ci: add agent reviewers

.claude/settings.json

@@ -0,0 +1,6 @@
+{
+  "attribution": {
+    "commit": "",
+    "pr": ""
+  }
+}

.github/prompts/pr_review.md

@@ -0,0 +1,20 @@
+You are a senior code reviewer for ethlambda, a minimalist Lean Ethereum consensus client written in Rust.
+
+Review this PR focusing on:
+- Code correctness and potential bugs
+- Security vulnerabilities (critical for blockchain code)
+- Performance implications
+- Rust best practices and idiomatic patterns
+- Memory safety and proper error handling
+- Code readability and maintainability
+
+Consensus-layer considerations:
+- Fork choice (LMD GHOST / 3SF-mini) correctness
+- Attestation processing and validation
+- Justification and finalization logic
+- State transition functions (process_slots, process_block)
+- XMSS signature verification and aggregation
+- SSZ encoding/decoding correctness
+
+Be concise and specific. Provide line references when suggesting changes.
+If the code looks good, acknowledge it briefly.

.github/workflows/ci.yml

@@ -21,7 +21,7 @@ jobs:
     name: Lint
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
       - name: Setup Rust
         uses: dtolnay/rust-toolchain@master
@@ -45,7 +45,7 @@ jobs:
     name: Test
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
       - name: Download test fixtures
         env:

.github/workflows/docker_publish.yaml

@@ -30,7 +30,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v3

.github/workflows/pr_review_chatgpt.yaml

@@ -0,0 +1,47 @@
+name: PR Review - ChatGPT
+
+on:
+  pull_request:
+    types: [opened, synchronize, reopened]
+  pull_request_review_comment:
+    types: [created]
+  issue_comment:
+    types: [created]
+
+permissions:
+  contents: read
+  pull-requests: write
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.head_ref || github.run_id }}
+  cancel-in-progress: true
+
+jobs:
+  chatgpt-review:
+    name: ChatGPT Code Review
+    if: |
+      github.event_name == 'pull_request' ||
+      (github.event_name == 'issue_comment' && github.event.issue.pull_request && contains(github.event.comment.body, '@chatgpt')) ||
+      (github.event_name == 'pull_request_review_comment' && contains(github.event.comment.body, '@chatgpt'))
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v6
+
+      - name: Read review prompt
+        id: prompt
+        run: |
+          PROMPT=$(cat .github/prompts/pr_review.md)
+          echo "content<<EOF" >> $GITHUB_OUTPUT
+          echo "$PROMPT" >> $GITHUB_OUTPUT
+          echo "EOF" >> $GITHUB_OUTPUT
+
+      - name: ChatGPT Code Review
+        uses: anc95/ChatGPT-CodeReview@6fdbaeafc6f9e0eaebb844f8cfafff67cb2947f0
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          OPENAI_API_KEY: ${{ secrets.OPENAI_API_KEY }}
+          MODEL: gpt-4o
+          LANGUAGE: English
+          max_tokens: 4096
+          PROMPT: ${{ steps.prompt.outputs.content }}

.github/workflows/pr_review_claude.yaml

@@ -0,0 +1,49 @@
+name: PR Review - Claude
+
+on:
+  pull_request:
+    types: [opened, synchronize, reopened]
+  pull_request_review_comment:
+    types: [created]
+  issue_comment:
+    types: [created]
+
+permissions:
+  contents: read
+  pull-requests: write
+  issues: write
+  id-token: write
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.head_ref || github.run_id }}
+  cancel-in-progress: true
+
+jobs:
+  claude-review:
+    name: Claude Code Review
+    if: |
+      github.event_name == 'pull_request' ||
+      (github.event_name == 'issue_comment' && github.event.issue.pull_request && contains(github.event.comment.body, '@claude')) ||
+      (github.event_name == 'pull_request_review_comment' && contains(github.event.comment.body, '@claude'))
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v6
+
+      - name: Read review prompt
+        id: prompt
+        run: |
+          PROMPT=$(cat .github/prompts/pr_review.md)
+          echo "content<<EOF" >> $GITHUB_OUTPUT
+          echo "$PROMPT" >> $GITHUB_OUTPUT
+          echo "EOF" >> $GITHUB_OUTPUT
+
+      - name: Claude Code Review
+        uses: anthropics/claude-code-action@v1
+        with:
+          anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
+          claude_args: |
+            --max-turns 5
+            --model claude-sonnet-4-20250514
+          trigger_phrase: "@claude"
+          prompt: ${{ steps.prompt.outputs.content }}

