1
const express = require('express');
2
const crypto = require('crypto');
3
const { exec } = require('child_process');
4

5
const app = express();
6
const PORT = process.env.PORT || 3000;
7
const SECRET_TOKEN = process.env.GITLAB_SECRET_TOKEN;
8
const GITLAB_TOKEN = process.env.GITLAB_PRIVATE_TOKEN;
9
const GITLAB_URL = process.env.GITLAB_URL || 'https://gitlab.com';
10

11
app.use(express.json());
12

13
// 验证 webhook 签名
14
function verifyWebhook(req, res, next) {
15
  if (req.headers['x-gitlab-token'] !== SECRET_TOKEN) {
16
    return res.status(401).send('Unauthorized');
17
  }
18
  next();
19
}
20

21
app.post('/webhook', verifyWebhook, async (req, res) => {
22
  const { object_kind, event_type, object_attributes, merge_request, project } = req.body;
23

24
  // 只处理 MR 的新评论
25
  if (event_type !== 'note' || object_attributes?.noteable_type !== 'MergeRequest') {
26
    return res.status(200).send('Ignored');
27
  }
28

29
  const mrIID = merge_request.iid;
30
  const projectID = project.id;
31
  const projectPath = project.path_with_namespace;
32
  const comment = object_attributes.note;
33

34
  console.log(`收到 MR #${mrIID} 的评论: ${comment}`);
35

36
  // 只处理 Gemini 的 Review 评论（以 [AI Review] 开头）
37
  // 或者处理特定的触发词（如 /review、/fix）
38
  if (comment.startsWith('[AI Review]') || comment.startsWith('/')) {
39
    await triggerFix(projectID, mrIID, projectPath, comment);
40
  }
41

42
  res.status(200).send('OK');
43
});
44

45
async function triggerFix(projectID, mrIID, projectPath, comment) {
46
  console.log(`触发修复: MR #${mrIID}, 项目: ${projectPath}`);
47

48
  // 通过 GitLab API 触发 pipeline
49
  const pipelineUrl = `${GITLAB_URL}/api/v4/projects/${projectID}/trigger/pipeline`;
50

51
  exec(`curl -X POST "${pipelineUrl}" \
52
    -F "token=<REDACTED>" \
53
    -F "ref=main" \
54
    -F "variables[MR_IID]=${mrIID}" \
55
    -F "variables[ACTION]=fix"`, (error) => {
56
    if (error) {
57
      console.error('触发 pipeline 失败:', error);
58
    }
59
  });
60
}
61

62
app.listen(PORT, () => {
63
  console.log(`Webhook 服务运行在 http://localhost:${PORT}`);
64
});

1
import os
2
import json
3
import subprocess
4
import requests
5
from google import genai
6

7
GEMINI_API_KEY = os.environ["GEMINI_API_KEY"]
8
GITLAB_URL = os.environ.get("GITLAB_URL", "https://gitlab.com")
9
GITLAB_TOKEN = os.environ["GITLAB_PRIVATE_TOKEN"]
10
PROJECT_ID = os.environ["PROJECT_ID"]
11
MR_IID = os.environ["MR_IID"]
12

13
client = genai.Client(api_key=<REDACTED>
14

15
def get_mr_diff():
16
    """通过 GitLab API 获取 MR 的 diff"""
17
    url = f"{GITLAB_URL}/api/v4/projects/{PROJECT_ID}/merge_requests/{MR_IID}/changes"
18
    headers = {"PRIVATE-TOKEN": GITLAB_TOKEN}
19
    resp = requests.get(url, headers=headers)
20
    resp.raise_for_status()
21
    data = resp.json()
22

23
    # 组装 diff 文本
24
    diff_lines = []
25
    for change in data.get("changes", []):
26
        diff_lines.append(f"--- a/{change['old_path']}")
27
        diff_lines.append(f"+++ b/{change['new_path']}")
28
        diff_lines.append(change["diff"])
29

30
    return "\n".join(diff_lines), data.get("title", "")
31

32
def review_with_gemini(diff_text, mr_title):
33
    """调用 Gemini API 做代码审查"""
34
    prompt = f"""你是一个资深代码审查专家。请审查以下 Merge Request 的代码变更。
35

36
MR 标题: {mr_title}
37

38
Diff 内容:
39
{diff_text}
40

41
请按以下 JSON 格式返回审查结果:
42
{{
43
  "summary": "总体评价（一句话）",
44
  "issues": [
45
    {{
46
      "severity": "critical|major|minor|suggestion",
47
      "file": "文件名（如果有具体文件）",
48
      "line": "行号（如果有）",
49
      "description": "问题描述",
50
      "suggestion": "修复建议"
51
    }}
52
  ],
53
  "overall_rating": "approve|request_changes|comment"
54
}}
55

