flowchart LR
    A[PR 推送] --> B[GitHub Actions 触发]
    B --> C{选路径}
    C -->|官方 action| D[claude-code-action@v1]
    C -->|原生 CLI| E[ci/review.sh]
    D --> F[-p 无头模式]
    E --> F
    F --> G[PreToolUse 钩子锁范围]
    G --> H[批量审查改动文件]
    H --> I[stream-json 输出]
    I --> J[解析 finding]
    J --> K[gh 回写行内评论]
    K --> L[Stop 钩子通知/计费]

# 代码审查准则
- 禁止在代码中硬编码密钥、token、密码
- 所有公开函数必须有类型注解
- SQL 查询必须使用参数化，禁止字符串拼接
- 错误必须被处理，禁止空 except / catch 后吞掉

# 收集改动文件清单
git fetch origin main
git diff --name-only origin/main...HEAD > /tmp/changed.txt

# 把 diff 喂给 Claude，要求 stream-json 输出
claude -p "$(cat <<'EOF'
你是资深代码审查员。请审查以下 Git diff，严格依据 REVIEW.md 准则。
只对违反准则的代码提 finding，不要泛泛而谈。
每条 finding 用如下 JSON 结构（无 finding 则输出空数组）：
{"findings":[{"file":"路径","line":12,"severity":"high|med|low","rule":"违反的准则","suggestion":"修复建议"}]}

改动文件：
$(cat /tmp/changed.txt)

完整 diff：
$(git diff origin/main...HEAD)
EOF
)" --model claude-sonnet-4-6 \
  --output-format stream-json \
  --max-turns 6 \
  --include-partial-messages

{
  "permissions": {
    "allow": ["Bash(git diff:*)", "Bash(git show:*)", "Read(*)"],
    "deny": ["Bash(git push:*)", "Bash(rm -rf:*)"]
  },
  "hooks": {
    "PreToolUse": [
      {
        "matcher": "Write|Edit|MultiEdit",
        "hooks": [{ "type": "command", "command": "node .ci/guard-no-write.mjs" }]
      },
      {
        "matcher": "Bash",
        "hooks": [{ "type": "command", "command": "node .ci/guard-bash.mjs" }]
      }
    ],
    "Stop": [
      { "hooks": [{ "type": "command", "command": "node .ci/on-stop.mjs" }] }
    ]
  }
}

// .ci/guard-no-write.mjs —— 审查机器人禁止任何写操作
import { readFileSync } from "node:fs";
const input = JSON.parse(readFileSync(0, "utf8"));
const file = input.tool_input?.file_path ?? "";

// 审查场景下，写任何文件都拒绝，并告诉模型原因（它会改为只读）
console.log(JSON.stringify({
  hookSpecificOutput: {
    hookEventName: "PreToolUse",
    permissionDecision: "deny",
    permissionDecisionReason:
      "审查机器人只读。请勿修改文件，把建议写进 finding 的 suggestion 字段。"
  }
}));
process.exit(0);

// .ci/guard-bash.mjs —— 只允许只读 git 命令，挡住 push/rm 等
import { readFileSync } from "node:fs";
const input = JSON.parse(readFileSync(0, "utf8"));
const cmd = input.tool_input?.command ?? "";
const blocked = /\b(git\s+push|rm\s+-rf|curl\s+.*\|\s*sh|sudo)\b/;
if (blocked.test(cmd)) {
  console.error(`CI 审查禁止执行: ${cmd.slice(0, 80)}`);
  process.exit(2); // 退出码 2 = 阻断并回喂 stderr
}
process.exit(0);

// .ci/on-stop.mjs —— 会话结束上报成本
import { readFileSync } from "node:fs";
const input = JSON.parse(readFileSync(0, "utf8"));
console.log(`::notice::审查完成 session=${input.session_id?.slice(0,8)}`);
process.exit(0);

# .github/workflows/claude-review.yml
name: Claude PR Review
on:
  pull_request:
    types: [opened, synchronize, reopened]
  # 节省成本：草稿 PR 不跑
jobs:
  review:
    if: github.event.pull_request.draft == false
    runs-on: ubuntu-latest
    permissions:
      contents: read
      pull-requests: write   # 回写评论需要
    steps:
      - uses: actions/checkout@v4
        with:
          fetch-depth: 0      # 拿全历史才能 diff
      - uses: actions/setup-node@v4
        with: { node-version: '20' }

