feat: add automated PR reviewer

2026-07-08 10:15:27 -05:00
parent f1a9be19f6
commit 88ecc18650
2 changed files with 138 additions and 0 deletions
@@ -0,0 +1,73 @@
+name: PR Reviewer
+
+on:
+  pull_request_target:
+    branches: [dev]
+    types: [opened, reopened, synchronize, ready_for_review]
+
+permissions:
+  contents: read
+  pull-requests: write
+
+concurrency:
+  group: pr-reviewer-${{ github.event.pull_request.number }}
+  cancel-in-progress: true
+
+jobs:
+  review:
+    if: github.repository == 'anomalyco/models.dev' && !github.event.pull_request.draft
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout trusted base revision
+        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5
+        with:
+          ref: ${{ github.event.pull_request.base.sha }}
+          persist-credentials: false
+
+      - name: Install opencode
+        run: curl -fsSL https://opencode.ai/install | bash
+
+      - name: Prepare pull request context
+        env:
+          GH_TOKEN: ${{ github.token }}
+          PR_NUMBER: ${{ github.event.pull_request.number }}
+        run: |
+          set -euo pipefail
+          mkdir .pr-review
+
+          jq '{
+            number: .pull_request.number,
+            title: .pull_request.title,
+            body: .pull_request.body,
+            author: .pull_request.user.login,
+            base: .pull_request.base.ref,
+            head: .pull_request.head.ref
+          }' "$GITHUB_EVENT_PATH" > .pr-review/pull-request.json
+
+          gh pr diff "$PR_NUMBER" --repo "$GITHUB_REPOSITORY" --patch --color never > .pr-review/diff.patch
+
+      - name: Run pull request reviewer
+        env:
+          OPENCODE_API_KEY: ${{ secrets.OPENCODE_API_KEY }}
+          OPENCODE_PERMISSION: '{"*":"deny","read":"allow","glob":"allow","grep":"allow","external_directory":"deny"}'
+        run: |
+          set -euo pipefail
+          EVENTS_FILE="$RUNNER_TEMP/pr-reviewer-events.jsonl"
+          RESPONSE_FILE="$RUNNER_TEMP/pr-reviewer-response.md"
+          echo "RESPONSE_FILE=$RESPONSE_FILE" >> "$GITHUB_ENV"
+
+          opencode run --agent pr-reviewer -m opencode/glm-5.2 --format json <<'EOF' | tee "$EVENTS_FILE"
+          Review this pull request using the trusted reviewer instructions. Start with `.pr-review/pull-request.json`, `.pr-review/diff.patch`, `AGENTS.md`, and the contributing guidance in `README.md`. Read `sync.md`, the reasoning-options audit guide, schema code, and nearby base-revision files when relevant to the changed files. Use only the read, glob, and grep tools. Return only the final review comment.
+          EOF
+
+          if ! jq -ers 'map(select(.type == "text") | .part.text) | last | select(length > 0)' "$EVENTS_FILE" > "$RESPONSE_FILE"; then
+            echo "Pull request reviewer did not produce a final response." >&2
+            exit 1
+          fi
+
+      - name: Post review comment
+        env:
+          GH_TOKEN: ${{ github.token }}
+          PR_NUMBER: ${{ github.event.pull_request.number }}
+        run: gh pr comment "$PR_NUMBER" --repo "$GITHUB_REPOSITORY" --body-file "$RESPONSE_FILE"