56
要求:
57
- critical: 安全漏洞、严重 bug、数据丢失风险
58
- major: 逻辑错误、性能问题、潜在崩溃
59
- minor: 代码风格、命名不规范、缺少注释
60
- suggestion: 优化建议、最佳实践
61
- 如果没有问题，issues 数组为空
62
- 只返回 JSON，不要其他内容
63
"""
64

65
    response = client.models.generate_content(
66
        model="gemini-2.5-flash",
67
        contents=prompt,
68
        config={
69
            "response_mime_type": "application/json",
70
            "temperature": 0.2,
71
        },
72
    )
73

74
    result = json.loads(response.text)
75
    return result
76

77
def post_review_comment(review_result):
78
    """将审查结果发布到 MR 评论"""
79
    url = f"{GITLAB_URL}/api/v4/projects/{PROJECT_ID}/merge_requests/{MR_IID}/discussions"
80
    headers = {"PRIVATE-TOKEN": GITLAB_TOKEN}
81

82
    # 组装评论文本
83
    severity_emoji = {
84
        "critical": "🔴",
85
        "major": "🟠",
86
        "minor": "🟡",
87
        "suggestion": "💡",
88
    }
89

90
    lines = [f"**[AI Review] 代码审查报告**\n"]
91
    lines.append(f"**总结**: {review_result['summary']}\n")
92
    lines.append(f"**结论**: {review_result['overall_rating']}\n")
93

94
    if review_result["issues"]:
95
        lines.append("\n### 发现的问题\n")
96
        for issue in review_result["issues"]:
97
            emoji = severity_emoji.get(issue["severity"], "❓")
98
            file_info = f" (`{issue.get('file', '')}`"
99
            if issue.get("line"):
100
                file_info += f":L{issue['line']}"
101
            file_info += ")" if issue.get("file") else ""
102
            lines.append(
103
                f"- {emoji} **{issue['severity'].upper()}**{file_info}\n"
104
                f"  - {issue['description']}\n"
105
                f"  - 💡 {issue['suggestion']}\n"
106
            )
107
    else:
108
        lines.append("\n未发现明显问题，LGTM!")
109

110
    body = "\n".join(lines)
111
    data = {"body": body}
112

113
    resp = requests.post(url, headers=headers, json=data)
114
    resp.raise_for_status()
115
    print("审查结果已发布到 MR 评论")
116
    return resp.json()
117

118
if __name__ == "__main__":
119
    diff_text, mr_title = get_mr_diff()
120
    print(f"获取到 MR #{MR_IID} 的 diff ({len(diff_text)} 字符)")
121

122
    review_result = review_with_gemini(diff_text, mr_title)
123
    print(f"审查完成: {review_result['summary']}")
124

125
    post_review_comment(review_result)
126
    print("Done!")

1
stages:
2
  - review
3
  - fix
4

5
variables:
6
  GITLAB_URL: "https://gitlab.com"
7

8
# 只在 MR 事件触发
9
workflow:
10
  rules:
11
    - if: $CI_PIPELINE_SOURCE == "merge_request_event"
12

13
# Stage 1: AI Review
14
ai-review:
15
  stage: review
16
  image: python:3.11-slim
17
  script:
18
    - pip install google-genai requests
19
    - python review.py
20
  variables:
21
    PROJECT_ID: $CI_PROJECT_ID
22
    MR_IID: $CI_MERGE_REQUEST_IID
23
  allow_failure: true
24
  tags:
25
    - auto-review
26

27
# Stage 2: Auto Fix (在 review 完成后触发)
28
auto-fix:
29
  stage: fix
30
  image: ubuntu:latest
31
  script:
32
    - apt update && apt install -y git curl jq
33
    - chmod +x fix.sh
34
    - ./fix.sh $CI_PROJECT_ID $CI_MERGE_REQUEST_IID
35
  variables:
36
    GITLAB_PRIVATE_TOKEN: $GITLAB_TOKEN
37
    MR_SOURCE_BRANCH: $CI_MERGE_REQUEST_SOURCE_BRANCH_NAME
38
    PROJECT_PATH: $CI_PROJECT_PATH
39
  allow_failure: true
40
  tags:
41
    - auto-review
42
  needs:
43
    - job: ai-review
44
  rules:
45
    - if: $CI_MERGE_REQUEST_IID