Agent Authority Scanner

name: patchbot
on:
  issues:
    types: [labeled]

permissions: write-all

jobs:
  run:
    if: github.event.label.name == 'agent-ok'
    runs-on: ubuntu-latest
    env:
      AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}         # IAM user patchbot-ci
      AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
      AWS_REGION: us-east-1
      CLAUDE_CODE_USE_BEDROCK: "1"
      ANTHROPIC_MODEL: us.anthropic.claude-sonnet-4-5-20250929-v1:0
      ANTHROPIC_SMALL_FAST_MODEL: us.anthropic.claude-haiku-4-5-20251001-v1:0
      TALLY_TOOLS_URL: https://tally-tools.internal.tallyline.io/mcp
    steps:
      - uses: actions/checkout@v4
        with:
          token: ${{ secrets.PATCHBOT_PAT }}   # Sam's PAT (samkim-tl), repo + workflow scopes; samkim-tl is on main's bypass list
      - name: Run Patchbot
        run: |
          npx @anthropic-ai/claude-code -p "$(cat .patchbot/task-prompt.md) Issue: ${{ github.event.issue.title }}" \
            --dangerously-skip-permissions
      - name: Ship it
        run: |
          gh pr create --fill --head patchbot/${{ github.event.issue.number }}
          gh pr merge --auto --squash
        env:
          GH_TOKEN: ${{ secrets.PATCHBOT_PAT }}

resource "aws_iam_user" "patchbot_ci" {
  name = "patchbot-ci"
}

resource "aws_iam_access_key" "patchbot_ci" {
  user = aws_iam_user.patchbot_ci.name
}

# TEMPORARY until we scope this down -- sk, 2026-01-14
resource "aws_iam_user_policy_attachment" "patchbot_admin" {
  user       = aws_iam_user.patchbot_ci.name
  policy_arn = "arn:aws:iam::aws:policy/AdministratorAccess"
}

PROD_DSN = os.environ["PROD_DSN_APP_ADMIN"]
BLOCKED = ("drop table", "truncate", "delete from")

@mcp.tool()
def run_sql(query: str) -> list[dict]:
    """Run any SQL against the production database and return the rows."""
    if any(word in query.lower() for word in BLOCKED):
        raise ValueError("destructive statement blocked")
    with psycopg.connect(PROD_DSN, autocommit=True) as conn:
        ...  # execute, return rows as dicts

@mcp.tool()
def deploy(service: str, ref: str) -> str:
    """Deploy a service to production at the given git ref."""
    return subprocess.check_output(["infra/scripts/deploy.sh", service, ref]).decode()

@mcp.tool()
def rotate_secret(name: str) -> str:
    """Rotate a secret in AWS Secrets Manager."""
    return boto3.client("secretsmanager").rotate_secret(SecretId=name)["ARN"]

{
  "required_status_checks": {
    "strict": false,
    "contexts": ["lint", "unit"]
  },
  "enforce_admins": { "enabled": false },
  "required_pull_request_reviews": {
    "required_approving_review_count": 1,
    "require_code_owner_reviews": false,
    "dismiss_stale_reviews": false,
    "require_last_push_approval": false,
    "bypass_pull_request_allowances": {
      "users": [{ "login": "samkim-tl", "type": "User" }],
      "teams": [],
      "apps": []
    }
  },
  "restrictions": null,
  "required_linear_history": { "enabled": true },
  "allow_force_pushes": { "enabled": false },
  "allow_deletions": { "enabled": false }
}