mirror of
https://github.com/Hmbown/DeepSeek-TUI.git
synced 2026-09-03 06:50:13 +08:00
6ec44b60b3
Wire Claude code review into every non-draft PR as a GitHub Action, since GitHub CODEOWNERS only accepts users/teams (not bots). @Hmbown stays the human owner; the review is advisory and posts alongside it. - claude-review.yml: anthropics/claude-code-action@v1 in review mode with track_progress; auth via CLAUDE_CODE_OAUTH_TOKEN (from `claude setup-token`). No-ops with a notice until the secret is set, so it's safe to merge first. Codex/ChatGPT review is handled out-of-repo via the ChatGPT Codex cloud integration (chatgpt.com/codex), authed by the ChatGPT subscription, so no OpenAI workflow or repo secret is needed. CODEOWNERS documents the split. The review prompt also guards the v0.8.65 EPIC #2608 routing invariant (provider-prefixed model strings are wire ids/hints, not provider-selection proof). Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
82 lines
3.6 KiB
YAML
82 lines
3.6 KiB
YAML
name: Claude PR Review
|
|
|
|
# Advisory AI code review by Claude (anthropics/claude-code-action) on every
|
|
# non-draft PR. CODEOWNERS (@Hmbown) stays the human owner — this review posts
|
|
# alongside it, it does not replace approval.
|
|
#
|
|
# Setup: add a CLAUDE_CODE_OAUTH_TOKEN repository secret
|
|
# 1. Run `claude setup-token` locally (Pro/Max subscription) to mint a token.
|
|
# 2. Settings -> Secrets and variables -> Actions -> New repository secret.
|
|
# Until the secret exists the job no-ops with a notice (stays green), so this
|
|
# workflow is safe to merge before the token is configured.
|
|
|
|
on:
|
|
pull_request:
|
|
types: [opened, synchronize, reopened, ready_for_review]
|
|
branches: [master, main]
|
|
|
|
concurrency:
|
|
group: claude-review-${{ github.event.pull_request.number }}
|
|
cancel-in-progress: true
|
|
|
|
jobs:
|
|
claude-review:
|
|
name: Claude review
|
|
if: github.event.pull_request.draft == false
|
|
runs-on: ubuntu-latest
|
|
env:
|
|
HAS_OAUTH: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN != '' }}
|
|
permissions:
|
|
contents: read
|
|
pull-requests: write
|
|
id-token: write
|
|
steps:
|
|
- name: Skip when token is unset
|
|
if: env.HAS_OAUTH != 'true'
|
|
run: echo "::notice::CLAUDE_CODE_OAUTH_TOKEN is not set — skipping Claude review. Add the secret to enable it."
|
|
|
|
- name: Checkout repository
|
|
if: env.HAS_OAUTH == 'true'
|
|
uses: actions/checkout@v7
|
|
with:
|
|
fetch-depth: 1
|
|
|
|
- name: Claude code review
|
|
if: env.HAS_OAUTH == 'true'
|
|
uses: anthropics/claude-code-action@v1
|
|
with:
|
|
claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
|
|
track_progress: true
|
|
prompt: |
|
|
REPO: ${{ github.repository }}
|
|
PR NUMBER: ${{ github.event.pull_request.number }}
|
|
|
|
You are reviewing a pull request against CodeWhale, a Rust workspace
|
|
(an agentic coding TUI/runtime). The PR branch is already checked out
|
|
in the current working directory.
|
|
|
|
Review the diff and report findings in this priority order:
|
|
1. Correctness bugs: logic errors, panics, unwrap/expect on fallible
|
|
paths, race conditions, incorrect error handling, off-by-one, and
|
|
non-exhaustive matches that could break compilation.
|
|
2. Provider/model/route safety (v0.8.65 EPIC #2608 invariant): a
|
|
provider-prefixed model string (e.g. `deepseek-ai/`, `deepseek/`,
|
|
`anthropic/`, `openai/`, `qwen/`) is a wire id or namespace hint,
|
|
never proof of provider selection. Flag any code that infers a
|
|
provider/model switch from such a prefix or from freeform prompt
|
|
text rather than from explicit user choice, config, Fleet policy,
|
|
capability requirements, or fallback policy.
|
|
3. Reuse and simplification: duplicated logic, dead code, needless
|
|
allocation/cloning, or reimplementing something the workspace
|
|
already provides.
|
|
4. Tests: missing coverage for new behavior and edge cases.
|
|
5. Security: secret handling, shell/exec policy, input validation.
|
|
|
|
Be specific and concise. Use inline comments for line-specific issues
|
|
and one top-level comment for the summary. Note genuinely good choices
|
|
briefly. Do not nitpick style that `cargo fmt` / `clippy` already
|
|
enforce.
|
|
|
|
claude_args: |
|
|
--allowedTools "mcp__github_inline_comment__create_inline_comment,Bash(gh pr comment:*),Bash(gh pr diff:*),Bash(gh pr view:*),Bash(git log:*),Bash(git diff:*)"
|