_args: |
-      --model claude-4-0-sonnet-20250805
-      --allowedTools Edit,Read,Write
-```
-
-### Custom Template with Variables
-
-**Before (v0.x):**
-
-```yaml
-- uses: anthropics/claude-code-action@beta
-  with:
-    override_prompt: |
-      Analyze PR #$PR_NUMBER in $REPOSITORY
-      Changed files: $CHANGED_FILES
-      Focus on security vulnerabilities
-```
-
-**After (v1.0):**
-
-```yaml
-- uses: anthropics/claude-code-action@v1
-  with:
-    prompt: |
-      Analyze PR #${{ github.event.pull_request.number }} in ${{ github.repository }}
-      Focus on security vulnerabilities in the changed files
-```
-
-### Environment Variables
-
-**Before (v0.x):**
-
-```yaml
-- uses: anthropics/claude-code-action@beta
-  with:
-    claude_env: |
-      NODE_ENV: test
-      CI: true
-```
-
-**After (v1.0):**
-
-```yaml
-- uses: anthropics/claude-code-action@v1
-  with:
-    settings: |
-      {
-        "env": {
-          "NODE_ENV": "test",
-          "CI": "true"
-        }
-      }
-```
-
-## How Mode Detection Works
-
-The action now automatically detects the appropriate mode:
-
-1. **If `prompt` is provided** → Runs in **automation mode**
-
-   - Executes immediately without waiting for @claude mentions
-   - Perfect for scheduled tasks, PR automation, etc.
-
-2. **If no `prompt` but @claude is mentioned** → Runs in **interactive mode**
-
-   - Waits for and responds to @claude mentions
-   - Creates tracking comments with progress
-
-3. **If neither** → No action is taken
-
-## Advanced Configuration with claude_args
-
-The `claude_args` input provides direct access to Claude Code CLI arguments:
-
-```yaml
-claude_args: |
-  --max-turns 15
-  --model claude-4-0-sonnet-20250805
-  --allowedTools Edit,Read,Write,Bash
-  --disallowedTools WebSearch
-  --system-prompt "You are a senior engineer focused on code quality"
-  --mcp-config '{"mcpServers": {"custom": {"command": "npx", "args": ["-y", "@example/server"]}}}'
-```
-
-### Common claude_args Options
-
-| Option              | Description              | Example                                |
-| ------------------- | ------------------------ | -------------------------------------- |
-| `--max-turns`       | Limit conversation turns | `--max-turns 10`                       |
-| `--model`           | Specify Claude model     | `--model claude-4-0-sonnet-20250805`   |
-| `--allowedTools`    | Enable specific tools    | `--allowedTools Edit,Read,Write`       |
-| `--disallowedTools` | Disable specific tools   | `--disallowedTools WebSearch`          |
-| `--system-prompt`   | Add system instructions  | `--system-prompt "Focus on security"`  |
-| `--mcp-config`      | Add MCP server config    | `--mcp-config '{"mcpServers": {...}}'` |
-
-## Provider-Specific Updates
-
-### AWS Bedrock
-
-```yaml
-- uses: anthropics/claude-code-action@v1
-  with:
-    use_bedrock: "true"
-    claude_args: |
-      --model anthropic.claude-4-0-sonnet-20250805-v1:0
-```
-
-### Google Vertex AI
-
-```yaml
-- uses: anthropics/claude-code-action@v1
-  with:
-    use_vertex: "true"
-    claude_args: |
-      --model claude-4-0-sonnet@20250805
-```
-
-## MCP Configuration Migration
-
-### Adding Custom MCP Servers
-
-**Before (v0.x):**
-
-```yaml
-- uses: anthropics/claude-code-action@beta
-  with:
-    mcp_config: |
-      {
-        "mcpServers": {
-          "custom-server": {
-            "command": "npx",
-            "args": ["-y", "@example/server"]
-          }
-        }
-      }
-```
-
-**After (v1.0):**
-
-```yaml
-- uses: anthropics/claude-code-action@v1
-  with:
-    claude_args: |
-      --mcp-config '{"mcpServers": {"custom-server": {"command": "npx", "args": ["-y", "@example/server"]}}}'
-```
-
-You can also pass MCP configuration from a file:
-
-```yaml
-- uses: anthropics/claude-code-action@v1
-  with:
-    claude_args: |
-      --mcp-config /path/to/mcp-config.json
-```
-
-## Step-by-Step Migration Checklist
-
-- [ ] Update action version from `@beta` to `@v1`
-- [ ] Remove `mode` input (auto-detected now)
-- [ ] Replace `direct_prompt` with `prompt`
-- [ ] Replace `override_prompt` with `prompt` using GitHub context
-- [ ] Move `custom_instructions` to `claude_args` with `--system-prompt`
-- [ ] Convert `max_turns` to `claude_args` with `--max-turns`
-- [ ] Convert `model` to `claude_args` with `--model`
-- [ ] Convert `allowed_tools` to `claude_args` with `--allowedTools`
-- [ ] Convert `disallowed_tools` to `claude_args` with `--disallowedTools`
-- [ ] Move `claude_env` to `settings` JSON format
-- [ ] Move `mcp_config` to `claude_args` with `--mcp-config`
-- [ ] Test workflow in a non-production environment
-
-## Getting Help
-
-If you encounter issues during migration:
-
-1. Check the [FAQ](./faq.md) for common questions
