320 lines
15 KiB
Bash
Executable file
320 lines
15 KiB
Bash
Executable file
#!/usr/bin/env bash
|
|
# shellcheck disable=SC2015,SC2016
|
|
# review-pr.sh — Synchronous reviewer agent for a single PR
|
|
#
|
|
# Usage: ./review-pr.sh <pr-number> [--force]
|
|
#
|
|
# Architecture:
|
|
# Synchronous bash loop using claude -p (one-shot invocations).
|
|
# Session continuity via --resume and .sid file.
|
|
# Re-review resumes the original session — Claude remembers its prior review.
|
|
#
|
|
# Flow:
|
|
# 1. Fetch PR metadata (title, body, head, base, SHA, CI state)
|
|
# 2. Detect re-review (previous review at different SHA, incremental diff)
|
|
# 3. Create review worktree, checkout PR head
|
|
# 4. Build structural analysis graph
|
|
# 5. Load review formula
|
|
# 6. agent_run(worktree, prompt) → Claude reviews, writes verdict JSON
|
|
# 7. Parse verdict, post as Forge review (APPROVE / REQUEST_CHANGES / COMMENT)
|
|
# 8. Save session ID to .sid file for re-review continuity
|
|
#
|
|
# Session file: /tmp/review-session-{project}-{pr}.sid
|
|
set -euo pipefail
|
|
|
|
# Load shared environment and libraries
|
|
source "$(dirname "$0")/../lib/env.sh"
|
|
source "$(dirname "$0")/../lib/ci-helpers.sh"
|
|
source "$(dirname "$0")/../lib/worktree.sh"
|
|
source "$(dirname "$0")/../lib/agent-sdk.sh"
|
|
source "$(dirname "$0")/../lib/formula-session.sh"
|
|
|
|
# Auto-pull factory code to pick up merged fixes before any logic runs
|
|
git -C "$FACTORY_ROOT" pull --ff-only origin main 2>/dev/null || true
|
|
|
|
# --- Config ---
|
|
PR_NUMBER="${1:?Usage: review-pr.sh <pr-number> [--force]}"
|
|
FORCE="${2:-}"
|
|
API="${FORGE_API}"
|
|
LOGFILE="${DISINTO_LOG_DIR}/review/review.log"
|
|
WORKTREE="/tmp/${PROJECT_NAME}-review-${PR_NUMBER}"
|
|
SID_FILE="/tmp/review-session-${PROJECT_NAME}-${PR_NUMBER}.sid"
|
|
OUTPUT_FILE="/tmp/${PROJECT_NAME}-review-output-${PR_NUMBER}.json"
|
|
LOCKFILE="/tmp/${PROJECT_NAME}-review.lock"
|
|
STATUSFILE="/tmp/${PROJECT_NAME}-review-status"
|
|
MAX_DIFF=25000
|
|
REVIEW_TMPDIR=$(mktemp -d)
|
|
|
|
log() { printf '[%s] PR#%s %s\n' "$(date -u '+%Y-%m-%d %H:%M:%S UTC')" "$PR_NUMBER" "$*" >> "$LOGFILE"; }
|
|
status() { printf '[%s] PR #%s: %s\n' "$(date -u '+%Y-%m-%d %H:%M:%S UTC')" "$PR_NUMBER" "$*" > "$STATUSFILE"; log "$*"; }
|
|
cleanup() { rm -rf "$REVIEW_TMPDIR" "$LOCKFILE" "$STATUSFILE" "/tmp/${PROJECT_NAME}-review-graph-${PR_NUMBER}.json"; }
|
|
trap cleanup EXIT
|
|
|
|
# =============================================================================
|
|
# LOG ROTATION
|
|
# =============================================================================
|
|
if [ -f "$LOGFILE" ] && [ "$(stat -c%s "$LOGFILE" 2>/dev/null || echo 0)" -gt 102400 ]; then
|
|
mv "$LOGFILE" "$LOGFILE.old"
|
|
fi
|
|
|
|
