Skip to content

B
bit-pm
切换分支/标签
  1. 14 2月, 2026 9 次提交
  3. 13 2月, 2026 28 次提交
  5. 12 2月, 2026 3 次提交
    • wwwillchen-bot's avatar
      Add step to remove needs-human:review-issue label after push (#2654) · 30ed10aa
      由 wwwillchen-bot 提交于 
      ## Summary
- Updates both `pr-push.md` and `fast-push.md` commands to automatically
remove the `needs-human:review-issue` label after pushing
- This label indicates the issue needed human review before work
started, which is now complete once the PR is pushed

## Test plan
- Run `/dyad:pr-push` on a PR with the `needs-human:review-issue` label
and verify it gets removed
- Run `/dyad:fast-push` and verify the same behavior

🤖 Generated with [Claude Code](https://claude.com/claude-code)
<!-- devin-review-badge-begin -->

---

<a href="https://app.devin.ai/review/dyad-sh/dyad/pull/2654"
target="_blank">
  <picture>
<source media="(prefers-color-scheme: dark)"
srcset="https://static.devin.ai/assets/gh-open-in-devin-review-dark.svg?v=1">
<img
src="https://static.devin.ai/assets/gh-open-in-devin-review-light.svg?v=1"
alt="Open with Devin">
  </picture>
</a>
<!-- devin-review-badge-end -->


<!-- This is an auto-generated description by cubic. -->
---
## Summary by cubic
Automatically removes the needs-human:review-issue label after pushing
in pr-push and fast-push, so issues reflect that human review is
complete. Keeps PRs and labels in sync without manual cleanup.

- **New Features**
- pr-push and fast-push run gh pr edit --remove-label
"needs-human:review-issue" after push, gracefully handling cases where
the label doesn’t exist.

<sup>Written for commit 5d9bd27c187502459b83bfde12b960a0f89c5cd5.
Summary will update on new commits.</sup>

<!-- End of auto-generated description by cubic. -->
Co-authored-by: 's avatarWill Chen <willchen90@gmail.com>
Co-authored-by: 's avatarClaude Opus 4.5 <noreply@anthropic.com>
      30ed10aa
    • Will Chen's avatar
      Relax shell injection checks in permission hooks (#2653) · 42531151
      由 Will Chen 提交于 
      ## Summary
- Add `$(cat ...)` as a safe command substitution pattern in the gh
permission hook, allowing commands like `gh api graphql -f query="$(cat
/tmp/query.graphql)" > /tmp/output.json` to passthrough instead of being
blocked
- Add safe pipe and redirect handling to the python permission hook,
allowing pytest commands with `2>&1 | tail` output formatting patterns
- Move `| cat` from blocked to allowed in python hook tests since `cat`
is a safe read-only command

#skip-bugbot

## Test plan
- [x] All gh permission hook tests pass (572 good commands, 406 bad
commands)
- [x] All python permission hook tests pass (good, bad, passthrough,
security-blocked)
- [x] npm test passes (803 tests)

🤖 Generated with [Claude Code](https://claude.com/claude-code)
<!-- devin-review-badge-begin -->

---

<a href="https://app.devin.ai/review/dyad-sh/dyad/pull/2653"
target="_blank">
  <picture>
<source media="(prefers-color-scheme: dark)"
srcset="https://static.devin.ai/assets/gh-open-in-devin-review-dark.svg?v=1">
<img
src="https://static.devin.ai/assets/gh-open-in-devin-review-light.svg?v=1"
alt="Open with Devin">
  </picture>
</a>
<!-- devin-review-badge-end -->


<!-- This is an auto-generated description by cubic. -->
---
## Summary by cubic
Relaxed shell injection checks in GH and Python permission hooks to
allow common read-only patterns like $(cat ...), pipes to safe tools,
and simple redirects. This reduces false blocks while keeping unsafe
substitutions and pipelines guarded.

- **Bug Fixes**
- GH hook: treat $(cat ...) as a safe command substitution and
neutralize it before checks.
- Python hook: allow pipes to common text tools (e.g., tail, grep, cat)
and redirects like 2>&1 and >/dev/null.
- Tests: move python `| cat` to allowed; add cases for gh `$(cat ...)`
and pytest `2>&1 | tail`.

<sup>Written for commit b1695c6e09bdc58288197ae2ab79745947fcca59.
Summary will update on new commits.</sup>

<!-- End of auto-generated description by cubic. -->
Co-authored-by: 's avatarClaude Opus 4.6 <noreply@anthropic.com>
      42531151
    • wwwillchen-bot's avatar
      Add Claude rules review workflow (#2652) · a852505d
      由 wwwillchen-bot 提交于 
      ## Summary
- Adds a GitHub Actions workflow that reviews Claude rules files
(AGENTS.md and .mcp.json) on pull requests
- The workflow checks for proper formatting and content in configuration
files
- Helps maintain quality of agent configuration and rules

## Test plan
- PR review workflow will run on this PR
- Verify the workflow file is valid YAML and GitHub Actions syntax

#skip-bugbot

🤖 Generated with [Claude Code](https://claude.com/claude-code)
<!-- devin-review-badge-begin -->

---

<a href="https://app.devin.ai/review/dyad-sh/dyad/pull/2652"
target="_blank">
  <picture>
<source media="(prefers-color-scheme: dark)"
srcset="https://static.devin.ai/assets/gh-open-in-devin-review-dark.svg?v=1">
<img
src="https://static.devin.ai/assets/gh-open-in-devin-review-light.svg?v=1"
alt="Open with Devin">
  </picture>
</a>
<!-- devin-review-badge-end -->

<!-- This is an auto-generated description by cubic. -->
---
## Summary by cubic
Adds a weekly workflow that audits AGENTS.md and the rules/ directory
and opens a single issue with keep/update/remove recommendations and
proposed gaps. Keeps our agent guidance current and trims low‑value
rules.

- **New Features**
- Adds .github/workflows/claude-rules-review.yml running Mondays at
13:00 UTC and via manual trigger.
- Uses anthropics/claude-code-action@v1 in direct mode with restricted
tools and a 30‑minute timeout (model set via claude_args).
- Closes any prior agent-review issues before creating a new summary;
ensures documentation and agent-review labels exist.
- Requires CLAUDE_CODE_OAUTH_TOKEN; uses GITHUB_TOKEN; shallow clone to
last 200 commits; minimal permissions (contents: read, issues: write).

<sup>Written for commit 820abfb2c8cc30ece2743ac71f021e371d250c23.
Summary will update on new commits.</sup>

<!-- End of auto-generated description by cubic. -->

---------
Co-authored-by: 's avatarWill Chen <willchen90@gmail.com>
Co-authored-by: 's avatarClaude Opus 4.5 <noreply@anthropic.com>
Co-authored-by: 's avatarclaude[bot] <41898282+claude[bot]@users.noreply.github.com>
Co-authored-by: 's avatarcubic-dev-ai[bot] <191113872+cubic-dev-ai[bot]@users.noreply.github.com>
      a852505d