peptiderepo
49138541d0
ci: switch CTO reviewer from Anthropic direct to OpenRouter
...
Reuses the OPENROUTER_API_KEY secret that already backs the other AI
plugins. Consolidates AI spend on one bill. Model: anthropic/claude-haiku-4.5.
2026-04-14 16:45:05 +07:00
peptiderepo
7b9d8b3676
ci: add Claude-powered CTO PR review workflow
...
Auto-reviews every PR with Claude Haiku 4.5 and posts a structured
review (APPROVE / REQUEST_CHANGES / COMMENT). Does NOT auto-merge — a
human still clicks Merge. Requires ANTHROPIC_API_KEY secret on the repo.
2026-04-14 15:57:20 +07:00
peptiderepo
2d7ece8a0e
ci: add main-push audit tripwire
...
Flags direct pushes to main that did not come from a merged PR.
Free-plan workaround since branch protection requires GitHub Pro.
2026-04-14 15:45:07 +07:00
peptiderepo
997f50b890
fix: use .phpcs.xml.dist config in CI instead of inline flags
...
The CI was overriding the project PHPCS config by passing
--standard=WordPress-Core directly. Now uses the project
.phpcs.xml.dist which includes exclusions for standard WP
patterns (class in functions.php).
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com >
2026-04-12 22:56:19 +07:00
peptiderepo
7226a08719
v1.3.2: security hardening, CI linting, test scaffold
...
- Add nonce + CSRF verification to newsletter form (footer.php)
- Add sanitize_callback to all 5 Customizer settings
- Add PHPCS (WordPress-Core) and JS syntax checks to CI pipeline
- Safeguard rsync --delete with dev-file excludes
- Scaffold PHPUnit tests (bootstrap, helpers, theme setup)
- Add composer.json, .phpcs.xml.dist, phpunit.xml
- Bump version to 1.3.2
- Update ARCHITECTURE.md and CHANGELOG.md
Addresses CTO audit findings: security (A- → A), testing (F → D+), CI/CD (C → B).
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com >
2026-04-12 22:49:06 +07:00
peptiderepo
878e360c96
fix: switch to rsync deploy for private repo
2026-04-08 09:35:44 +07:00
peptiderepo
9642066846
Initial commit: peptide-starter theme v1.3.1
2026-04-08 01:30:16 +07:00
