用 AI Agent 重塑软件交付：Endava 的实战路径

#!/usr/bin/env python3
"""
code_review_agent.py — 最小代码审查 Agent
依赖: pip install openai
运行前设置: export OPENAI_API_KEY="sk-..."
用法: python code_review_agent.py <git_diff_file>
"""

import sys
import json
from openai import OpenAI

REVIEW_PROMPT = """你是一个代码审查 Agent。请对以下 git diff 进行审查，输出 JSON 格式的结果。

审查维度:
- 安全性问题（硬编码密钥、SQL 注入风险等）
- 逻辑错误（边界条件、类型不匹配等）
- 可维护性（命名、重复代码、过长函数等）
- 性能（不必要的循环、N+1 查询等）

输出格式（严格 JSON）:
{
  "summary": "一句话总结",
  "issues": [
    {
      "severity": "high|medium|low",
      "category": "security|logic|maintainability|performance",
      "file": "文件路径",
      "line": "行号或行号范围",
      "description": "问题描述",
      "suggestion": "修复建议，给出具体代码片段"
    }
  ],
  "approved": true或false（是否有 high 级别问题则不批准）
}

git diff:
{diff_content}
"""

def review_diff(diff_path: str) -> dict:
    client = OpenAI()  # 自动读取 OPENAI_API_KEY 环境变量

    with open(diff_path, "r", encoding="utf-8") as f:
        diff_content = f.read()

    # 限制 diff 大小，避免超出 token 额度
    if len(diff_content) > 15000:
        diff_content = diff_content[:15000] + "\n... (diff 截断，共 {} 字符)".format(len(diff_content))

    response = client.chat.completions.create(
        model="gpt-4o",
        messages=[
            {"role": "system", "content": "你只输出合法 JSON，不输出任何其他文本。"},
            {"role": "user", "content": REVIEW_PROMPT.format(diff_content=diff_content)},
        ],
        temperature=0.2,  # 低温度保证输出稳定
        response_format={"type": "json_object"},
    )

    result = json.loads(response.choices[0].message.content)
    return result


def main():
    if len(sys.argv) < 2:
        print("用法: python code_review_agent.py <git_diff_file>")
        print("生成 diff: git diff HEAD~1 > diff.txt")
        sys.exit(1)

    diff_path = sys.argv[1]
    result = review_diff(diff_path)

    # 输出审查结果
    print(json.dumps(result, indent=2, ensure_ascii=False))

    if not result.get("approved", False):
        print("\n⚠️  审查未通过，存在 high 级别问题，请修复后再提交。")
        sys.exit(1)
    else:
        print("\n✅ 审查通过，可以进入人工复核环节。")


if __name__ == "__main__":
    main()

# 1. 安装依赖
pip install openai

# 2. 设置 API Key（ChatGPT Enterprise 用户使用组织级 Key）
export OPENAI_API_KEY="sk-..."

# 3. 生成最近的代码变更 diff
git diff HEAD~1 > my_diff.txt

# 4. 运行审查 Agent
python code_review_agent.py my_diff.txt

# .github/workflows/ai-code-review.yml
name: AI Code Review

on:
  pull_request:
    types: [opened, synchronize]

jobs:
  review:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
        with:
          fetch-depth: 2  # 需要 HEAD~1 的内容

      - name: Install dependencies
        run: pip install openai

      - name: Generate diff
        run: git diff HEAD~1 > diff.txt

      - name: Run review agent
        env:
          OPENAI_API_KEY: ${{ secrets.OPENAI_API_KEY }}
        run: python code_review_agent.py diff.txt > review_result.json

      - name: Post review comment
        if: always()
        uses: actions/github-script@v7
        with:
          script: |
            const fs = require('fs');
            const result = JSON.parse(fs.readFileSync('review_result.json', 'utf8'));
            const body = `## AI 审查结果\n${result.summary}\n\n` +
              result.issues.map(i =>
                `- **[${i.severity}]** ${i.category}: ${i.description} (${i.file}:${i.line})\n  > 建议: ${i.suggestion}`
              ).join('\n');
            github.rest.issues.createComment({
              owner: context.repo.owner,
              repo: context.repo.repo,
              issue_number: context.issue.number,
              body: body
            });

      - name: Check approval
        run: |
          approved=$(jq '.approved' review_result.json)
          if [ "$approved" = "false" ]; then
            echo "::error::AI 审查未通过，存在高风险问题"
            exit 1
          fi