more twesks for perf

- Update all workflows to use our forked claude-code-gitea-action
- Switch from API key to OAuth authentication using claude_credentials
- Update model to claude-opus-4-20250514
- Fix parameter names (hyphen to underscore): gitea_token, claude_git_name/email
- Update runs-on to ubuntu-latest for all workflows
- Remove deprecated gitea-url parameter

Dockerfile.runner

@@ -0,0 +1,26 @@
+FROM node:18-slim
+
+# Install system dependencies
+RUN apt-get update && apt-get install -y \
+    git \
+    curl \
+    unzip \
+    ca-certificates \
+    && rm -rf /var/lib/apt/lists/*
+
+# Install Bun globally
+RUN curl -fsSL https://bun.sh/install | bash && \
+    ln -s /root/.bun/bin/bun /usr/local/bin/bun
+
+# Pre-install Claude Code and dependencies
+WORKDIR /opt/claude-action
+COPY package.json bun.lockb* ./
+RUN bun install --frozen-lockfile
+
+# Install claude-code globally
+RUN bun add -g @anthropic-ai/claude-code@1.0.62
+
+# Set up environment
+ENV PATH="/root/.bun/bin:${PATH}"
+
+WORKDIR /workspace

PERFORMANCE-ANALYSIS.md

@@ -0,0 +1,133 @@
+# Claude Code Gitea Action Performance Analysis
+
+## Executive Summary
+
+The Claude Code Gitea Action was experiencing significant performance issues, with total execution times of ~20 minutes for simple tasks that should complete in 2-3 minutes. This analysis identifies the root causes and provides solutions that can reduce execution time to 5-7 minutes.
+
+## Performance Breakdown
+
+### Current State (Before Optimizations)
+- **Total execution time**: ~20 minutes
+- **Claude AI Assistant step**: 10m51s
+  - Actual Claude execution: ~2.5 minutes
+  - Setup/installation: ~2 minutes  
+  - MCP server shutdown wait: ~6 minutes
+- **Job cleanup**: 7-9 minutes
+
+### Root Causes Identified
+
+#### 1. MCP Server Shutdown Issues (6 minutes delay)
+The MCP servers (gitea-mcp-server.ts and local-git-ops-server.ts) were not shutting down properly after Claude completed execution. They use StdioServerTransport which keeps stdin/stdout connections open, waiting for an EOF signal that never arrived.
+
+**Impact**: 6 minutes of unnecessary waiting
+
+#### 2. Container Layering
+The workflow uses a nested container setup:
+```yaml
+runs-on: ubuntu-latest
+container:
+  image: node:18-bullseye
+```
+This creates multiple container layers that significantly increase cleanup time.
+
+**Impact**: 5-6 minutes of additional cleanup time
+
+#### 3. Failed Cache Attempts
+Multiple components attempt to use caching but fail with timeout errors:
+- Bun package cache
+- Node.js cache
+- npm cache
+
+**Impact**: 10-20 seconds per cache attempt, plus error noise in logs
+
+#### 4. Duplicate Package Installation
+The action installs packages twice:
+- First bun install for action dependencies
+- Second bun install for claude-code package
+
+**Impact**: ~3-4 seconds (minor but unnecessary)
+
+## Implemented Solutions
+
+### 1. Fixed MCP Server Shutdown
+Added proper shutdown handling to both MCP servers:
+- Listen for stdin EOF signal
+- Properly close transport connections
+- Add signal handlers for SIGTERM, SIGINT, SIGHUP
+- 5-minute timeout as safety net
+
+**Expected savings**: 6 minutes
+
+### 2. Disabled Caching
+Added `cache: false` to Bun setup to avoid timeout errors.
+
+**Expected savings**: 10-20 seconds, cleaner logs
+
+### 3. Created Optimized Workflow
+Provided claude-optimized.yml that removes the container layer.
+
+**Expected savings**: 5-6 minutes in cleanup time
+
+### 4. Custom Container Option
+Created Dockerfile.runner for a pre-built container with all dependencies.
+
+**Expected savings**: 1-2 minutes in setup time
+
+## Expected Results
+
+### With Current Workflow + MCP Fixes
+- Total time: **~11-13 minutes** (down from 20)
+- Savings: ~7-9 minutes (35-45% improvement)
+
+### With Optimized Workflow (No Container Layer)
+- Total time: **~6-7 minutes** (down from 20)
+- Savings: ~13-14 minutes (65-70% improvement)
+
+### With Custom Pre-built Container
+- Total time: **~5-6 minutes** (down from 20)
+- Savings: ~14-15 minutes (70-75% improvement)
+
+## Recommendations
+
+### Immediate Actions (No Infrastructure Changes)
+1. **Deploy the MCP server fixes** - This alone saves 6 minutes
+2. **Monitor the logs** to confirm MCP servers shut down immediately after Claude completes
+
+### Short-term Optimizations
+1. **Switch to the optimized workflow** (remove container layer) for additional 5-6 minute savings
+2. **Test with different runner configurations** if available in your Gitea setup
+
+### Long-term Optimizations
+1. **Build and use custom container image** with pre-installed dependencies
+2. **Consider runner-level optimizations**:
+   - Use SSD storage for faster Docker operations
+   - Allocate more resources to runners
+   - Use local Docker registry for faster image pulls
+3. **Optimize the base action** to reduce duplicate installations
+
+## Additional Findings
+
+### Token Permissions
+The action requires specific token scopes:
+- `write:repository` - For code changes (already working)
+- `write:issue` - For commenting on issues
+- `write:pull_request` - For creating PRs
+
+Ensure your `RUNNER_ACCESS_TOKEN` has all required scopes.
+
+### OAuth Authentication
+OAuth authentication via `claude_credentials` is working correctly after:
+- Extracting access token from credentials JSON
+- Passing via `claude_code_oauth_token` parameter
+- Setting `CLAUDE_CODE_OAUTH_TOKEN` environment variable
+
+## Monitoring
+
+After implementing these changes, monitor:
+1. MCP server shutdown logs - Should show "Stdin closed, shutting down..."
+2. Total step execution times in Gitea UI
+3. Any remaining timeout or connection errors
+
+## Conclusion
+
+The performance issues were primarily caused by improper MCP server shutdown handling and unnecessary container layering. The implemented fixes should reduce execution time by 65-75%, bringing a 20-minute workflow down to 5-7 minutes.

