arcana/examples/code-review-agent.yaml at main · NP-compete/arcana · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
apiVersion: arcana.io/v1alpha1
kind: ArcanaAgent
metadata:
  name: code-reviewer
  namespace: engineering
spec:
  model: claude-sonnet-4-20250514
  skills:
    - github-pr-review
    - static-analysis
    - security-scan
  memory:
    backend: pgvector
    ttl: 24h
  budget:
    maxTokensPerTurn: 8000
    routingStrategy: baar
  sandbox:
    runtime: gvisor
---
apiVersion: arcana.io/v1alpha1
kind: ArcanaSkillRegistry
metadata:
  name: github-pr-review
  namespace: engineering
spec:
  version: "1.2.0"
  runtime: python
  entrypoint: skills/github_pr_review.py
  mcp:
    server: github-mcp
    tools:
      - get_pull_request
      - list_pull_request_files
      - create_review_comment
  inputs:
    - name: repo
      type: string
      required: true
    - name: pr_number
      type: integer
      required: true
---
apiVersion: arcana.io/v1alpha1
kind: ArcanaGuardrail
metadata:
  name: code-review-guardrails
  namespace: engineering
spec:
  agent: code-reviewer
  rules:
    input:
      - type: content-filter
        action: block
        description: Block requests containing secrets or credentials
        pattern: "(?i)(api[_-]?key|password|secret|token)\\s*[:=]\\s*['\"][^'\"]{8,}"
    output:
      - type: content-filter
        action: warn
        description: Flag reviews that approve without substantive feedback
        pattern: "(?i)^(lgtm|looks good|approved)$"
---
apiVersion: arcana.io/v1alpha1
kind: ArcanaBudget
metadata:
  name: code-review-budget
  namespace: engineering
spec:
  agent: code-reviewer
  limits:
    maxTokensPerDay: 500000
    maxTokensPerTurn: 8000
    maxCostPerMonth: 50.00
  alerts:
    - threshold: 80
      channel: slack
      webhook: "${SLACK_ENGINEERING_WEBHOOK}"