# =============================================================================
|
|
# RESOLVE AGENT IDENTITY FOR .PROFILE REPO
|
|
# =============================================================================
|
|
if [ -z "${AGENT_IDENTITY:-}" ] && [ -n "${FORGE_TOKEN:-}" ]; then
|
|
AGENT_IDENTITY=$(curl -sf -H "Authorization: token ${FORGE_TOKEN}" \
|
|
"${FORGE_URL:-http://localhost:3000}/api/v1/user" 2>/dev/null | jq -r '.login // empty' 2>/dev/null || true)
|
|
fi
|
|
|
|
# =============================================================================
|
|
# MEMORY GUARD
|
|
# =============================================================================
|
|
memory_guard 1500
|
|
|
|
# =============================================================================
|
|
# CONCURRENCY LOCK
|
|
# =============================================================================
|
|
if [ -f "$LOCKFILE" ]; then
|
|
LPID=$(cat "$LOCKFILE" 2>/dev/null || true)
|
|
[ -n "$LPID" ] && kill -0 "$LPID" 2>/dev/null && { log "SKIP: locked"; exit 0; }
|
|
rm -f "$LOCKFILE"
|
|
fi
|
|
echo $$ > "$LOCKFILE"
|
|
|
|
# =============================================================================
|
|
# FETCH PR METADATA
|
|
# =============================================================================
|
|
status "fetching metadata"
|
|
PR_JSON=$(curl -sf -H "Authorization: token ${FORGE_TOKEN}" "${API}/pulls/${PR_NUMBER}")
|
|
PR_TITLE=$(printf '%s' "$PR_JSON" | jq -r '.title')
|
|
PR_BODY=$(printf '%s' "$PR_JSON" | jq -r '.body // ""')
|
|
PR_HEAD=$(printf '%s' "$PR_JSON" | jq -r '.head.ref')
|
|
PR_BASE=$(printf '%s' "$PR_JSON" | jq -r '.base.ref')
|
|
PR_SHA=$(printf '%s' "$PR_JSON" | jq -r '.head.sha')
|
|
PR_STATE=$(printf '%s' "$PR_JSON" | jq -r '.state')
|
|
log "${PR_TITLE} (${PR_HEAD}→${PR_BASE} ${PR_SHA:0:7})"
|
|
|
|
if [ "$PR_STATE" != "open" ]; then
|
|
log "SKIP: state=${PR_STATE}"
|
|
worktree_cleanup "$WORKTREE"
|
|
rm -f "$OUTPUT_FILE" "$SID_FILE" 2>/dev/null || true
|
|
exit 0
|
|
fi
|
|
|
|
# =============================================================================
|
|
# CI CHECK
|
|
# =============================================================================
|
|
CI_STATE=$(ci_commit_status "$PR_SHA")
|
|
CI_NOTE=""
|
|
if ! ci_passed "$CI_STATE"; then
|
|
ci_required_for_pr "$PR_NUMBER" && { log "SKIP: CI=${CI_STATE}"; exit 0; }
|
|
CI_NOTE=" (not required — non-code PR)"
|
|
fi
|
|
|
|
# =============================================================================
|
|
# DUPLICATE CHECK — skip if already reviewed at this SHA
|
|
# =============================================================================
|
|
ALL_COMMENTS=$(forge_api_all "/issues/${PR_NUMBER}/comments")
|
|
HAS_CMT=$(printf '%s' "$ALL_COMMENTS" | jq --arg s "$PR_SHA" \
