From 59f2620e0b69d6f0153f174857cea5ea24ea5dc2 Mon Sep 17 00:00:00 2001
From: Daniel Kronovet <kronovet@gmail.com>
Date: Wed, 22 Apr 2026 14:19:00 -0400
Subject: [PATCH] ci: give claude-code-action pnpm and gh tooling for build+PR

Previous runs on defrag-analysis issues hit tool permission denials and
produced no branch or PR. Grant pnpm (for pnpm run build) and gh (for
opening PRs) via claude_args, and set up Node/pnpm on the runner so the
build step the prompt already asks for can actually execute. Enable
show_full_output temporarily to surface any remaining denials.
---
 .github/workflows/claude.yaml | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/.github/workflows/claude.yaml b/.github/workflows/claude.yaml
index 461fda2e..cd31ef69 100644
--- a/.github/workflows/claude.yaml
+++ b/.github/workflows/claude.yaml
@@ -22,10 +22,22 @@ jobs:
               with:
                   fetch-depth: 0
 
+            - uses: pnpm/action-setup@v4
+
+            - uses: actions/setup-node@v4
+              with:
+                  node-version: "24"
+                  cache: "pnpm"
+
+            - run: pnpm install --frozen-lockfile
+
             - uses: anthropics/claude-code-action@v1
               with:
                   anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
                   github_token: ${{ secrets.GITHUB_TOKEN }}
+                  show_full_output: true
+                  claude_args: |
+                      --allowedTools "Bash(pnpm:*),Bash(gh:*)"
                   prompt: |
                       You are acting on the Dojo documentation repo. The project-level CLAUDE.md and the files in `spec/` (style-guide.md, page-types.md, best-practices.md) are the source of truth for writing conventions — read them before drafting changes.