.github/workflows/pr_review_kimi.yaml

@@ -0,0 +1,116 @@
+name: PR Review - Kimi
+
+on:
+  pull_request:
+    types: [opened, synchronize, reopened]
+  pull_request_review_comment:
+    types: [created]
+  issue_comment:
+    types: [created]
+
+permissions:
+  contents: read
+  pull-requests: write
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.head_ref || github.run_id }}
+  cancel-in-progress: true
+
+jobs:
+  kimi-review:
+    name: Kimi Code Review
+    if: |
+      github.event_name == 'pull_request' ||
+      (github.event_name == 'issue_comment' && github.event.issue.pull_request && contains(github.event.comment.body, '@kimi')) ||
+      (github.event_name == 'pull_request_review_comment' && contains(github.event.comment.body, '@kimi'))
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v6
+
+      - name: Read review prompt
+        id: prompt
+        run: |
+          PROMPT=$(cat .github/prompts/pr_review.md)
+          echo "content<<EOF" >> $GITHUB_OUTPUT
+          echo "$PROMPT" >> $GITHUB_OUTPUT
+          echo "EOF" >> $GITHUB_OUTPUT
+
+      - name: Get PR diff
+        id: diff
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          gh pr diff ${{ github.event.pull_request.number }} > pr_diff.txt
+          # Truncate if too large (Kimi has context limits)
+          head -c 100000 pr_diff.txt > pr_diff_truncated.txt
+
+      - name: Kimi Code Review
+        id: kimi_review
+        env:
+          KIMI_API_KEY: ${{ secrets.KIMI_API_KEY }}
+          PR_TITLE: ${{ github.event.pull_request.title }}
+          REVIEW_PROMPT: ${{ steps.prompt.outputs.content }}
+        run: |
+          if [ -z "$KIMI_API_KEY" ]; then
+            echo "Error: KIMI_API_KEY secret is not set" > kimi_review.txt
+            exit 0
+          fi
+
+          DIFF_CONTENT=$(cat pr_diff_truncated.txt)
+
+          # Build the request body
+          REQUEST_BODY=$(jq -n \
+            --arg diff "$DIFF_CONTENT" \
+            --arg title "$PR_TITLE" \
+            --arg prompt "$REVIEW_PROMPT" \
+            '{
+              "model": "moonshot-v1-128k",
+              "messages": [
+                {
+                  "role": "system",
+                  "content": $prompt
+                },
+                {
+                  "role": "user",
+                  "content": ("PR Title: " + $title + "\n\nDiff:\n" + $diff)
+                }
+              ],
+              "temperature": 0.3,
+              "max_tokens": 4096
+            }')
+
+          # Try the API call
+          HTTP_RESPONSE=$(curl -s -w "\n%{http_code}" https://api.moonshot.ai/v1/chat/completions \
+            -H "Content-Type: application/json" \
+            -H "Authorization: Bearer $KIMI_API_KEY" \
+            -d "$REQUEST_BODY")
+
+          HTTP_CODE=$(echo "$HTTP_RESPONSE" | tail -n1)
+          RESPONSE=$(echo "$HTTP_RESPONSE" | sed '$d')
+
+          if [ "$HTTP_CODE" != "200" ]; then
+            echo "API Error (HTTP $HTTP_CODE): $RESPONSE" > kimi_review.txt
+          else
+            # Check for API errors in response
+            ERROR=$(echo "$RESPONSE" | jq -r '.error.message // empty')
+            if [ -n "$ERROR" ]; then
+              echo "API Error: $ERROR" > kimi_review.txt
+            else
+              REVIEW=$(echo "$RESPONSE" | jq -r '.choices[0].message.content // "Error: Unexpected API response"')
+              echo "$REVIEW" > kimi_review.txt
+            fi
+          fi
+
+      - name: Post review comment
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          REVIEW_CONTENT=$(cat kimi_review.txt)
+
+          gh pr comment ${{ github.event.pull_request.number }} --body "## Kimi AI Code Review
+
+          $REVIEW_CONTENT
+
+          ---
+          *Automated review by Kimi (Moonshot AI)*"