|
|
'[.[]|select(.body|contains("<!-- reviewed: "+$s+" -->"))]|length')
|
|
[ "${HAS_CMT:-0}" -gt 0 ] && [ "$FORCE" != "--force" ] && { log "SKIP: reviewed ${PR_SHA:0:7}"; exit 0; }
|
|
HAS_FML=$(forge_api_all "/pulls/${PR_NUMBER}/reviews" | jq --arg s "$PR_SHA" \
|
|
'[.[]|select(.commit_id==$s)|select(.state!="COMMENT")]|length')
|
|
[ "${HAS_FML:-0}" -gt 0 ] && [ "$FORCE" != "--force" ] && { log "SKIP: formal review"; exit 0; }
|
|
|
|
# =============================================================================
|
|
# RE-REVIEW DETECTION
|
|
# =============================================================================
|
|
PREV_CONTEXT="" IS_RE_REVIEW=false PREV_SHA=""
|
|
PREV_REV=$(printf '%s' "$ALL_COMMENTS" | jq -r --arg s "$PR_SHA" \
|
|
'[.[]|select(.body|contains("<!-- reviewed:"))|select(.body|contains($s)|not)]|last // empty')
|
|
if [ -n "$PREV_REV" ] && [ "$PREV_REV" != "null" ]; then
|
|
PREV_BODY=$(printf '%s' "$PREV_REV" | jq -r '.body')
|
|
PREV_SHA=$(printf '%s' "$PREV_BODY" | grep -oP '<!-- reviewed: \K[a-f0-9]+' | head -1)
|
|
cd "${PROJECT_REPO_ROOT}"; git fetch origin "$PR_HEAD" 2>/dev/null || true
|
|
INCR=$(git diff "${PREV_SHA}..${PR_SHA}" 2>/dev/null | head -c "$MAX_DIFF") || true
|
|
if [ -n "$INCR" ]; then
|
|
IS_RE_REVIEW=true; log "re-review: previous at ${PREV_SHA:0:7}"
|
|
DEV_R=$(printf '%s' "$ALL_COMMENTS" | jq -r \
|
|
'[.[]|select(.body|contains("<!-- dev-response:"))]|last // empty')
|
|
DEV_SEC=""; [ -n "$DEV_R" ] && [ "$DEV_R" != "null" ] && \
|
|
DEV_SEC=$(printf '\n### Developer Response\n%s' "$(printf '%s' "$DEV_R" | jq -r '.body')") || true
|
|
PREV_CONTEXT=$(printf '\n## This is a RE-REVIEW\nPrevious review at %s requested changes.\n### Previous Review\n%s%s\n### Incremental Diff (%s..%s)\n```diff\n%s\n```' \
|
|
"${PREV_SHA:0:7}" "$PREV_BODY" "$DEV_SEC" "${PREV_SHA:0:7}" "${PR_SHA:0:7}" "$INCR")
|
|
fi
|
|
fi
|
|
|
|
# Recover session_id from .sid file (re-review continuity)
|
|
agent_recover_session
|
|
|
|
# =============================================================================
|
|
# FETCH DIFF
|
|
# =============================================================================
|
|
status "fetching diff"
|
|
curl -s -H "Authorization: token ${FORGE_TOKEN}" \
|
|
"${API}/pulls/${PR_NUMBER}.diff" > "${REVIEW_TMPDIR}/full.diff"
|
|
FSIZE=$(stat -c%s "${REVIEW_TMPDIR}/full.diff" 2>/dev/null || echo 0)
|
|
DIFF=$(head -c "$MAX_DIFF" "${REVIEW_TMPDIR}/full.diff")
|
|
FILES=$(grep -E '^\+\+\+ b/' "${REVIEW_TMPDIR}/full.diff" | sed 's|^+++ b/||' | grep -v '/dev/null' | sort -u || true)
|
|
DNOTE=""; [ "$FSIZE" -gt "$MAX_DIFF" ] && DNOTE=" (truncated from ${FSIZE} bytes)"
|
|
|
|
# =============================================================================
|
|
# WORKTREE SETUP
|
|
