[netanelgilad]

What

• Adds base44-builder-dev[bot] to allowed_bots in claude-code-review.yml and pr-description.yml. The existing entries stay.
• Adds timeout-minutes: 20 to generate-description.

claude.yml is left out on purpose. Allowing the bot there would let its own @claude comments drive Claude with git/gh pr/gh issue, which risks bot-to-Claude loops. #685 doesn't need it.

Why

PRs pushed by the base44-builder-dev GitHub App, such as #685, fail claude-review with Workflow initiated by non-human actor: base44-builder-dev (type: Bot).

At the pinned claude-code-action SHA, allowed_bots is the only check that rejects an app actor. The write-permission check passes automatically for any actor whose name ends in [bot], and neither job has an if: condition on the actor.

On #685, generate-description (run 40902533676) was not refused by this check. The action's own bun install hung, and the job ran for the default 6 hours before GitHub cancelled it. The 20-minute timeout stops a hung install from holding a runner that long. Other PRs' runs of this workflow finish in about 2 minutes.

Security note

Allowing this bot does not give it access to any new secrets. These workflows run on same-repo pull_request events, so ANTHROPIC_API_KEY is already in the job. The job also runs the local ./.github/actions/wix-gateway-proxy from the PR's checkout before the allowed_bots gate. The app can edit .github/actions/ without the workflows permission.

What does change: Claude now reviews and describes content written by the bot. Both jobs are limited to reading the PR and, for the description job, editing the PR body.

🤖 Generated with Claude Code

https://claude.ai/code/session_01DxaWH3duWNaaUvjpNQGP34

[github-actions]

🚀 Package Preview Available!

---

Install this PR's preview build with npm:

npm i @base44-preview/cli@0.3.1-pr.692.21a6ac0

Prefer not to change any import paths? Install using npm alias so your code still imports base44:

npm i "base44@npm:@base44-preview/cli@0.3.1-pr.692.21a6ac0"

Or add it to your package.json dependencies:

{
  "dependencies": {
    "base44": "npm:@base44-preview/cli@0.3.1-pr.692.21a6ac0"
  }
}

• 📦 Preview Package: @base44-preview/cli@0.3.1-pr.692.21a6ac0
• 🔗 View this commit on GitHub

---

_{Preview published to npm registry — try new features instantly!}