Copier Template: Github Workflows: claude: Factor into project-specific portion and cross-repo workflow.

Closes #8.

(Coauthor: Anthropic Claude Sonnet 4.0.)

Author: emcd

.github/workflows/claude.yaml

@@ -69,5 +69,5 @@ jobs:
             Bash(hatch:*)
             Bash(pip:*)
             Bash(python:*)
-            Edit(**)
-            Write(**)
+            Edit
+            Write

.github/workflows/xrepo--claude.yaml

@@ -0,0 +1,58 @@
+name: Reusable Claude Agent
+
+on:
+  workflow_call:
+    inputs:
+      allowed-tools:
+        description: 'Space-separated list of allowed tools for Claude.'
+        required: true
+        type: string
+      python-version:
+        required: true
+        type: string
+      timeout-minutes:
+        description: 'Timeout for Claude execution.'
+        default: 20
+        required: false
+        type: number
+    secrets:
+      anthropic-api-key:
+        description: 'Anthropic API key for Claude access.'
+        required: true
+
+jobs:
+
+  claude:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      pull-requests: read
+      issues: read
+      id-token: write
+    steps:
+
+      - name: Prepare Python and Hatch
+        uses: emcd/python-project-common/.github/actions/python-hatch@master
+        with:
+          python-version: '${{ inputs.python-version }}'
+
+      - name: Create CLAUDE.md Symlink
+        run: |
+          set -eu
+          if [ -f ".auxiliary/configuration/conventions.md" ]; then
+            ln -sf .auxiliary/configuration/conventions.md CLAUDE.md
+            echo "::notice::Created symlink: CLAUDE.md -> .auxiliary/configuration/conventions.md"
+          else
+            echo "::error file=.auxiliary/configuration/conventions.md::Required conventions file not found"
+            exit 1
+          fi
+        shell: bash
+
+      - name: Execute Claude Code
+        id: claude
+        uses: anthropics/claude-code-action@beta
+        with:
+          allowed_tools: ${{ inputs.allowed-tools }}
+          anthropic_api_key: ${{ secrets.anthropic-api-key }}
+          timeout_minutes: ${{ inputs.timeout-minutes }}
+          trigger_phrase: "/claude"

template/.github/workflows/claude.yaml.jinja

@@ -12,57 +12,36 @@ on:
 
 jobs:
 
+  initialize:
+    uses: ./.github/workflows/core--initializer.yaml
+
   claude:
     if: |
-      {% raw %}(github.event_name == 'issue_comment' && contains(github.event.comment.body, '/claude')) ||
+      (github.event_name == 'issue_comment' && contains(github.event.comment.body, '/claude')) ||
       (github.event_name == 'pull_request_review_comment' && contains(github.event.comment.body, '/claude')) ||
       (github.event_name == 'pull_request_review' && contains(github.event.review.body, '/claude')) ||
-      (github.event_name == 'issues' && (contains(github.event.issue.body, '/claude') || contains(github.event.issue.title, '/claude'))){% endraw %}
-    runs-on: ubuntu-latest
-    permissions:
-      contents: read
-      pull-requests: read
-      issues: read
-      id-token: write
-    steps:
-
-      - name: Clone Repository
-        uses: actions/checkout@v4
-
-      - name: Prepare Python and Hatch
-        uses: ./.github/actions/python-hatch
-        with:
-          needs-clone: false
-          python-version: '3.10'
-
-      - name: Create CLAUDE.md symlink
-        run: |
-          if [ -f ".auxiliary/configuration/conventions.md" ]; then
-            ln -sf .auxiliary/configuration/conventions.md CLAUDE.md
-            echo "::notice::Created symlink: CLAUDE.md -> .auxiliary/configuration/conventions.md"
-          else
-            echo "::error file=.auxiliary/configuration/conventions.md::Required conventions file not found"
-            exit 1
-          fi
-        shell: bash
-
-      - name: Run Claude Code
-        id: claude
-        uses: anthropics/claude-code-action@beta
-        with:
-          anthropic_api_key: {% raw %}'${{ secrets.ANTHROPIC_API_KEY }}'{% endraw %}
-          trigger_phrase: "/claude"
-          timeout_minutes: 20
-          allowed_tools: |
-            Bash(hatch --env develop run linters)
-            Bash(hatch --env develop run testers)
-            Bash(hatch --env develop run docsgen)
-            Bash(hatch --env develop run packagers)
-            Bash(hatch run python:*)
-            Bash(git status)
-            Bash(git add:*)
-            Bash(git commit:*)
-            Bash(python:*)
-            Bash(pip:*)
-            Edit(**)
-            Write(**)
+      (github.event_name == 'issues' && (contains(github.event.issue.body, '/claude') || contains(github.event.issue.title, '/claude')))
+    needs: [initialize]
+    uses: emcd/python-project-common/.github/workflows/xrepo--claude.yaml@{{ _commit }}
+    with:
+      allowed-tools: >-
+        Bash(git add:*)
+        Bash(git branch:*)
+        Bash(git checkout:*)
+        Bash(git diff:*)
+        Bash(git log:*)
+        Bash(git ls-files:*)
+        Bash(git remote:*)
+        Bash(git reset:*)
+        Bash(git rev-parse:*)
+        Bash(git rm:*)
+        Bash(git status)
+        Bash(hatch:*)
+        Bash(pip:*)
+        Bash(python:*)
+        Edit
+        Write
+      python-version: {% raw %}'${{ fromJSON(needs.initialize.outputs.python-versions)[0] }}'{% endraw %}
+      timeout-minutes: 20
+    secrets:
+      anthropic-api-key: {% raw %}'${{ secrets.ANTHROPIC_API_KEY }}'{% endraw %}