26w19a

CGate — AI-Powered GitHub Issue Automation Gateway

CGate (Claude Gate) is a self-hosted automation gateway that bridges GitHub Issues to Claude Code, enabling fully autonomous Issue → Code → PR workflows.

Just open a GitHub Issue — CGate handles the rest.

---

Core Features

• Issue-Driven Automation — Add [claude bot] to an issue title, and CGate spins up a Docker container, runs Claude Code to implement the feature, commits the changes, and opens a Pull Request
• PR Review Auto-Fix — Comment /claude fix-review on a PR to have Claude Code automatically address review feedback
• Docker-Isolated Execution — Each task runs in its own ephemeral Docker container, keeping the host clean and secure
• Concurrency Control — Configurable max parallel tasks (default: 3); excess tasks are automatically re-enqueued
• Auto Cleanup — Containers and workspace directories are removed after task completion
• SQLite Persistence — WAL-mode SQLite storage with automatic task recovery on restart
• Security Hardening — Input sanitization (control character removal, shell expansion stripping), constant-time webhook secret comparison, author allowlist
• Dual Permission Modes — strict (tool allowlist via settings.json) and permissive (skip permission checks)
• Configurable Parameters — Max conversation turns, Anthropic API base URL, model name override
• REST API — Full task management (list, get, cancel, logs)

API Endpoints

Method	Path	Description
POST	/webhook/github	Receive GitHub webhook
GET	/api/tasks	List tasks (supports ?status= filter)
GET	/api/tasks/{id}	Get task detail
POST	/api/tasks/{id}/cancel	Cancel a running task
GET	/api/tasks/{id}/logs	Get task container logs

Tech Stack

• Go 1.25 + stdlib net/http (routing) + log/slog (logging)
• SQLite (persistence) + Docker Engine API (container management)
• Docker Compose deployment
• Clean Architecture (domain → usecase → repository → controller → route)

Development Milestones

• Initial backend implementation (domain model, queue, repository, Docker runner, full test suite)
• Configurable permission mode and max conversation turns (#2)
• Auto cleanup of containers and workspace directories (#3)
• Security fixes: command injection prevention and authorization bypass fix (#11)
• PR review auto-fix workflow (#14)
• Webhook special character handling (#15)
• Modernized README documentation (#16)

See README for detailed deployment instructions.