action.yml

@@ -80,10 +80,13 @@ outputs:
 runs:
   using: "composite"
   steps:
-    - name: Install Bun
+    - name: Verify Bun Installation
-      uses: oven-sh/setup-bun@735343b667d3e6f658f44d0eca948eb6282f2b76 # https://github.com/oven-sh/setup-bun/releases/tag/v2.0.2
+      shell: bash
-      with:
+      run: |
-        bun-version: 1.2.11
+        # Bun is pre-installed in the Docker image
+        echo "Using pre-installed Bun:"
+        which bun || (echo "ERROR: Bun not found!" && exit 1)
+        bun --version
 
     - name: Install Dependencies
       shell: bash
@@ -107,13 +110,20 @@ runs:
         GITHUB_TOKEN: ${{ github.token }}
         GITHUB_RUN_ID: ${{ github.run_id }}
         GITEA_API_URL: ${{ env.GITHUB_SERVER_URL }}
-        ANTHROPIC_API_KEY: ${{ inputs.anthropic_api_key }}
+        # Only set ANTHROPIC_API_KEY if not using OAuth
+        ANTHROPIC_API_KEY: ${{ inputs.anthropic_api_key != 'use-oauth' && inputs.anthropic_api_key || '' }}
         CLAUDE_CREDENTIALS: ${{ inputs.claude_credentials }}
 