# =============================================================================
|
|
cd "${PROJECT_REPO_ROOT}"
|
|
git fetch origin "$PR_HEAD" 2>/dev/null || true
|
|
|
|
if [ -d "$WORKTREE" ]; then
|
|
cd "$WORKTREE"; git checkout --detach "$PR_SHA" 2>/dev/null || {
|
|
cd "${PROJECT_REPO_ROOT}"; worktree_cleanup "$WORKTREE"
|
|
git worktree add "$WORKTREE" "$PR_SHA" --detach 2>/dev/null; }
|
|
else
|
|
git worktree add "$WORKTREE" "$PR_SHA" --detach 2>/dev/null
|
|
fi
|
|
|
|
# =============================================================================
|
|
# BUILD STRUCTURAL ANALYSIS GRAPH
|
|
# =============================================================================
|
|
status "preparing review"
|
|
GRAPH_REPORT="/tmp/${PROJECT_NAME}-review-graph-${PR_NUMBER}.json"
|
|
GRAPH_SECTION=""
|
|
# shellcheck disable=SC2086
|
|
if python3 "$FACTORY_ROOT/lib/build-graph.py" \
|
|
--project-root "$PROJECT_REPO_ROOT" \
|
|
--changed-files $FILES \
|
|
--output "$GRAPH_REPORT" 2>>"$LOGFILE"; then
|
|
GRAPH_SECTION=$(printf '\n## Structural analysis (affected objectives)\n```json\n%s\n```\n' \
|
|
"$(cat "$GRAPH_REPORT")")
|
|
log "graph report generated for PR #${PR_NUMBER}"
|
|
else
|
|
log "WARN: build-graph.py failed — continuing without structural analysis"
|
|
fi
|
|
|
|
# =============================================================================
|
|
# LOAD LESSONS FROM .PROFILE REPO (PRE-SESSION)
|
|
# =============================================================================
|
|
profile_load_lessons || true
|
|
LESSONS_INJECTION="${LESSONS_CONTEXT:-}"
|
|
|
|
# =============================================================================
|
|
# BUILD PROMPT
|
|
# =============================================================================
|
|
FORMULA=$(cat "${FACTORY_ROOT}/formulas/review-pr.toml")
|
|
{
|
|
printf 'You are the review agent for %s. Follow the formula to review PR #%s.\n\n' \
|
|
"${FORGE_REPO}" "${PR_NUMBER}"
|
|
printf '## PR Context\n**%s** (%s → %s) | SHA: %s | CI: %s%s\nRe-review: %s\n\n' \
|
|
"$PR_TITLE" "$PR_HEAD" "$PR_BASE" "$PR_SHA" "$CI_STATE" "$CI_NOTE" "$IS_RE_REVIEW"
|
|
printf '### Description\n%s\n\n### Changed Files\n%s\n\n### Diff%s\n```diff\n%s\n```\n' \
|
|
"$PR_BODY" "$FILES" "$DNOTE" "$DIFF"
|
|
[ -n "$PREV_CONTEXT" ] && printf '%s\n' "$PREV_CONTEXT"
|
|
[ -n "$GRAPH_SECTION" ] && printf '%s\n' "$GRAPH_SECTION"
|
|
[ -n "$LESSONS_INJECTION" ] && printf '\n## Lessons learned\n%s\n\n' "$LESSONS_INJECTION"
|
|
printf '\n## Formula\n%s\n\n## Environment\nREVIEW_OUTPUT_FILE=%s\nFORGE_API=%s\nPR_NUMBER=%s\nFACTORY_ROOT=%s\n' \
|
|
"$FORMULA" "$OUTPUT_FILE" "$API" "$PR_NUMBER" "$FACTORY_ROOT"
|
|
printf 'NEVER echo the actual token — always reference ${FORGE_TOKEN} or ${FORGE_REVIEW_TOKEN}.\n'
