flowchart TD
    A[PR opened/synchronize] --> B[Actions: checkout + 全量 diff]
    B --> C[拼接审查 prompt]
    C --> D["claude -p<br/>--output-format stream-json<br/>--permission-mode plan<br/>--max-turns 8"]
    D -. hooks 围栏 .-> G{PreToolUse 拦截?}
    G -- 危险命令 --> X[阻断 + 报警]
    G -- 安全 --> E[stream-json 流]
    E --> F[jq 提取 result + cost]
    F --> H{高危问题?}
    H -- 是 --> I[gh 评论 + 关评论 + job 失败]
    H -- 否 --> J[gh 评论 + 通过]

# 把改动 diff 喂给 Claude，让它只读审查、不给建议改代码
git diff origin/main...HEAD | claude -p \
  "你是资深 reviewer。审这段 diff，只报告：1)逻辑 bug 2)安全隐患 3)明显坏味道。
   每条用 'SEVERITY: 高/中/低 | 文件:行 | 问题 | 建议' 格式。没问题就回 'LGTM'。" \
  --output-format text \
  --permission-mode plan

git diff origin/main...HEAD | claude -p "同上 prompt" \
  --output-format stream-json \
  --input-format text \
  --verbose > review.jsonl

{"type":"system","subtype":"init",...}
{"type":"assistant","message":{"content":[{"type":"text","text":"SEVERITY: 高 | ..."}]}}
{"type":"result","result":"<最终汇总文本>","cost_usd":0.0123,"duration_ms":8421,"num_turns":2,"is_error":false}

# 只取最终结论文本
jq -r 'select(.type=="result") | .result' review.jsonl

# 顺便打个成本小票
jq -r 'select(.type=="result") | "花费 $\(.cost_usd) / \(.num_turns) 轮 / \(.duration_ms)ms"' review.jsonl

{
  "permissions": {
    "defaultMode": "plan",
    "deny": ["Bash(rm -rf *)", "Bash(git push *)", "Bash(curl * | sh)"]
  },
  "hooks": {
    "PreToolUse": [
      {
        "matcher": "Bash",
        "hooks": [
          {
            "type": "command",
            "command": "jq -r '.tool_input.command' | grep -qiE 'rm -rf|sudo|git push|:(){:|:&};:' && { echo 'BLOCKED by CI hook'; exit 2; } || exit 0"
          }
        ]
      }
    ],
    "Stop": [
      {
        "hooks": [
          { "type": "command", "command": "echo \"[audit] $(date -u +%FT%TZ) review done\" >> /tmp/cc-audit.log" }
        ]
      }
    ]
  }
}

name: Claude PR Review

on:
  pull_request:
    types: [opened, synchronize, reopened]
  workflow_dispatch: {}

jobs:
  review:
    runs-on: ubuntu-latest
    permissions:
      contents: read
      pull-requests: write
      issues: write
    concurrency:
      group: claude-review-${{ github.event.pull_request.number }}
      cancel-in-progress: true
    steps:
      - uses: actions/checkout@v4
        with: { fetch-depth: 0 }   # 要全历史才能算 diff

      - name: Install Claude Code
        run: npm install -g @anthropic-ai/claude-code

      - name: Run review
        env:
          ANTHROPIC_API_KEY: ${{ secrets.ANTHROPIC_API_KEY }}
        run: |
          BASE="${{ github.event.pull_request.base.sha }}"
          HEAD="${{ github.event.pull_request.head.sha }}"
          git diff "${BASE}...${HEAD}" > pr.diff

          cat > /tmp/prompt.txt <<'EOF'
          你是资深 reviewer，审查附带的 PR diff。只报告：
          1) 逻辑 bug  2) 安全隐患  3) 明显坏味道
          每条格式：SEVERITY: 高/中/低 | path:line | 问题 | 修复建议
          没问题就只回一行：LGTM
          EOF

          cat /tmp/prompt.txt pr.diff | claude -p \
            --output-format stream-json \
            --input-format text \
            --permission-mode plan \
            --max-turns 6 \
            --add-dir "$GITHUB_WORKSPACE" \
            --verbose > review.jsonl

      - name: Post comment + gate
        env:
          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          PR_URL: ${{ github.event.pull_request.html_url }}
        run: |
          BODY=$(jq -rs '
            [ .[] | select(.type=="result") ][0]
            | .result as $r
            | "**🤖 Claude Code 自动审查**\n\n" + $r
            + "\n\n_成本: $\(.cost_usd) · 轮数: \(.num_turns)_"
          ' review.jsonl)

          echo "$BODY" | gh pr comment "$PR_URL" --body-file -

          # 高危即拦 CI
          if echo "$BODY" | grep -q "SEVERITY: 高"; then
            echo "::error::检测到高危问题，已拦截 PR"
            exit 1
          fi

cat prompt.txt | claude -p \
  --output-format stream-json \
  --permission-mode plan \      # plan = 只读，天然禁写
  --add-dir "$GITHUB_WORKSPACE" \  # 允许访问整个仓库
  --allowedTools "Read Grep Glob Bash(git diff:*) Bash(git log:*)" \
  --max-turns 8

# 拿到本次 PR 改动的文件清单
FILES=$(git diff --name-only "$BASE...$HEAD")

for f in $FILES; do
  git diff "$BASE...$HEAD" -- "$f" | claude -p "审查此文件 diff，格式同上，无问题回 LGTM" \
    --output-format json \
    --permission-mode plan \
    --max-turns 4 \
    > "review_$(echo $f | tr / _).json" &
done
wait

# 汇总所有非 LGTM 的结论
jq -rs 'map(.result) | map(select(. != "LGTM")) | join("\n\n---\n\n")' review_*.json

my-repo/
├── .github/workflows/claude-review.yml   # 步骤 4 的工作流
├── .claude/settings.json                 # 步骤 3 的 hooks 围栏
├── src/levy.py                           # 故意带 bug 的待审代码
└── README.md

def calc_total(items, coupon=None):
    total = sum(i['price'] for i in items)
    if coupon:
        total = total - coupon          # BUG1: 没校验 coupon 正负，负券直接白送
    return total

def save_user(data):
    import sqlite3
    db = sqlite3.connect('app.db')
    db.execute(f"INSERT INTO users VALUES ('{data['name']}')")  # BUG2: SQL 注入
    db.commit()

🤖 Claude Code 自动审查

SEVERITY: 高 | src/levy.py:4 | coupon 未做正数校验，传负数可白嫖 | 加 if coupon < 0 or coupon > total: raise
SEVERITY: 高 | src/levy.py:10 | 字符串拼接 SQL，存在注入 | 改用参数化 db.execute("... VALUES (?)", (data['name'],))
SEVERITY: 低 | src/levy.py:8 | import 写在函数内 | 提到模块顶部

_成本: $0.0118 · 轮数: 3_