1
import { z } from 'zod';
2

3
const configSchema = z.object({
4
  gitlabUrl: z.string().url(),
5
  gitlabToken: z.string(),
6
  gitlabProjectId: z.string(),
7
  geminiApiKey: z.string(),
8
  geminiModel: z.string().default('gemini-2.5-flash-lite'),
9
  claudeWorkDir: z.string(),
10
  maxReviewRounds: z.coerce.number().default(2),
11
  webhookPort: z.coerce.number().default(8081),
12
  logLevel: z.enum(['DEBUG', 'INFO', 'WARN', 'ERROR']).default('INFO'),
13
});
14

15
export function loadConfig(): Config {
16
  const result = configSchema.safeParse({
17
    gitlabUrl: process.env.GITLAB_URL,
18
    gitlabToken: process.env.GITLAB_TOKEN,
19
    // ... 其他字段
20
  });
21
  if (!result.success) {
22
    throw new Error(`配置校验失败:\n${result.error.issues.map(i => i.message).join('\n')}`);
23
  }
24
  return result.data;
25
}

1
import { HttpsProxyAgent } from 'https-proxy-agent';
2
import * as https from 'node:https';
3

4
function getAgent() {
5
  const proxy = process.env.HTTPS_PROXY || process.env.https_proxy;
6
  return proxy ? new HttpsProxyAgent(proxy) : undefined;
7
}
8

9
// 使用 https.request 而不是 fetch
10
async function fetchWithAgent<T>(url, options): Promise<T> {
11
  const agent = getAgent();
12
  const protocol = url.startsWith('https:') ? https : await import('node:http');
13

14
  return new Promise((resolve, reject) => {
15
    const req = protocol.request(url, { method, headers, agent }, (res) => {
16
      let data = '';
17
      res.on('data', chunk => { data += chunk; });
18
      res.on('end', () => {
19
        if (res.statusCode >= 400) reject(new Error(`HTTP ${res.statusCode}: ${data}`));
20
        else resolve(JSON.parse(data));
21
      });
22
    });
23
    req.on('error', reject);
24
    if (body) req.write(body);
25
    req.end();
26
  });
27
}

1
const REVIEW_SYSTEM_PROMPT = `你是一个资深高级软件工程师，正在进行代码审查。你必须全程使用中文进行回复。
2

3
审查以下代码 diff。对于发现的每个问题：
4
1. 指出文件和大致行号
5
2. 分类严重程度：critical/warning/suggestion/nitpick
6
3. 分类问题类型：bug/security/performance/style/maintainability/test
7
4. 用中文清晰说明问题
8
5. 给出具体的修复建议（含代码示例）`;
9

10
const REVIEW_SCHEMA = {
11
  type: 'OBJECT',
12
  properties: {
13
    summary: { type: 'STRING' },
14
    overall_verdict: { type: 'STRING', enum: ['approved', 'needs_changes', 'minor_suggestions'] },
15
    comments: {
16
      type: 'ARRAY',
17
      items: { /* ReviewComment 结构 */ }
18
    }
19
  },
20
  required: ['summary', 'overall_verdict', 'comments'],
21
};
22

23
async function reviewDiff(diffText, apiKey, model = 'gemini-2.5-flash-lite') {
24
  const url = `https://generativelanguage.googleapis.com/v1beta/models/${model}:generateContent?key=${apiKey}`;
25
  const payload = {
26
    system_instruction: { parts: [{ text: REVIEW_SYSTEM_PROMPT }] },
27
    contents: [{ parts: [{ text: `审查以下 diff:\n\`\`\`diff\n${diffText}\`\`\`` }] }],
28
    generationConfig: {
29
      response_mime_type: 'application/json',
30
      response_schema: REVIEW_SCHEMA,
31
    },
32
  };
33

34
  // 3 次重试 + 指数退避
35
  for (let attempt = 1; attempt <= 3; attempt++) {
36
    try {
37
      const data = await httpsPostJson(url, payload);
38
      return JSON.parse(data.candidates[0].content.parts[0].text);
39
    } catch (e) {
40
      if (attempt < 3) await sleep(3 * attempt * 1000);
41
    }
42
  }
43
}

