auto-strands-review.yml

name: Auto Strands Review

on:
  pull_request_target:
    branches: [main]
    types: [opened, synchronize, reopened, ready_for_review]

jobs:
  authorization-check:
    # Authors who opt out of auto-review. They can still trigger it manually
    # by commenting ``/strands review`` on the PR.
    if: ${{ !contains(fromJSON('["chaynabors"]'), github.event.pull_request.user.login) }}
    name: Check access
    permissions:
      contents: read
    runs-on: ubuntu-latest
    outputs:
      approval-env: ${{ steps.auth.outputs.approval-env }}
    steps:
      - name: Check Authorization
        id: auth
        uses: strands-agents/devtools/authorization-check@main
        with:
          skip-check: false
          username: ${{ github.event.pull_request.user.login || 'invalid' }}
          allowed-roles: 'triage,write,maintain,admin'

  trigger-review:
    name: Trigger Strands Review
    needs: authorization-check
    environment:
      name: ${{ needs.authorization-check.outputs.approval-env }}
      deployment: false
    permissions:
      actions: write
      contents: read
    runs-on: ubuntu-latest
    steps:
      - name: Trigger Strands Command Workflow
        uses: actions/github-script@v9
        with:
          github-token: ${{ secrets.GITHUB_TOKEN }}
          script: |
            await github.rest.actions.createWorkflowDispatch({
              owner: context.repo.owner,
              repo: context.repo.repo,
              workflow_id: 'strands-command.yml',
              ref: 'main',
              inputs: {
                issue_id: String(context.payload.pull_request.number),
                command: 'review',
                session_id: ''
              }
            });
            console.log(`Triggered /strands review for PR #${context.payload.pull_request.number}`);