Triage bot: pass review comment bodies as files, not inline arguments

[springfall2008]

Why

The bot's /code-review of #5229 found seven issues and posted none of them. From the session transcript, the refused call was:

gh api repos/springfall2008/batpred/pulls/5229/comments -f commit_id=… -f path=apps/predbat/plan.py -F line=349 -f side=RIGHT -f body="**Bug (high): … `car_charging_now` … `raw = self.get_arg(\"car_charging_now\", …)` …"

The endpoint comes first, so Bash(gh api repos/springfall2008/batpred/*) covers it; earlier gh api repos/…/pulls/5229/files reads in the same run went through. The problem is the body. It's inside double quotes and full of backticks, so the shell treats them as command substitution. The permission check then sees commands like car_charging_now that no rule allows, and dontAsk denies the whole call. Review comments almost always quote code, so this blocks nearly every review from posting. The run exits 0, and the daemon labels the PR BOT_FAILED because nothing was posted.

Change

GH_API_ENDPOINT_FIRST_PROMPT now tells the agent to write each comment body to a file in the scratch directory with the Write tool, then pass it as -F body=@<file>, never as an inline argument. The worked example in the prompt uses the same form.

The allowlist doesn't change. Both flows that append this prompt, review and cleanup, already have Write and the scratch Edit scope.

Testing

• New GhApiFormPromptTests.test_steers_comment_bodies_into_a_scratch_file: fails before the change, passes after.
• python3 -m unittest test_triage_daemon: 264 tests pass.
• pre-commit passes (ruff, black, cspell, triage daemon unit tests).
• Checked by hand: feat(dynamic-load): cancel a car's slots and IOG cheap rate while it is not charging, with an option to distrust Intelligent slots until seen charging #5229's seven findings posted cleanly with -F body=@file from a scratch directory.

🤖 Generated with Claude Code