|
|
printf '\n## Completion\nAfter writing the JSON file to REVIEW_OUTPUT_FILE, stop.\nDo NOT write to any phase file — completion is automatic.\n'
|
|
} > "${REVIEW_TMPDIR}/prompt.md"
|
|
PROMPT=$(cat "${REVIEW_TMPDIR}/prompt.md")
|
|
|
|
# =============================================================================
|
|
# RUN REVIEW AGENT
|
|
# =============================================================================
|
|
status "running review"
|
|
rm -f "$OUTPUT_FILE"
|
|
export CLAUDE_MODEL="sonnet"
|
|
|
|
if [ "$IS_RE_REVIEW" = true ] && [ -n "$_AGENT_SESSION_ID" ]; then
|
|
agent_run --resume "$_AGENT_SESSION_ID" --worktree "$WORKTREE" "$PROMPT"
|
|
else
|
|
agent_run --worktree "$WORKTREE" "$PROMPT"
|
|
fi
|
|
log "agent_run complete (re-review: ${IS_RE_REVIEW})"
|
|
|
|
# =============================================================================
|
|
# PARSE REVIEW OUTPUT
|
|
# =============================================================================
|
|
REVIEW_JSON=""
|
|
if [ -f "$OUTPUT_FILE" ]; then
|
|
RAW=$(cat "$OUTPUT_FILE")
|
|
if printf '%s' "$RAW" | jq -e '.verdict' >/dev/null 2>&1; then REVIEW_JSON="$RAW"
|
|
else
|
|
EXT=$(printf '%s' "$RAW" | sed -n '/^```json/,/^```$/p' | sed '1d;$d')
|
|
[ -z "$EXT" ] && EXT=$(printf '%s' "$RAW" | sed -n '/^{/,/^}/p')
|
|
[ -n "${EXT:-}" ] && printf '%s' "$EXT" | jq -e '.verdict' >/dev/null 2>&1 && REVIEW_JSON="$EXT"
|
|
fi
|
|
fi
|
|
|
|
if [ -z "$REVIEW_JSON" ]; then
|
|
log "ERROR: no valid review output"
|
|
jq -n --arg b "## AI Review — Error\n<!-- review-error: ${PR_SHA} -->\nReview failed.\n---\n*${PR_SHA:0:7}*" \
|
|
'{body: $b}' | curl -sf -o /dev/null -X POST -H "Authorization: token ${FORGE_TOKEN}" \
|
|
-H "Content-Type: application/json" "${API}/issues/${PR_NUMBER}/comments" -d @- || true
|
|
exit 1
|
|
fi
|
|
|
|
VERDICT=$(printf '%s' "$REVIEW_JSON" | jq -r '.verdict' | tr '[:lower:]' '[:upper:]' | tr '-' '_')
|
|
REASON=$(printf '%s' "$REVIEW_JSON" | jq -r '.verdict_reason // ""')
|
|
REVIEW_MD=$(printf '%s' "$REVIEW_JSON" | jq -r '.review_markdown // ""')
|
|
log "verdict: ${VERDICT}"
|
|
|
|
# =============================================================================
|
|
# POST REVIEW
|
|
# =============================================================================
|
|
status "posting review"
|
|
RTYPE="Review"
|
|
if [ "$IS_RE_REVIEW" = true ]; then
|
|
RTYPE="Re-review (round $(($(printf '%s' "$ALL_COMMENTS" | \
|
|
jq '[.[]|select(.body|contains("<!-- reviewed:"))]|length') + 1)))"
|
|
fi
|
|
PREV_REF=""; [ "$IS_RE_REVIEW" = true ] && PREV_REF=$(printf ' | Previous: `%s`' "${PREV_SHA:0:7}") || true
|
|
COMMENT_BODY=$(printf '## AI %s\n<!-- reviewed: %s -->\n\n%s\n\n### Verdict\n**%s** — %s\n\n---\n*Reviewed at `%s`%s | [AGENTS.md](AGENTS.md)*' \
