CI/CD Automation with Claude

name: Claude AI Review

on:
  pull_request:
    types: [opened, synchronize]

jobs:
  claude-review:
    runs-on: ubuntu-latest
    permissions:
      contents: read
      pull-requests: write    # Needed to post review comments
    
    steps:
      - uses: actions/checkout@v4
        with:
          fetch-depth: 0    # Full history for diff analysis
      
      - name: Set up Node.js
        uses: actions/setup-node@v4
        with:
          node-version: '20'
      
      - name: Install Claude Code
        run: npm install -g @anthropic-ai/claude-code
      
      - name: Get PR diff
        run: |
          git diff origin/${{ github.base_ref }}..HEAD > pr_diff.txt
          echo "Diff size: $(wc -l pr_diff.txt) lines"
      
      - name: Run Claude Review
        env:
          ANTHROPIC_API_KEY: ${{ secrets.ANTHROPIC_API_KEY }}
        run: |
          claude --no-interactive "
          Review the following pull request diff as a senior engineer.
          
          REVIEW FOCUS:
          1. Security vulnerabilities (OWASP Top-10)
          2. Logic errors and edge cases
          3. Missing error handling
          4. Performance issues (N+1, missing indexes, blocking sync ops)
          5. Test coverage gaps for new code
          6. Violations of our conventions (see CLAUDE.md)
          
          FORMAT: GitHub Markdown with headers per concern.
          Severity: CRITICAL (must fix) | IMPORTANT (should fix) | SUGGESTION
          
          $(cat pr_diff.txt)
          " > review_output.md
      
      - name: Post Review Comment
        uses: actions/github-script@v7
        with:
          script: |
            const fs = require('fs');
            const review = fs.readFileSync('review_output.md', 'utf8');
            github.rest.issues.createComment({
              issue_number: context.issue.number,
              owner: context.repo.owner,
              repo: context.repo.repo,
              body: `## 🤖 Claude Code Review\n\n${review}`
            });

- name: Generate Missing Tests
  env:
    ANTHROPIC_API_KEY: ${{ secrets.ANTHROPIC_API_KEY }}
  run: |
    # Get list of new/modified files
    CHANGED_FILES=$(git diff --name-only origin/${{ github.base_ref }}..HEAD | grep -E '\.(ts|js|py)$')
    
    for FILE in $CHANGED_FILES; do
      # Check if corresponding test file exists
      TEST_FILE="${FILE%.*}.test.${FILE##*.}"
      
      if [ ! -f "$TEST_FILE" ]; then
        echo "Generating tests for $FILE"
        claude --no-interactive "
        Read $FILE and generate a comprehensive test file at $TEST_FILE.
        Requirements:
        - Use our project's test framework (see CLAUDE.md)
        - Cover: happy path, all error states, edge cases, boundary conditions
        - Mock all external dependencies (no real API calls in tests)
        - Target 85%+ branch coverage
        Write the tests directly to $TEST_FILE.
        "
      fi
    done
    
    # Commit generated tests to the PR
    git config user.name "Claude Bot"
    git config user.email "claude-bot@company.com"
    git add **/*.test.*
    git diff --staged --quiet || git commit -m "test: AI-generated tests for PR changes"
    git push