      - name: 运行 Claude 审查
        env:
          ANTHROPIC_API_KEY: ${{ secrets.ANTHROPIC_API_KEY }}
          PR_NUMBER: ${{ github.event.pull_request.number }}
          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        run: bash ci/review.sh

#!/usr/bin/env bash
set -euo pipefail

BASE="origin/${GITHUB_BASE_REF:-main}"
HEAD="origin/${GITHUB_HEAD_REF:-HEAD}"
git fetch origin "$GITHUB_BASE_REF" 2>/dev/null || true

# 改动文件（只看代码，过滤 lock/distro）
FILES=$(git diff --name-only --diff-filter=AM "$BASE...$HEAD" \
        | grep -iE '\.(ts|tsx|js|jsx|py|go|java|rb)$' || true)
[ -z "$FILES" ] && { echo "无代码改动，跳过"; exit 0; }

DIFF=$(git diff "$BASE...$HEAD")

# stream-json 流式输出，取最后一条 result 事件里的文本
OUT=$(claude -p "依据 REVIEW.md 审查下列 diff，仅对违规项输出 JSON 数组：\
[{\"file\",\"line\",\"severity\",\"rule\",\"suggestion\"}]，无则输出 []。
改动文件：$FILES
完整 diff：$DIFF" \
  --model claude-sonnet-4-6 \
  --output-format stream-json \
  --max-turns 6)

# 取最后一条 result 事件的 result 字段
PAYLOAD=$(echo "$OUT" | jq -rc 'select(.type=="result") | .result' | tail -n1)
echo "$PAYLOAD" | jq '.findings // []' > /tmp/findings.json

# 回写评论
node ci/post-comments.mjs "$PR_NUMBER" /tmp/findings.json

// .ci/post-comments.mjs <pr_number> <findings.json>
import { readFileSync } from "node:fs";
const [,, prStr, findingsPath] = process.argv;
const pr = prStr;
const findings = JSON.parse(readFileSync(findingsPath, "utf8"));

if (!findings.length) {
  console.log("✅ 未发现违规项");
  process.exit(0);
}

// 汇总成一条 PR 评论（行内评论需要 commit_sha 较繁琐，这里用汇总评论稳妥落地）
const lines = findings.map((f, i) =>
  `| ${i+1} | \`${f.file}:${f.line}\` | **${f.severity}** | ${f.rule} | ${f.suggestion} |`);

const body = [
  "## 🤖 Claude 自动审查结果",
  "",
  "| # | 位置 | 级别 | 准则 | 建议 |",
  "|---|------|------|------|------|",
  ...lines,
  "",
  "_由 Claude Code CI 机器人生成，依据 `REVIEW.md`。_"
].join("\n");

const { execSync } = await import("node:child_process");
execSync(`gh pr comment ${pr} --body '${body.replace(/'/g, "'\\''")}'`,
  { stdio: "inherit", env: process.env });

cat /tmp/changed.txt | xargs -I{} -P 4 bash -c '
  claude -p "审查 {}，依据 REVIEW.md，输出 JSON findings" \
    --output-format json --max-turns 4 > "/tmp/rev_$(echo {} | tr / _).json"
'

- name: 运行 Claude 审查
  timeout-minutes: 10
  env:
    ANTHROPIC_API_KEY: ${{ secrets.ANTHROPIC_API_KEY }}
    CLAUDE_CODE_MAX_OUTPUT_TOKENS: "8000"
  run: bash ci/review.sh

my-repo/
├── .github/workflows/claude-review.yml   # 第四步
├── .claude/settings.json                  # 第三步
├── ci/
│   ├── guard-no-write.mjs                 # 第三步钩子
│   ├── guard-bash.mjs                     # 第三步钩子
│   ├── on-stop.mjs                        # 第三步钩子
│   ├── review.sh                          # 第四步主脚本
│   └── post-comments.mjs                  # 第五步
└── REVIEW.md                              # 第二步审查准则

- uses: anthropics/claude-code-action@v1
  with:
    anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
    claude_args: '--model claude-sonnet-4-6 --max-turns 20'
    prompt: |
      审查本 PR 改动文件，严格依据 REVIEW.md。
      对每个违规项在对应代码行留行内评论，标明级别与修复建议。
      无违规则留一条 ✅ 评论。