Skip to content

feat: tiered auth login, configurable CI, updated docs - #172

Merged
ajianaz merged 1 commit into
developfrom
feat/ci-configurable-auth-upgrade
Jun 6, 2026
Merged

ajianaz merged 1 commit into
developfrom
feat/ci-configurable-auth-upgrade

Conversation

@ajianaz

@ajianaz ajianaz commented Jun 5, 2026

Copy link
Copy Markdown
Collaborator

Summary

Three improvements to cora-cli auth and CI experience:

1. Configurable CI Action

  • CI action now reads .cora.yaml from the repo when it exists
  • Falls back to 5MB limit when no .cora.yaml is present
  • Removes hardcoded max_diff_size: 200000 that was too small for large PRs

2. Tiered cora auth login

  • Interactive provider selection with numbered menu
  • Known providers (openai, anthropic, groq, ollama, zai): just API key needed — model and base URL pre-configured
  • Custom provider: collect base URL, model, and API key for any OpenAI-compatible endpoint
  • Provider info (name, model, base_url) stored alongside API key in ~/.cora/auth.toml

3. Updated cora auth status

  • Now displays stored provider name, model, and base URL
  • Clearer guidance when no auth is configured

4. Documentation Updates

  • README: Rewrote Quick Start and Authentication sections with full interactive login tutorial
  • Website docs: Updated getting-started page with auth flow examples, provider selection guide, and project config section

Files Changed

File Change
.github/actions/cora-review/action.yml Read .cora.yaml from repo, fallback to CI defaults
src/commands/auth.rs Tiered interactive login with provider menu
src/config/loader.rs save_provider_info(), load_provider_info(), remove_provider_info()
README.md Updated Quick Start, Authentication sections
website/src/routes/docs/getting-started/+page.svelte Full auth tutorial

Testing

  • 353 tests passing
  • Clippy clean
  • cargo check clean

- Upgrade cora auth login to interactive tiered provider selection
- Known providers: just API key needed
- Custom provider: collect base_url, model, and API key
- Store provider info alongside API key in auth.toml
- Update cora auth status to display stored provider details
- Fix CI action to read .cora.yaml from repo instead of hardcoded config
- Update README Quick Start and Authentication sections
- Update website getting-started docs with auth flow examples
Comment thread README.md
```bash
cora review --staged
```
> **No API key yet?** Set any provider env var instead: `export OPENAI_API_KEY="..."`
@github-actions

github-actions Bot commented Jun 5, 2026

Copy link
Copy Markdown

🔍 Cora AI Code Review

❌ Blocked — critical issues found.

🔴 Error (1)

  • README.md:104 — Possible hardcoded secret/credential detected. Use environment variables or a secrets manager.

Review powered by cora-cli · BYOK · MIT

@ajianaz
ajianaz merged commit 4cda025 into develop Jun 6, 2026
11 of 12 checks passed
@ajianaz
ajianaz deleted the feat/ci-configurable-auth-upgrade branch June 6, 2026 00:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants