Fix Claude Code Review workflow: use built-in review (#698)

* Remove broken Claude Code Review workflow

The plugin-based review setup is broken — the plugin tries to call
gh api via the Bash tool, which the action sandbox blocks by default.
Removing in favor of the working default claude.yml (@claude mentions).

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* Fix Claude Code Review workflow: use built-in review instead of broken plugin

Replace the plugin-based review (which fails because the sandbox blocks
Bash tool access) with the built-in review_triggered_on and
use_sticky_comment options.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* Fix: remove invalid review_triggered_on input

The action auto-detects review mode from the pull_request trigger.
Only use_sticky_comment and prompt are needed.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>

Author: justin808

.github/workflows/claude-code-review.yml

@@ -3,31 +3,19 @@ name: Claude Code Review
 on:
   pull_request:
     types: [opened, synchronize, ready_for_review, reopened]
-    # Optional: Only run on specific file changes
-    # paths:
-    #   - "src/**/*.ts"
-    #   - "src/**/*.tsx"
-    #   - "src/**/*.js"
-    #   - "src/**/*.jsx"
 
 jobs:
   claude-review:
-    # Optional: Filter by PR author
-    # if: |
-    #   github.event.pull_request.user.login == 'external-contributor' ||
-    #   github.event.pull_request.user.login == 'new-developer' ||
-    #   github.event.pull_request.author_association == 'FIRST_TIME_CONTRIBUTOR'
-
     runs-on: ubuntu-latest
     permissions:
       contents: read
-      pull-requests: read
-      issues: read
+      pull-requests: write
+      issues: write
       id-token: write
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           fetch-depth: 1
 
@@ -36,9 +24,6 @@ jobs:
         uses: anthropics/claude-code-action@v1
         with:
           claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
-          plugin_marketplaces: 'https://github.com/anthropics/claude-code.git'
-          plugins: 'code-review@claude-code-plugins'
-          prompt: '/code-review:code-review ${{ github.repository }}/pull/${{ github.event.pull_request.number }}'
-          # See https://github.com/anthropics/claude-code-action/blob/main/docs/usage.md
-          # or https://code.claude.com/docs/en/cli-reference for available options
-
+          use_sticky_comment: true
+          prompt: |
+            Review this PR for correctness, security issues, and potential improvements.