consumer-workflow.yml

# Copy this into a consuming repo as `.github/workflows/pr-review.yml`.
# Replace <owner> with the org/user that hosts the agents repo.
#
# Default model is github/openai/gpt-4.1 via GitHub Models — the built-in
# GITHUB_TOKEN authenticates it, so no API key is needed, but the token needs
# `models: read` (below). On a free plan it's capped at ~8k tokens/request
# (too small for big diffs); a paid plan lifts that. To use Anthropic instead,
# see the block at the bottom.
name: PR Review

on:
  pull_request:
    types: [opened, synchronize, reopened]

permissions:
  contents: read
  pull-requests: write
  models: read

jobs:
  review:
    runs-on: ubuntu-latest
    timeout-minutes: 30
    steps:
      - uses: actions/checkout@v4 # so the agent can see this repo's .agents/ overrides

      - uses: <owner>/agents/actions/pr-review@main # @main = always-latest skills/prompts; pin @v1 for reproducible
        with:
          pr-number: ${{ github.event.pull_request.number }}
          # Optional:
          # model: github/openai/gpt-4o    # another GitHub model
          # override-mode: merge           # or: replace

      # --- Or review with Anthropic instead of GitHub Models -----------------
      # Drop `models: read` above, add ANTHROPIC_API_KEY as a repo secret, and
      # use this step instead. Provider credentials go through env:, not action
      # inputs — pi-ai reads them from the inherited process environment.
      #
      # - uses: <owner>/agents/actions/pr-review@main
      #   env:
      #     ANTHROPIC_API_KEY: ${{ secrets.ANTHROPIC_API_KEY }}
      #   with:
      #     pr-number: ${{ github.event.pull_request.number }}
      #     model:     anthropic/claude-sonnet-4-6

      # --- Or review with Kimi K2.6 on Cloudflare Workers AI -----------------
      # 262k context window, reasoning, vision, tool calling.
      # Drop `models: read` above, add CLOUDFLARE_API_KEY (token with
      # `Workers AI` → Read scope) and CLOUDFLARE_ACCOUNT_ID as repo secrets,
      # then use this step instead. Provider credentials go through env:, not
      # action inputs — pi-ai's cloudflare-workers-ai provider reads them from
      # the inherited process environment.
      #
      # - uses: <owner>/agents/actions/pr-review@main
      #   env:
      #     CLOUDFLARE_API_KEY:    ${{ secrets.CLOUDFLARE_API_KEY }}
      #     CLOUDFLARE_ACCOUNT_ID: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}
      #   with:
      #     pr-number: ${{ github.event.pull_request.number }}
      #     model:     cloudflare-workers-ai/@cf/moonshotai/kimi-k2.6