add claude code workflow

.github/workflows/claude-code-review.yml

@@ -0,0 +1,51 @@
+name: Claude Code Review
+
+on:
+  pull_request:
+    types: [opened, reopened]
+
+jobs:
+  claude-review:
+    # skip renovate PRs
+    if: |- 
+      github.event.pull_request.user.login != 'renovate[bot]'  
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      pull-requests: write  # Required for gh pr comment
+      issues: read
+      id-token: write
+      actions: read  # Required for Claude to read CI results on PRs
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v5
+        with:
+          fetch-depth: 1
+
+      - name: Run Claude Code Review
+        id: claude-review
+        uses: anthropics/claude-code-action@v1
+        with:
+          claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
+          prompt: |
+            REPO: ${{ github.repository }}
+            PR NUMBER: ${{ github.event.pull_request.number }}
+
+            Please review this pull request and provide feedback on:
+            - Code quality and best practices
+            - Potential bugs or issues
+            - Performance considerations
+            - Security concerns
+            - Test coverage
+
+            Use the repository's AGENTS.md for guidance on style and conventions. Be constructive and helpful in your feedback.
+
+            Use `gh pr comment` with your Bash tool to leave your review as a comment on the PR.
+
+          # See https://github.com/anthropics/claude-code-action/blob/main/docs/usage.md
+          # or https://docs.claude.com/en/docs/claude-code/cli-reference for available options
+          claude_args: |
+            --allowed-tools "Bash(gh issue view:*),Bash(gh search:*),Bash(gh issue list:*),Bash(gh pr comment:*),Bash(gh pr diff:*),Bash(gh pr view:*),Bash(gh pr list:*)"
+            --model claude-sonnet-4-5-20250929
+

.github/workflows/claude.yml

@@ -0,0 +1,65 @@
+name: Claude Code
+
+on:
+  issue_comment:
+    types: [created]
+  pull_request_review_comment:
+    types: [created]
+  issues:
+    types: [opened, assigned]
+  pull_request_review:
+    types: [submitted]
+
+jobs:
+  claude:
+    if: |
+      (github.event_name == 'issue_comment' && contains(github.event.comment.body, '@claude')) ||
+      (github.event_name == 'pull_request_review_comment' && contains(github.event.comment.body, '@claude')) ||
+      (github.event_name == 'pull_request_review' && contains(github.event.review.body, '@claude')) ||
+      (github.event_name == 'issues' && (contains(github.event.issue.body, '@claude') || contains(github.event.issue.title, '@claude')))
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      pull-requests: write  # Required for Claude to comment on PRs
+      issues: write  # Required for Claude to comment on issues
+      id-token: write
+      actions: read  # Required for Claude to read CI results on PRs
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v5
+        with:
+          fetch-depth: 1
+
+      - name: Run Claude Code
+        id: claude
+        uses: anthropics/claude-code-action@v1
+        with:
+          claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
+
+          # This is an optional setting that allows Claude to read CI results on PRs
+          additional_permissions: |
+            actions: read
+
+          prompt: |
+            You are helping maintain a dotfiles repository. This repository contains:
+
+            - Nix configuration files using flakes, nix-darwin, and home-manager
+            - Shell configurations (zsh, bash)
+            - Development tool configurations
+            - GitHub Actions workflows
+
+            When working on this codebase:
+
+            - Use the repository's AGENTS.md for guidance on style and conventions.
+            - Maintain consistency with existing Nix style and patterns
+            - Test any Nix changes for syntax validity
+            - Keep configurations modular and well-documented
+            - Follow the existing directory structure
+
+            Now, please address the following request: ${{ github.event.comment.body || github.event.issue.body || github.event.review.body }}
+
+          # Allow Claude to use necessary tools for managing this repository
+          claude_args: | 
+            --allowed-tools Bash,Read,Write,Edit,Glob,Grep
+            --model claude-sonnet-4-5-20250929
+