Skip to content

code-reviewer

v3.0.0

Multi-agent PR review with a per-repo policy layer

Runs five reviewers in parallel on a PR: correctness, tests, security, ops, and simplicity (ponytail and /simplify rules). If the repo has a local review policy, a sixth reviewer cites the repo's own red-flags, pitfalls, and hotspots. Includes refresh-policy, which learns that policy from merged git and PR history. After the report, it builds a local review page that you read step by step: architecture diagrams before and after the PR, then each finding with the real code as evidence. You choose a call for each finding and paste the reply into the chat. Claude posts the GitHub review after your approval.

Install

claude plugin install code-reviewer@21-breakincode

Commands

  • /code-reviewer:review-pr Multi-agent PR review with an interactive review page: five common reviewers plus an optional repo-specific policy layer

Configuration

Variable Default Description
CODE_REVIEWER_POLICY_DIR — Repo review-policy dir. A relative value resolves against the main clone root. Unset means the policy layer is off.

Changelog

3.0.0 2026-11-11

  • feat Breaking: the review page is a local file built with answer-me-with-html. lib/am.mjs (v0.5.11, MIT) is bundled with its license in lib/am.LICENSE. /code-reviewer:review-pr now needs Node.js 20 or newer.
  • feat the page reads from top to bottom: an overview, an architecture diagram before the PR and after it, one panel per finding, then the verdict.
  • feat the page builder agent draws the before and after diagrams as class or flow diagrams. The after diagram marks the changed parts. Each diagram lists the refs that it is drawn from, and the builder checks each ref against git.
  • feat new ref suffix @base reads the merge base, the commit where the PR branch starts.
  • feat Breaking: you answer the questions on the page, press Reply, and paste the reply into the chat. The page is no longer published, has no db, and is not deleted.
  • refactor lib/build-review-page.py writes an am draft from git evidence and renders it. templates/review-page.html is removed.
  • test the page builder test renders the fixture with the real am CLI.

2.1.0 2026-10-20

  • feat /code-reviewer:review-pr publishes an interactive review page after the report. For each finding, you choose a call, a fix, and an optional note. The page saves your choices in its own db.
  • feat you tell Claude that you are done. Claude then reads your choices, drafts the GitHub review, and posts it with gh after your approval. Then Claude deletes the page once, and Claude Code shows you a delete prompt. If the delete is refused, Claude gives you the page URL and the manual steps.
  • feat every run is a new review with a new page and empty choices. The command never reuses an older page or its db.
  • feat new review-page-builder agent, lib/build-review-page.py, and templates/review-page.html. The evidence on the page comes from git at the PR head: code lines, diff hunks, and git grep output. Nothing is typed by hand.
  • feat new lib/check-base-drift.sh test-merges the PR head into the latest base. Conflicts become a finding. The correctness reviewer searches the test merge for new base code that still uses an API that the PR removes.
  • feat each finding carries Ref: evidence refs. The orchestrator writes them to findings.json with stable ids, and it also writes pr.json, drift.json, and report.md.
  • feat a gh account fallback. If the active account cannot see the repo, each gh call gets GH_TOKEN for an account that can. The plugin never runs gh auth switch.
  • test tests for the base drift check and the page builder.

2.0.0 2026-09-27

  • feat Breaking: five owned reviewer agents (correctness, test, security, ops, simplicity) replace the pr-review-toolkit agents and the orchestrator's inline perspectives. The pr-review-toolkit dependency is removed.
  • feat Breaking: the repo policy is found only through CODE_REVIEWER_POLICY_DIR. The env vars CODE_REVIEWER_PRINCIPLE_DIR, CODE_REVIEWER_CONFIG_FILE, and CODE_REVIEWER_CACHE_FILE are removed. The plugin no longer reads the files in ~/.claude/code-reviewer/.
  • feat Breaking: the skill refresh-principles is renamed to refresh-policy. It keeps only repo-specific concepts.
  • feat the orchestrator passes the diff by file path, and reviewers read code at the PR head SHA.
  • feat policy severity is set by rule. The report adds Scrutiny, agent counts, and policy coverage lines.
  • refactor "principle" is renamed to "policy" in libs, agents, skill, and tests.
  • chore remove the one-time migrate-to-okf.py script and its test.

1.1.1 2026-09-19

  • fix rewrite prose across plugin files to clear the simple-english linter. No content or meaning changed, only sentence shape.

1.1.0 2026-08-09

  • feat QA fixture representativeness check. Flags synthetic test inputs asserting on diversity-sensitive behavior.
  • feat QA verdict → blast radius gate. Flags structural decisions lacking production-shaped test evidence.
  • feat mine-git-signals revert chain detection (misdiagnosis signal)
  • feat refresh-principles misdiagnosis sequence mining (Pitfall capture)

1.0.0 2026-08-07

  • feat migrate to OKF v0.2 concept format
  • feat reader walks OKF concept bundle, skips deprecated, flags stale
  • feat principle-reviewer cites OKF concept paths + trust/stale weighting
  • feat deterministic old→OKF bundle migration transform
  • docs refresh-principles writes OKF concepts, stamps verified on approval
  • fix seed OKF skeleton on bootstrap. Emit concept path in reader header.
  • fix compute caused_change from comment outdated-ness
  • fix exclude generated/vendored files from churn hotspots
  • fix quote YAML-hostile concept titles, capture wrapped What/Why lines
  • test OKF concept conformance check replaces evidence-line check

0.3.0 2026-08-07

  • feat add learn-state watermark lib + test helper
  • feat add git-signal miner (reverts/hotfixes/churn)
  • feat add PR-signal miner with comment→change correlation
  • feat add diff-coverage guard (coverage + finding validation)
  • feat add refresh-principles producer skill + format reference
  • feat wire deterministic coverage guards into orchestrator
  • fix handle omitted counts in learn-state write

0.2.0 2026-06-03

  • feat configurable principle-directory roots

0.1.0 2026-06-01

  • feat initial release. Principle-aware PR review plugin.
↑↓ navigate ↵ open esc close