1
import { spawn } from 'node:child_process';
2

3
async function fixIssues(workDir, review, mrIid) {
4
  const prompt = formatFixPrompt(review); // 从 review 中提取 critical/warning 问题
5

6
  // 记录修复前的文件状态
7
  const beforeChanges = await getModifiedFiles(workDir);
8

9
  // 使用 spawn + stdin 避免 shell 转义
10
  const child = spawn('claude', [
11
    '-p',
12
    '--permission-mode', 'acceptEdits',
13
    '--allowed-tools', 'Read Edit Bash',
14
    '--output-format', 'json',
15
    '--no-session-persistence',
16
  ], { cwd: workDir, stdio: ['pipe', 'inherit', 'inherit'] });
17

18
  child.stdin.write(prompt);
19
  child.stdin.end();
20

21
  // 等待完成（600s 超时）
22
  await waitForClose(child, 600_000);
23

24
  // 对比变更
25
  const afterChanges = await getModifiedFiles(workDir);
26
  const newOrModified = [...afterChanges].filter(f => !beforeChanges.has(f));
27

28
  if (newOrModified.length === 0) return { success: true, changed: false };
29

30
  // git add + commit + push
31
  await execAsync('git add -A', { cwd: workDir });
32
  await execAsync(`git commit -m "auto-fix: 修复 MR !${mrIid} 审查问题"`, { cwd: workDir });
33
  await execAsync('git push', { cwd: workDir });
34

35
  return { success: true, changed: true };
36
}

1
async function runReviewFixCycle(client, config, mrIid, state) {
2
  // 1. 跳过正在处理的 MR
3
  if (state.isProcessing(mrIid)) return;
4

5
  // 2. 超过最大轮数则停止
6
  if (state.getRound(mrIid) >= config.maxReviewRounds) {
7
    await client.postNote(mrIid, '已达最大轮数，停止自动审查。');
8
    return;
9
  }
10

11
  // 3. 审查 diff
12
  state.incrementRound(mrIid);
13
  const review = await reviewMr(client, config, mrIid);
14

15
  // 4. 判断：approved 或没有 critical/warning → 通过
16
  if (review.overall_verdict === 'approved' ||
17
      !review.comments.some(c => c.severity === 'critical' || c.severity === 'warning')) {
18
    state.setStatus(mrIid, 'approved');
19
    return;
20
  }
21

22
  // 5. 调用 Claude Code 修复
23
  const fixResult = await fixIssues(config.claudeWorkDir, review, mrIid);
24

25
  // 6. 修复成功 → commit + push → 等待 GitLab 重新触发
26
  if (fixResult.changed) {
27
    state.setStatus(mrIid, 'fixed_waiting_for_re_review');
28
  }
29
}

1
import express from 'express';
2

3
export function createWebhookServer(config, client, state) {
4
  const app = express();
5
  app.use(express.json());
6

7
  app.post('/webhook', async (req, res) => {
8
    const { object_kind, event_type } = req.body;
9

10
    if (object_kind === 'merge_request') {
11
      const { action, iid: mrIid } = req.body.object_attributes || {};
12
      if (mrIid && ['open', 'update', 'reopen'].includes(action)) {
13
        // Fire and forget
14
        runReviewFixCycle(client, config, mrIid, state).catch(console.error);
15
        return res.json({ status: 'accepted' });
16
      }
17
    }
18

19
    return res.json({ status: 'ignored' });
20
  });
21

22
  app.get('/health', (_req, res) => res.json({ status: 'ok' }));
23
  return app;
24
}

1
module.exports = {
2
  apps: [
3
    {
4
      name: 'auto-review',
5
      script: 'dist/index.js',
6
      args: 'start',
7
      interpreter: 'node',
8
      exec_mode: 'fork',     // 避免 cluster 模式端口冲突
9
      instances: 1,
10
      autorestart: true,
11
      max_memory_restart: '256M',
12
      out_file: './logs/out.log',
13
      error_file: './logs/error.log',
14
    },
15
    {
16
      name: 'ngrok',
17
      cmd: 'ngrok http 8081 --log=stdout --log-format=json',
18
      autorestart: true,
19
      out_file: './logs/ngrok.log',
20
      error_file: './logs/ngrok.log',
21
    },
22
  ],
23
};