* fix: merge entrypoint scripts and fix auto-tagging tool permissions
- Merged duplicate claudecode-entrypoint.sh and claudecode-tagging-entrypoint.sh scripts
- Added dynamic tool selection based on OPERATION_TYPE environment variable
- Fixed auto-tagging permissions to include required Bash(gh:*) commands
- Removed 95% code duplication between entrypoint scripts
- Simplified claudeService.ts to use unified entrypoint
- Auto-tagging now uses: Read,GitHub,Bash(gh issue edit:*),Bash(gh issue view:*),Bash(gh label list:*)
- General operations continue to use full tool set
🤖 Generated with [Claude Code](https://claude.ai/code)
Co-Authored-By: Claude <noreply@anthropic.com>
* fix: update Dockerfile to use unified entrypoint script
- Remove references to deleted claudecode-tagging-entrypoint.sh
- Update build process to use single unified entrypoint script
* fix: remove unnecessary async from promisify mock to fix lint error
* feat: add Husky pre-commit hooks with Prettier as primary formatter
- Added Husky for Git pre-commit hooks
- Configured eslint-config-prettier to avoid ESLint/Prettier conflicts
- Prettier handles all formatting, ESLint handles code quality only
- Pre-commit hooks: Prettier format, ESLint check, TypeScript check
- Updated documentation with pre-commit hook setup
- All code quality issues resolved
* feat: consolidate workflows and fix permission issues with clean Docker runners
- Replace 3 complex workflows with 2 lean ones (pull-request.yml, main.yml)
- Add Docker runner configuration for clean, isolated builds
- Remove file permission hacks - use ephemeral containers instead
- Split workload: GitHub-hosted for tests/security, self-hosted for Docker builds
- Add comprehensive pre-commit configuration for security
- Update documentation to be more pragmatic
- Fix credential file permissions and security audit
🤖 Generated with [Claude Code](https://claude.ai/code)
Co-Authored-By: Claude <noreply@anthropic.com>
* fix: allow Husky prepare script to fail in production builds
🤖 Generated with [Claude Code](https://claude.ai/code)
Co-Authored-By: Claude <noreply@anthropic.com>
* fix: update CI badge to reference new main.yml workflow
🤖 Generated with [Claude Code](https://claude.ai/code)
Co-Authored-By: Claude <noreply@anthropic.com>
---------
Co-authored-by: Claude <noreply@anthropic.com>
- Fixed webhook signature verification in githubController-validation.test.js by adding missing x-hub-signature-256 headers
- Fixed startup metrics mocking issues in index-proxy.test.ts by properly mocking metricsMiddleware method
- Fixed Docker entrypoint path expectations in claudeService-docker.test.js and converted to meaningful integration tests
- Removed unnecessary index-proxy.test.ts file that was testing implementation details rather than meaningful functionality
- Removed unused /api/test-tunnel endpoint and TestTunnelResponse type that had no actual usage
- Added proper app export to index.ts for testing compatibility
- Maintained core /health endpoint functionality and optional trust proxy configuration
🤖 Generated with [Claude Code](https://claude.ai/code)
Co-Authored-By: Claude <noreply@anthropic.com>
Added focused tests that verify real-world scenarios rather than targeting
specific lines for coverage:
## Docker Container Management Tests (claudeService-docker.test.js)
- Docker image building when missing vs. using existing images
- Different entrypoint selection for auto-tagging vs. standard operations
- Container execution failure recovery with log retrieval
- Fine-grained GitHub token validation in production environment
## Webhook Validation Tests (githubController-validation.test.js)
- Robust payload validation for security (null, invalid types, malformed data)
- Auto-tagging fallback mechanism when Claude API fails
- User authorization workflow with helpful error messages
- Error recovery with meaningful user feedback
- Pull request webhook handling with proper data validation
## Proxy Configuration Tests (index-proxy.test.ts)
- Trust proxy configuration for reverse proxy environments
- Health check and test tunnel endpoints functionality
- Route integration and mounting verification
- Comprehensive error handling middleware (404s, 500s)
- Request parsing limits and JSON payload handling
- Environment variable configuration (PORT, TRUST_PROXY)
These tests focus on:
✅ Real user scenarios and edge cases
✅ Error handling and recovery paths
✅ Security validation
✅ Integration between components
✅ Environment configuration
Rather than artificial line coverage targeting.
🤖 Generated with [Claude Code](https://claude.ai/code)
Co-Authored-By: Claude <noreply@anthropic.com>