-2. Review [example workflows](../examples/) for reference
-3. Open an [issue](https://github.com/anthropics/claude-code-action/issues) for support
-
-## Version Compatibility
-
-- **v0.x workflows** will continue to work but with deprecation warnings
-- **v1.0** is the recommended version for all new workflows
-- Future versions may remove deprecated inputs entirely
+# Migration Guide: v0.x to v1.0
+
+This guide helps you migrate from Claude Code Action v0.x to v1.0. The new version introduces intelligent mode detection and simplified configuration while maintaining backward compatibility for most use cases.
+
+## Overview of Changes
+
+### 🎯 Key Improvements in v1.0
+
+1. **Automatic Mode Detection** - No more manual `mode` configuration
+2. **Simplified Configuration** - Unified `prompt` and `claude_args` inputs
+3. **Better SDK Alignment** - Closer integration with Claude Code CLI
+
+### ⚠️ Breaking Changes
+
+The following inputs have been deprecated and replaced:
+
+| Deprecated Input      | Replacement                      | Notes                                         |
+| --------------------- | -------------------------------- | --------------------------------------------- |
+| `mode`                | Auto-detected                    | Action automatically chooses based on context |
+| `direct_prompt`       | `prompt`                         | Direct drop-in replacement                    |
+| `override_prompt`     | `prompt`                         | Use GitHub context variables instead          |
+| `custom_instructions` | `claude_args: --system-prompt`   | Move to CLI arguments                         |
+| `max_turns`           | `claude_args: --max-turns`       | Use CLI format                                |
+| `model`               | `claude_args: --model`           | Specify via CLI                               |
+| `allowed_tools`       | `claude_args: --allowedTools`    | Use CLI format                                |
+| `disallowed_tools`    | `claude_args: --disallowedTools` | Use CLI format                                |
+| `claude_env`          | `settings` with env object       | Use settings JSON                             |
+| `mcp_config`          | `claude_args: --mcp-config`      | Pass MCP config via CLI arguments             |
+
+## Migration Examples
+
+### Basic Interactive Workflow (@claude mentions)
+
+**Before (v0.x):**
+
+```yaml
+- uses: anthropics/claude-code-action@beta
+  with:
+    mode: "tag"
+    anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
+    custom_instructions: "Follow our coding standards"
+    max_turns: "10"
+    allowed_tools: "Edit,Read,Write"
+```
+
+**After (v1.0):**
+
+```yaml
+- uses: anthropics/claude-code-action@v1
+  with:
+    anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
+    claude_args: |
+      --max-turns 10
+      --system-prompt "Follow our coding standards"
+      --allowedTools Edit,Read,Write
+```
+
+### Automation Workflow
+
+**Before (v0.x):**
+
+```yaml
+- uses: anthropics/claude-code-action@beta
+  with:
+    mode: "agent"
+    direct_prompt: "Review this PR for security issues"
+    anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
+    model: "claude-3-5-sonnet-20241022"
+    allowed_tools: "Edit,Read,Write"
+```
+
+**After (v1.0):**
+
+```yaml
+- uses: anthropics/claude-code-action@v1
+  with:
+    prompt: "Review this PR for security issues"
+    anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
+    claude_args: |
+      --model claude-4-0-sonnet-20250805
+      --allowedTools Edit,Read,Write
+```
+
+### Custom Template with Variables
+
+**Before (v0.x):**
+
+```yaml
+- uses: anthropics/claude-code-action@beta
+  with:
+    override_prompt: |
+      Analyze PR #$PR_NUMBER in $REPOSITORY
+      Changed files: $CHANGED_FILES
+      Focus on security vulnerabilities
+```
+
+**After (v1.0):**
+
+```yaml
+- uses: anthropics/claude-code-action@v1
+  with:
+    prompt: |
+      Analyze PR #${{ github.event.pull_request.number }} in ${{ github.repository }}
+      Focus on security vulnerabilities in the changed files
+```
+
+### Environment Variables
+
+**Before (v0.x):**
+
+```yaml
+- uses: anthropics/claude-code-action@beta
+  with:
+    claude_env: |
+      NODE_ENV: test
+      CI: true
+```
+
+**After (v1.0):**
+
+```yaml
+- uses: anthropics/claude-code-action@v1
+  with:
+    settings: |
+      {
+        "env": {
+          "NODE_ENV": "test",
+          "CI": "true"
+        }
+      }
+```
+
+## How Mode Detection Works
+
+The action now automatically detects the appropriate mode:
+
+1. **If `prompt` is provided** → Runs in **automation mode**
+
+   - Executes immediately without waiting for @claude mentions
+   - Perfect for scheduled tasks, PR automation, etc.