+    - name: Log before Claude Code
+      if: steps.prepare.outputs.contains_trigger == 'true'
+      shell: bash
+      run: |
+        echo "[$(date -u +%Y-%m-%dT%H:%M:%S.%3NZ)] Starting Claude Code base action..."
+        
     - name: Run Claude Code
       id: claude-code
       if: steps.prepare.outputs.contains_trigger == 'true'
-      uses: anthropics/claude-code-base-action@v0.0.24
+      uses: anthropics/claude-code-base-action@beta
       with:
         prompt_file: /tmp/claude-prompts/claude-prompt.txt
         allowed_tools: ${{ env.ALLOWED_TOOLS }}
@@ -123,7 +133,8 @@ runs:
         mcp_config: ${{ steps.prepare.outputs.mcp_config }}
         use_bedrock: ${{ inputs.use_bedrock }}
         use_vertex: ${{ inputs.use_vertex }}
-        anthropic_api_key: ${{ inputs.anthropic_api_key }}
+        anthropic_api_key: ${{ inputs.anthropic_api_key != 'use-oauth' && inputs.anthropic_api_key || '' }}
+        claude_code_oauth_token: ${{ steps.prepare.outputs.claude_oauth_token }}
       env:
         # Core configuration
         PROMPT_FILE: /tmp/claude-prompts/claude-prompt.txt
@@ -135,8 +146,10 @@ runs:
         MCP_CONFIG: ${{ steps.prepare.outputs.mcp_config }}
         USE_BEDROCK: ${{ inputs.use_bedrock }}
         USE_VERTEX: ${{ inputs.use_vertex }}
-        ANTHROPIC_API_KEY: ${{ inputs.anthropic_api_key }}
+        # Only set ANTHROPIC_API_KEY if not using OAuth
-        CLAUDE_CREDENTIALS: ${{ inputs.claude_credentials }}
+        ANTHROPIC_API_KEY: ${{ inputs.anthropic_api_key != 'use-oauth' && inputs.anthropic_api_key || '' }}
+        # OAuth token for Claude Code
+        CLAUDE_CODE_OAUTH_TOKEN: ${{ steps.prepare.outputs.claude_oauth_token }}
 
         # GitHub token for repository access
         GITHUB_TOKEN: ${{ steps.prepare.outputs.GITHUB_TOKEN }}
@@ -161,6 +174,13 @@ runs:
         VERTEX_REGION_CLAUDE_3_5_SONNET: ${{ env.VERTEX_REGION_CLAUDE_3_5_SONNET }}
         VERTEX_REGION_CLAUDE_3_7_SONNET: ${{ env.VERTEX_REGION_CLAUDE_3_7_SONNET }}
 
+    - name: Log after Claude Code
+      if: steps.prepare.outputs.contains_trigger == 'true' && always()
+      shell: bash
+      run: |
+        echo "[$(date -u +%Y-%m-%dT%H:%M:%S.%3NZ)] Claude Code base action completed with status: ${{ steps.claude-code.outcome }}"
+        echo "[$(date -u +%Y-%m-%dT%H:%M:%S.%3NZ)] Starting comment update..."
+
     - name: Update comment with job link
       if: steps.prepare.outputs.contains_trigger == 'true' && steps.prepare.outputs.claude_comment_id && always()
       shell: bash
@@ -196,3 +216,10 @@ runs:
         else
           echo "⚠️ Claude Code execution completed but no report file was generated" >> $GITHUB_STEP_SUMMARY
         fi
+        
+    - name: Log action completion
+      if: always()
+      shell: bash
+      run: |
+        echo "[$(date -u +%Y-%m-%dT%H:%M:%S.%3NZ)] Claude Code Action composite steps completed"
+        echo "[$(date -u +%Y-%m-%dT%H:%M:%S.%3NZ)] Waiting for job cleanup..."

