GitHub Actions Integration

name: Cline Issue Assistant

on:
  issue_comment:
    types: [created, edited]

# No permissions by default; each job asks for what it needs.
permissions: {}

jobs:
  authorize:
    # Runs for @cline mentions on issues, not pull requests.
    if: |
      contains(github.event.comment.body, '@cline') &&
      !github.event.issue.pull_request
    runs-on: ubuntu-latest
    timeout-minutes: 5

    # Read-only, and uses no secrets.
    permissions:
      contents: read

    outputs:
      allowed: ${{ steps.check.outputs.allowed }}

    steps:
      # Checks the comment's author, not whoever edited it last, so that
      # editing someone else's comment doesn't start Cline on their text.
      - name: Check that the comment's author can write to the repository
        id: check
        env:
          GH_TOKEN: ${{ github.token }}
          AUTHOR: ${{ github.event.comment.user.login }}
        run: |
          PERMISSION=$(gh api "repos/$GITHUB_REPOSITORY/collaborators/$AUTHOR/permission" --jq .permission)
          echo "$AUTHOR has $PERMISSION permission"
          if [ "$PERMISSION" = admin ] || [ "$PERMISSION" = write ]; then
            echo "allowed=true" >> "$GITHUB_OUTPUT"
          fi

  analyze:
    needs: authorize
    if: needs.authorize.outputs.allowed == 'true'
    runs-on: ubuntu-latest
    environment: cline-actions
    timeout-minutes: 30

    # Read-only: Cline runs in this job.
    permissions:
      contents: read
      issues: read

    steps:
      - name: Checkout repository
        uses: actions/checkout@v4
        with:
          persist-credentials: false

      - name: Setup Node.js
        uses: actions/setup-node@v4
        with:
          node-version: 22

      - name: Install Cline CLI
        run: npm install -g cline

      - name: Configure Cline Authentication
        env:
          OPENROUTER_API_KEY: ${{ secrets.OPENROUTER_API_KEY }}
        run: |
          cline auth --provider openrouter \
            --apikey "$OPENROUTER_API_KEY" \
            --modelid anthropic/claude-sonnet-5.5

      - name: Run analysis
        env:
          GH_TOKEN: ${{ github.token }}
          ISSUE_URL: ${{ github.event.issue.html_url }}
          COMMENT: ${{ github.event.comment.body }}
        run: |
          set -euo pipefail
          bash git-scripts/analyze-issue.sh "$ISSUE_URL" "Analyze this issue. The user asked: $COMMENT" > response.md

      - name: Save the response
        uses: actions/upload-artifact@v4
        with:
          name: response
          path: response.md
          if-no-files-found: error

  post:
    needs: analyze
    runs-on: ubuntu-latest
    timeout-minutes: 5

    # Can write issues, but runs no code from the repository or from Cline.
    permissions:
      issues: write

    steps:
      - name: Download the response
        uses: actions/download-artifact@v4
        with:
          name: response
          path: ${{ runner.temp }}/response

      - name: Post the response
        env:
          GH_TOKEN: ${{ github.token }}
          GH_REPO: ${{ github.repository }}
          ISSUE_NUMBER: ${{ github.event.issue.number }}
        run: gh issue comment "$ISSUE_NUMBER" --body-file "$RUNNER_TEMP/response/response.md"

#!/bin/bash
# Analyze a GitHub issue using Cline CLI

if [ -z "$1" ]; then
    echo "Usage: $0 <github-issue-url> [prompt]"
    echo "Example: $0 https://github.com/owner/repo/issues/123"
    echo "Example: $0 https://github.com/owner/repo/issues/123 'What is the root cause of this issue?'"
    exit 1
fi

# Gather the args
ISSUE_URL="$1"
PROMPT="${2:-What is the root cause of this issue?}"

# Fail if Cline fails, not only if jq does
set -o pipefail

# Ask Cline for its analysis, showing only the summary
cline --auto-approve true --json "$PROMPT: $ISSUE_URL" | \
    jq -r 'select(.type == "run_result") | .text'

chmod +x git-scripts/analyze-issue.sh