+
+2. **If no `prompt` but @claude is mentioned** → Runs in **interactive mode**
+
+   - Waits for and responds to @claude mentions
+   - Creates tracking comments with progress
+
+3. **If neither** → No action is taken
+
+## Advanced Configuration with claude_args
+
+The `claude_args` input provides direct access to Claude Code CLI arguments:
+
+```yaml
+claude_args: |
+  --max-turns 15
+  --model claude-4-0-sonnet-20250805
+  --allowedTools Edit,Read,Write,Bash
+  --disallowedTools WebSearch
+  --system-prompt "You are a senior engineer focused on code quality"
+  --mcp-config '{"mcpServers": {"custom": {"command": "npx", "args": ["-y", "@example/server"]}}}'
+```
+
+### Common claude_args Options
+
+| Option              | Description              | Example                                |
+| ------------------- | ------------------------ | -------------------------------------- |
+| `--max-turns`       | Limit conversation turns | `--max-turns 10`                       |
+| `--model`           | Specify Claude model     | `--model claude-4-0-sonnet-20250805`   |
+| `--allowedTools`    | Enable specific tools    | `--allowedTools Edit,Read,Write`       |
+| `--disallowedTools` | Disable specific tools   | `--disallowedTools WebSearch`          |
+| `--system-prompt`   | Add system instructions  | `--system-prompt "Focus on security"`  |
+| `--mcp-config`      | Add MCP server config    | `--mcp-config '{"mcpServers": {...}}'` |
+
+## Provider-Specific Updates
+
+### AWS Bedrock
+
+```yaml
+- uses: anthropics/claude-code-action@v1
+  with:
+    use_bedrock: "true"
+    claude_args: |
+      --model anthropic.claude-4-0-sonnet-20250805-v1:0
+```
+
+### Google Vertex AI
+
+```yaml
+- uses: anthropics/claude-code-action@v1
+  with:
+    use_vertex: "true"
+    claude_args: |
+      --model claude-4-0-sonnet@20250805
+```
+
+## MCP Configuration Migration
+
+### Adding Custom MCP Servers
+
+**Before (v0.x):**
+
+```yaml
+- uses: anthropics/claude-code-action@beta
+  with:
+    mcp_config: |
+      {
+        "mcpServers": {
+          "custom-server": {
+            "command": "npx",
+            "args": ["-y", "@example/server"]
+          }
+        }
+      }
+```
+
+**After (v1.0):**
+
+```yaml
+- uses: anthropics/claude-code-action@v1
+  with:
+    claude_args: |
+      --mcp-config '{"mcpServers": {"custom-server": {"command": "npx", "args": ["-y", "@example/server"]}}}'
+```
+
+You can also pass MCP configuration from a file:
+
+```yaml
+- uses: anthropics/claude-code-action@v1
+  with:
+    claude_args: |
+      --mcp-config /path/to/mcp-config.json
+```
+
+## Step-by-Step Migration Checklist
+
+- [ ] Update action version from `@beta` to `@v1`
+- [ ] Remove `mode` input (auto-detected now)
+- [ ] Replace `direct_prompt` with `prompt`
+- [ ] Replace `override_prompt` with `prompt` using GitHub context
+- [ ] Move `custom_instructions` to `claude_args` with `--system-prompt`
+- [ ] Convert `max_turns` to `claude_args` with `--max-turns`
+- [ ] Convert `model` to `claude_args` with `--model`
+- [ ] Convert `allowed_tools` to `claude_args` with `--allowedTools`
+- [ ] Convert `disallowed_tools` to `claude_args` with `--disallowedTools`
+- [ ] Move `claude_env` to `settings` JSON format
+- [ ] Move `mcp_config` to `claude_args` with `--mcp-config`
+- [ ] Test workflow in a non-production environment
+
+## Getting Help
+
+If you encounter issues during migration:
+
+1. Check the [FAQ](./faq.md) for common questions
+2. Review [example workflows](../examples/) for reference
+3. Open an [issue](https://github.com/anthropics/claude-code-action/issues) for support
+
+## Version Compatibility
+
+- **v0.x workflows** will continue to work but with deprecation warnings