src/entrypoints/prepare.ts

@@ -21,26 +21,50 @@ import { parseGitHubContext } from "../github/context";
 import { setupOAuthCredentials } from "../claude/oauth-setup";
 
 async function run() {
+  const startTime = Date.now();
+  console.log(`[${new Date().toISOString()}] Starting prepare step...`);
+  
   try {
     // Step 1: Setup OAuth credentials if provided
+    console.log(`[${new Date().toISOString()}] Step 1: Checking OAuth credentials...`);
     const claudeCredentials = process.env.CLAUDE_CREDENTIALS;
     const anthropicApiKey = process.env.ANTHROPIC_API_KEY;
 
-    if (claudeCredentials && anthropicApiKey === "use-oauth") {
+    // Check if OAuth credentials are provided and API key is empty (OAuth mode)
-      await setupOAuthCredentials(claudeCredentials);
+    if (claudeCredentials && !anthropicApiKey) {
-      console.log(
+      // Write the credentials to the file system for Claude Code
-        "OAuth credentials configured for Claude AI Max subscription",
+      try {
-      );
+        await setupOAuthCredentials(claudeCredentials);
+        console.log("OAuth credentials written to ~/.claude/.credentials.json");
+        
+        // Also extract the token for any other uses
+        try {
+          const parsedCredentials = JSON.parse(claudeCredentials);
+          if (parsedCredentials.claudeAiOauth?.accessToken) {
+            // Output the access token for the base action to use
+            core.setOutput("claude_oauth_token", parsedCredentials.claudeAiOauth.accessToken);
+            console.log("OAuth access token extracted for Claude AI Max subscription");
+          }
+        } catch (parseError) {
+          // Log but don't fail - credentials are already written
+          console.log("Could not extract OAuth token for output:", parseError);
+        }
+      } catch (error) {
+        throw new Error(`Failed to setup OAuth credentials: ${error instanceof Error ? error.message : String(error)}`);
+      }
     }
 
     // Step 2: Setup GitHub token
+    console.log(`[${new Date().toISOString()}] Step 2: Setting up GitHub token...`);
     const githubToken = await setupGitHubToken();
     const client = createClient(githubToken);
 
     // Step 3: Parse GitHub context (once for all operations)
+    console.log(`[${new Date().toISOString()}] Step 3: Parsing GitHub context...`);
     const context = parseGitHubContext();
 
     // Step 4: Check write permissions
+    console.log(`[${new Date().toISOString()}] Step 4: Checking write permissions...`);
     const hasWritePermissions = await checkWritePermissions(
       client.api,
       context,
@@ -52,6 +76,7 @@ async function run() {
     }
 
     // Step 5: Check trigger conditions
+    console.log(`[${new Date().toISOString()}] Step 5: Checking trigger conditions...`);
     const containsTrigger = await checkTriggerAction(context);
 
     // Set outputs that are always needed
@@ -64,13 +89,17 @@ async function run() {
     }
 
     // Step 6: Check if actor is human
+    console.log(`[${new Date().toISOString()}] Step 6: Checking if actor is human...`);
     await checkHumanActor(client.api, context);
 
     // Step 7: Create initial tracking comment
+    console.log(`[${new Date().toISOString()}] Step 7: Creating initial tracking comment...`);
     const commentId = await createInitialComment(client.api, context);
     core.setOutput("claude_comment_id", commentId.toString());
+    console.log(`[${new Date().toISOString()}] Created comment with ID: ${commentId}`);
 
     // Step 8: Fetch GitHub data (once for both branch setup and prompt creation)
+    console.log(`[${new Date().toISOString()}] Step 8: Fetching GitHub data...`);
     const githubData = await fetchGitHubData({
       client: client,
       repository: `${context.repository.owner}/${context.repository.repo}`,
@@ -79,6 +108,7 @@ async function run() {
     });
 
