Method GetExecutionSteps

pkg/workflow/claude_engine.go:156–516

GetExecutionSteps returns the GitHub Actions steps for executing Claude

(workflowData *WorkflowData, logFile string)

// GetExecutionSteps returns the GitHub Actions steps for executing Claude
func (e *ClaudeEngine) GetExecutionSteps(workflowData *WorkflowData, logFile string) []GitHubActionStep {
	claudeLog.Printf("Generating execution steps for Claude engine: workflow=%s, firewall=%v", workflowData.Name, isFirewallEnabled(workflowData))

	var steps []GitHubActionStep

	// Build claude CLI arguments based on configuration
	var claudeArgs []string
	toolsWithMountedCLIs := withMountedCLIShellCommandsInRestrictedBash(workflowData)

	// Add print flag for non-interactive mode
	claudeArgs = append(claudeArgs, "--print")

	// Disable Chrome integration for security and deterministic execution
	claudeArgs = append(claudeArgs, "--no-chrome")

	// Model is always passed via the native ANTHROPIC_MODEL environment variable when configured.
	// This avoids embedding the value directly in the shell command (which fails template injection
	// validation for GitHub Actions expressions like ${{ inputs.model }}).
	// Fallback for unconfigured model uses GH_AW_MODEL_AGENT_CLAUDE with shell expansion.
	modelConfigured := workflowData.EngineConfig != nil && workflowData.EngineConfig.Model != ""

	// Add max_turns if specified (in CLI it's max-turns)
	if workflowData.EngineConfig != nil && workflowData.EngineConfig.MaxTurns != "" {
		claudeLog.Printf("Setting max turns: %s", workflowData.EngineConfig.MaxTurns)
		claudeArgs = append(claudeArgs, "--max-turns", workflowData.EngineConfig.MaxTurns)
	}

	// Add MCP configuration only if there are MCP servers.
	// Keep this argument outside shellJoinArgs so ${RUNNER_TEMP} expands at runtime.
	mcpConfigArg := ""
	if HasMCPServers(workflowData) {
		claudeLog.Print("Adding MCP configuration")
		mcpConfigArg = ` --mcp-config "${RUNNER_TEMP}/gh-aw/mcp-config/mcp-servers.json"`
	}

	// Add allowed tools configuration
	// Note: Claude Code CLI v2.0.31 introduced a simpler --tools flag, but we continue to use
	// --allowed-tools because it provides fine-grained control needed by gh-aw:
	// - Specific bash commands: Bash(git:*), Bash(ls)
	// - MCP tool prefixes: mcp__github__issue_read
	// - Path-specific tools: Read(/tmp/gh-aw/cache-memory/*)
	// The --tools flag only supports basic tool names (e.g., "Bash,Edit,Read") without patterns.
	allowedTools := e.computeAllowedClaudeToolsString(toolsWithMountedCLIs, workflowData.SafeOutputs, workflowData.CacheMemoryConfig, workflowData.MCPScripts, workflowData.SandboxConfig)
	if allowedTools != "" {
		claudeArgs = append(claudeArgs, "--allowed-tools", allowedTools)
	}

	// Add debug-file flag to write debug logs directly to file
	// This implicitly enables debug mode and provides cleaner, more reliable log capture
	// than shell redirection with 2>&1 | tee
	claudeArgs = append(claudeArgs, "--debug-file", logFile)

	// Always add verbose flag for enhanced debugging output
	claudeArgs = append(claudeArgs, "--verbose")

	// Add permission mode for non-interactive execution.
	//
	// Default to "acceptEdits" so Claude Code honours --allowed-tools as the effective