+- **v1.0** is the recommended version for all new workflows
+- Future versions may remove deprecated inputs entirely

package/bin/_internal/integrations/github/claude-code-action/docs/security.md

@@ -1,38 +1,38 @@
-# Security
-
-## Access Control
-
-- **Repository Access**: The action can only be triggered by users with write access to the repository
-- **Bot User Control**: By default, GitHub Apps and bots cannot trigger this action for security reasons. Use the `allowed_bots` parameter to enable specific bots or all bots
-- **Token Permissions**: The GitHub app receives only a short-lived token scoped specifically to the repository it's operating in
-- **No Cross-Repository Access**: Each action invocation is limited to the repository where it was triggered
-- **Limited Scope**: The token cannot access other repositories or perform actions beyond the configured permissions
-
-## GitHub App Permissions
-
-The [Claude Code GitHub app](https://github.com/apps/claude) requires these permissions:
-
-- **Pull Requests**: Read and write to create PRs and push changes
-- **Issues**: Read and write to respond to issues
-- **Contents**: Read and write to modify repository files
-
-## Commit Signing
-
-All commits made by Claude through this action are automatically signed with commit signatures. This ensures the authenticity and integrity of commits, providing a verifiable trail of changes made by the action.
-
-## ⚠️ Authentication Protection
-
-**CRITICAL: Never hardcode your Anthropic API key or OAuth token in workflow files!**
-
-Your authentication credentials must always be stored in GitHub secrets to prevent unauthorized access:
-
-```yaml
-# CORRECT ✅
-anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
-# OR
-claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
-
-# NEVER DO THIS ❌
-anthropic_api_key: "sk-ant-api03-..." # Exposed and vulnerable!
-claude_code_oauth_token: "oauth_token_..." # Exposed and vulnerable!
-```
+# Security
+
+## Access Control
+
+- **Repository Access**: The action can only be triggered by users with write access to the repository
+- **Bot User Control**: By default, GitHub Apps and bots cannot trigger this action for security reasons. Use the `allowed_bots` parameter to enable specific bots or all bots
+- **Token Permissions**: The GitHub app receives only a short-lived token scoped specifically to the repository it's operating in
+- **No Cross-Repository Access**: Each action invocation is limited to the repository where it was triggered
+- **Limited Scope**: The token cannot access other repositories or perform actions beyond the configured permissions
+
+## GitHub App Permissions
+
+The [Claude Code GitHub app](https://github.com/apps/claude) requires these permissions:
+
+- **Pull Requests**: Read and write to create PRs and push changes
+- **Issues**: Read and write to respond to issues
+- **Contents**: Read and write to modify repository files
+
+## Commit Signing
+
+All commits made by Claude through this action are automatically signed with commit signatures. This ensures the authenticity and integrity of commits, providing a verifiable trail of changes made by the action.
+
+## ⚠️ Authentication Protection
+
+**CRITICAL: Never hardcode your Anthropic API key or OAuth token in workflow files!**
+
+Your authentication credentials must always be stored in GitHub secrets to prevent unauthorized access:
+
+```yaml
+# CORRECT ✅
+anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
+# OR
+claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
+
+# NEVER DO THIS ❌
+anthropic_api_key: "sk-ant-api03-..." # Exposed and vulnerable!
+claude_code_oauth_token: "oauth_token_..." # Exposed and vulnerable!
+```