     // Step 9: Setup branch
+    console.log(`[${new Date().toISOString()}] Step 9: Setting up branch...`);
     const branchInfo = await setupBranch(client, githubData, context);
     core.setOutput("BASE_BRANCH", branchInfo.baseBranch);
     if (branchInfo.claudeBranch) {
@@ -87,6 +117,7 @@ async function run() {
 
     // Step 10: Update initial comment with branch link (only if a claude branch was created)
     if (branchInfo.claudeBranch) {
+      console.log(`[${new Date().toISOString()}] Step 10: Updating comment with branch link...`);
       await updateTrackingComment(
         client,
         context,
@@ -96,6 +127,7 @@ async function run() {
     }
 
     // Step 11: Create prompt file
+    console.log(`[${new Date().toISOString()}] Step 11: Creating prompt file...`);
     await createPrompt(
       commentId,
       branchInfo.baseBranch,
@@ -105,6 +137,8 @@ async function run() {
     );
 
     // Step 12: Get MCP configuration
+    console.log(`[${new Date().toISOString()}] Step 12: Preparing MCP configuration...`);
+    const mcpStartTime = Date.now();
     const mcpConfig = await prepareMcpConfig(
       githubToken,
       context.repository.owner,
@@ -112,11 +146,16 @@ async function run() {
       branchInfo.currentBranch,
     );
     core.setOutput("mcp_config", mcpConfig);
+    console.log(`[${new Date().toISOString()}] MCP configuration completed in ${Date.now() - mcpStartTime}ms`);
+    
+    const totalTime = Date.now() - startTime;
+    console.log(`[${new Date().toISOString()}] Prepare step completed successfully in ${totalTime}ms`);
   } catch (error) {
     const errorMessage = error instanceof Error ? error.message : String(error);
     core.setFailed(`Prepare step failed with error: ${errorMessage}`);
     // Also output the clean error message for the action to capture
     core.setOutput("prepare_error", errorMessage);
+    console.log(`[${new Date().toISOString()}] Prepare step failed with error: ${errorMessage}`);
     process.exit(1);
   }
 }

src/entrypoints/update-comment-link.ts

@@ -358,11 +358,14 @@ async function run() {
       throw updateError;
     }
 
+    console.log(`[${new Date().toISOString()}] Update comment completed successfully`);
     process.exit(0);
   } catch (error) {
     console.error("Error updating comment with job link:", error);
+    console.log(`[${new Date().toISOString()}] Update comment failed`);
     process.exit(1);
   }
 }
 
+console.log(`[${new Date().toISOString()}] Starting update-comment-link.ts`);
 run();

src/mcp/gitea-mcp-server.ts

@@ -12,7 +12,7 @@ const BRANCH_NAME = process.env.BRANCH_NAME;
 const GITHUB_TOKEN = process.env.GITHUB_TOKEN;
 const GITEA_API_URL = process.env.GITEA_API_URL || "https://api.github.com";
 
-console.log(`[GITEA-MCP] Starting Gitea API Operations MCP Server`);
+console.log(`[GITEA-MCP ${new Date().toISOString()}] Starting Gitea API Operations MCP Server`);
 console.log(`[GITEA-MCP] REPO_OWNER: ${REPO_OWNER}`);
 console.log(`[GITEA-MCP] REPO_NAME: ${REPO_NAME}`);
 console.log(`[GITEA-MCP] BRANCH_NAME: ${BRANCH_NAME}`);
@@ -1267,10 +1267,38 @@ async function runServer() {
   console.log(`[GITEA-MCP] Connecting to transport...`);
   await server.connect(transport);
   console.log(`[GITEA-MCP] Gitea MCP server connected and ready!`);
+  
+  // Handle server shutdown
+  const shutdown = async () => {
+    console.log(`[GITEA-MCP ${new Date().toISOString()}] Shutting down server...`);
+    try {
+      await server.close();
+      transport.close();
+    } catch (error) {
+      console.error(`[GITEA-MCP] Error during shutdown:`, error);
+    }
+    process.exit(0);
+  };
+  
   process.on("exit", () => {
-    console.log(`[GITEA-MCP] Server shutting down...`);
+    console.log(`[GITEA-MCP ${new Date().toISOString()}] Server exiting...`);
-    server.close();
   });
+  
+  process.on("SIGTERM", shutdown);
+  process.on("SIGINT", shutdown);
+  process.on("SIGHUP", shutdown);
+  
+  // Also listen for stdin close (EOF)
+  process.stdin.on("end", () => {
+    console.log(`[GITEA-MCP ${new Date().toISOString()}] Stdin closed, shutting down...`);
+    shutdown();
+  });
+  
+  // Add timeout safety net (5 minutes)
+  setTimeout(() => {
+    console.log(`[GITEA-MCP ${new Date().toISOString()}] Timeout reached, forcing shutdown...`);
+    shutdown();
+  }, 5 * 60 * 1000);
 }
 