|
|
"$RTYPE" "$PR_SHA" "$REVIEW_MD" "$VERDICT" "$REASON" "${PR_SHA:0:7}" "$PREV_REF")
|
|
printf '%s' "$COMMENT_BODY" > "${REVIEW_TMPDIR}/body.txt"
|
|
jq -Rs '{body: .}' < "${REVIEW_TMPDIR}/body.txt" > "${REVIEW_TMPDIR}/comment.json"
|
|
POST_RC=$(curl -s -o /dev/null -w "%{http_code}" -X POST \
|
|
-H "Authorization: token ${FORGE_REVIEW_TOKEN}" -H "Content-Type: application/json" \
|
|
"${API}/issues/${PR_NUMBER}/comments" --data-binary @"${REVIEW_TMPDIR}/comment.json")
|
|
[ "$POST_RC" != "201" ] && { log "ERROR: comment HTTP ${POST_RC}"; exit 1; }
|
|
log "posted review comment"
|
|
|
|
# =============================================================================
|
|
# POST FORMAL REVIEW
|
|
# =============================================================================
|
|
REVENT="COMMENT"
|
|
case "$VERDICT" in APPROVE) REVENT="APPROVED" ;; REQUEST_CHANGES|DISCUSS) REVENT="REQUEST_CHANGES" ;; esac
|
|
if [ "$REVENT" = "APPROVED" ]; then
|
|
BLOGIN=$(curl -sf -H "Authorization: token ${FORGE_REVIEW_TOKEN}" \
|
|
"${API%%/repos*}/user" 2>/dev/null | jq -r '.login // empty' || true)
|
|
[ -n "$BLOGIN" ] && forge_api_all "/pulls/${PR_NUMBER}/reviews" "${FORGE_REVIEW_TOKEN}" 2>/dev/null | \
|
|
jq -r --arg l "$BLOGIN" '.[]|select(.state=="REQUEST_CHANGES")|select(.user.login==$l)|.id' | \
|
|
while IFS= read -r rid; do
|
|
curl -sf -o /dev/null -X POST -H "Authorization: token ${FORGE_REVIEW_TOKEN}" \
|
|
-H "Content-Type: application/json" "${API}/pulls/${PR_NUMBER}/reviews/${rid}/dismissals" \
|
|
-d '{"message":"Superseded by approval"}' || true; log "dismissed review ${rid}"
|
|
done || true
|
|
fi
|
|
jq -n --arg b "AI ${RTYPE}: **${VERDICT}** — ${REASON}" --arg e "$REVENT" --arg s "$PR_SHA" \
|
|
'{body: $b, event: $e, commit_id: $s}' > "${REVIEW_TMPDIR}/formal.json"
|
|
curl -s -o /dev/null -X POST -H "Authorization: token ${FORGE_REVIEW_TOKEN}" \
|
|
-H "Content-Type: application/json" "${API}/pulls/${PR_NUMBER}/reviews" \
|
|
--data-binary @"${REVIEW_TMPDIR}/formal.json" >/dev/null 2>&1 || true
|
|
log "formal ${REVENT} submitted"
|
|
|
|
# =============================================================================
|
|
# FINAL CLEANUP
|
|
# =============================================================================
|
|
case "$VERDICT" in
|
|
REQUEST_CHANGES|DISCUSS)
|
|
# Keep session and worktree for re-review continuity
|
|
log "keeping session for re-review (SID: ${_AGENT_SESSION_ID:0:12}...)"
|
|
;;
|
|
*)
|
|
rm -f "$SID_FILE" "$OUTPUT_FILE"
|
|
worktree_cleanup "$WORKTREE"
|
|
;;
|
|
esac
|
|
|
|
# Write journal entry post-session
|
|
profile_write_journal "review-${PR_NUMBER}" "Review PR #${PR_NUMBER} (${VERDICT})" "${VERDICT,,}" "" || true
|
|
|
|
log "DONE: ${VERDICT} (re-review: ${IS_RE_REVIEW})"
|