Merge pull request #2 from node9-ai/dev

fix: merge latest dev updates into main

Author: nadav-node9

.github/workflows/ai-review.yml

@@ -6,7 +6,7 @@ on:
 
 jobs:
   review:
-    name: Gemini Code Review
+    name: Claude Code Review
     runs-on: ubuntu-latest
     # Skip if the PR was opened by the bot itself
     if: github.actor != 'github-actions[bot]'

scripts/ai-review.mjs

@@ -3,8 +3,15 @@ import { Octokit } from "@octokit/rest";
 
 const prNumber = parseInt(process.env.PR_NUMBER);
 const githubToken = process.env.GITHUB_TOKEN;
-const [repoOwner, repoName] = (process.env.GITHUB_REPOSITORY || "").split("/");
+const repo = process.env.GITHUB_REPOSITORY || "";
+const [repoOwner, repoName] = repo.split("/");
 
+if (!prNumber || !githubToken || !repoOwner || !repoName || !process.env.ANTHROPIC_API_KEY) {
+  console.error("Missing required environment variables.");
+  process.exit(1);
+}
+
+const MAX_DIFF_CHARS = 20000;
 const octokit = new Octokit({ auth: githubToken });
 
 async function runReview() {
@@ -22,6 +29,11 @@ async function runReview() {
       return;
     }
 
+    const wasTruncated = prDiff.length > MAX_DIFF_CHARS;
+    const truncatedDiff = wasTruncated
+      ? prDiff.slice(0, MAX_DIFF_CHARS) + "\n\n... [diff truncated]"
+      : prDiff;
+
     const prompt = `You are a senior Python engineer reviewing a pull request for the Node9 Python SDK.
 Node9 is an execution security library — a @protect decorator that intercepts AI agent tool calls and asks for human approval before running them.
 
@@ -34,16 +46,16 @@ Review the following git diff and provide concise, actionable feedback. Focus on
 
 If the changes look good with no issues, say so briefly.
 Do NOT rewrite the code. Just review it.
-Keep your review under 400 words.
+Keep your review under 800 words.
 
 ## Git Diff:
-${prDiff}`;
+${truncatedDiff}`;
 
     console.log("Sending diff to Claude for review...");
     const client = new Anthropic({ apiKey: process.env.ANTHROPIC_API_KEY });
     const message = await client.messages.create({
-      model: "claude-sonnet-4-5",
-      max_tokens: 1024,
+      model: "claude-sonnet-4-6",
+      max_tokens: 2048,
       messages: [{ role: "user", content: prompt }],
     });
 
@@ -54,7 +66,7 @@ ${prDiff}`;
       owner: repoOwner,
       repo: repoName,
       issue_number: prNumber,
-      body: `## 🤖 Claude Code Review\n\n${review}\n\n---\n*Automated review by Claude Sonnet*`,
+      body: `## 🤖 Claude Code Review\n\n${review}${wasTruncated ? "\n\n> ⚠️ **Note:** This diff exceeded 20,000 characters and was truncated. The review above covers only the first portion of the changes." : ""}\n\n---\n*Automated review by Claude Sonnet*`,
     });
 
     console.log("Review posted successfully.");