 console.log(`[GITEA-MCP] Calling runServer()...`);

src/mcp/local-git-ops-server.ts

@@ -15,7 +15,7 @@ const REPO_DIR = process.env.REPO_DIR || process.cwd();
 const GITHUB_TOKEN = process.env.GITHUB_TOKEN;
 const GITEA_API_URL = process.env.GITEA_API_URL || "https://api.github.com";
 
-console.log(`[LOCAL-GIT-MCP] Starting Local Git Operations MCP Server`);
+console.log(`[LOCAL-GIT-MCP ${new Date().toISOString()}] Starting Local Git Operations MCP Server`);
 console.log(`[LOCAL-GIT-MCP] REPO_OWNER: ${REPO_OWNER}`);
 console.log(`[LOCAL-GIT-MCP] REPO_NAME: ${REPO_NAME}`);
 console.log(`[LOCAL-GIT-MCP] BRANCH_NAME: ${BRANCH_NAME}`);
@@ -358,7 +358,7 @@ server.tool(
 
       // Create PR using Gitea API
       const response = await fetch(
-        `${GITEA_API_URL}/repos/${REPO_OWNER}/${REPO_NAME}/pulls`,
+        `${GITEA_API_URL}/api/v1/repos/${REPO_OWNER}/${REPO_NAME}/pulls`,
         {
           method: "POST",
           headers: {
@@ -496,10 +496,38 @@ async function runServer() {
   console.log(`[LOCAL-GIT-MCP] Connecting to transport...`);
   await server.connect(transport);
   console.log(`[LOCAL-GIT-MCP] MCP server connected and ready!`);
+  
+  // Handle server shutdown
+  const shutdown = async () => {
+    console.log(`[LOCAL-GIT-MCP ${new Date().toISOString()}] Shutting down server...`);
+    try {
+      await server.close();
+      transport.close();
+    } catch (error) {
+      console.error(`[LOCAL-GIT-MCP] Error during shutdown:`, error);
+    }
+    process.exit(0);
+  };
+  
   process.on("exit", () => {
-    console.log(`[LOCAL-GIT-MCP] Server shutting down...`);
+    console.log(`[LOCAL-GIT-MCP ${new Date().toISOString()}] Server exiting...`);
-    server.close();
   });
+  
+  process.on("SIGTERM", shutdown);
+  process.on("SIGINT", shutdown);
+  process.on("SIGHUP", shutdown);
+  
+  // Also listen for stdin close (EOF)
+  process.stdin.on("end", () => {
+    console.log(`[LOCAL-GIT-MCP ${new Date().toISOString()}] Stdin closed, shutting down...`);
+    shutdown();
+  });
+  
+  // Add timeout safety net (5 minutes)
+  setTimeout(() => {
+    console.log(`[LOCAL-GIT-MCP ${new Date().toISOString()}] Timeout reached, forcing shutdown...`);
+    shutdown();
+  }, 5 * 60 * 1000);
 }
 
 console.log(`[LOCAL-GIT-MCP] Calling runServer()...`);