用 Claude Code 在每个 pull request 上自动检查 App Store 和 Google Play 上架就绪情况

# .github/workflows/store-readiness.yml
name: Store readiness

on:
  pull_request:
    types: [opened, synchronize, ready_for_review, reopened]
    paths:
      - "src/**"
      - "app/**"
      - "public/**"
      - "native/**"
      - "CLAUDE.md"

concurrency:
  group: store-readiness-${{ github.event.pull_request.number }}
  cancel-in-progress: true

jobs:
  review:
    if: github.event.pull_request.draft == false
    runs-on: ubuntu-latest
    timeout-minutes: 20
    permissions:
      contents: read
      pull-requests: write
      issues: read
      id-token: write
    steps:
      - uses: actions/checkout@v6
        with:
          fetch-depth: 1

      - uses: anthropics/claude-code-action@v1
        with:
          anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
          prompt: |
            REPO: ${{ github.repository }}
            PR NUMBER: ${{ github.event.pull_request.number }}

            This web app is also published as iOS and Android apps built with
            WebViewGold. The apps load our production URL in a native WebView, so
            every merged change is live in the store apps after the next deploy.
            CLAUDE.md describes the native context and the store rules we follow.

            Review only the changes in this pull request (gh pr diff) for App Store
            and Google Play risks:
            - digital goods, subscriptions, prices or external payment links that
              are visible when isNativeApp() is true (Apple 3.1.1, Google Play billing)
            - removed or broken /privacy, /terms, /delete-account or the in-app
              Delete account action (Apple 5.1.1, Google Play account deletion)
            - a new third-party login without Sign in with Apple (Apple 4.8)
            - placeholder content, "coming soon", dead links, beta labels (Apple 2.1, 2.3)
            - new data collection, SDKs or tracking the privacy policy does not
              cover (Apple 5.1.1 and 5.1.2, Google Play Data safety)
            - fixed bars without safe-area padding, tap targets under 44 px (Apple 4.0)
            - user-generated content without report and block (Apple 1.2)
            - under native/: URLs other than the production domain in Config.swift
              or Config.java, new permissions, version and build numbers

            Post exactly one comment with gh pr comment: a verdict line, then a table
            with severity (blocker, risk, polish), rule, file:line and fix. If nothing
            in the diff is store-relevant, post one line saying so. Skip general code
            review feedback; another check handles that.
          claude_args: |
            --max-turns 25
            --allowedTools "Read,Grep,Glob,Bash(gh pr diff *),Bash(gh pr view *),Bash(gh pr comment *)"

  # Second job in the same workflow file
  gate:
    if: github.event.pull_request.draft == false
    runs-on: ubuntu-latest
    timeout-minutes: 15
    permissions:
      contents: read
      pull-requests: read
    steps:
      - uses: actions/checkout@v6
        with:
          fetch-depth: 0

      - name: Install Claude Code
        run: |
          curl -fsSL https://claude.ai/install.sh | bash
          echo "$HOME/.local/bin" >> "$GITHUB_PATH"

      - name: Store-readiness gate
        env:
          ANTHROPIC_API_KEY: ${{ secrets.ANTHROPIC_API_KEY }}
          GH_TOKEN: ${{ github.token }}
          PR: ${{ github.event.pull_request.number }}
          BASE_REF: ${{ github.base_ref }}
        run: |
          # Human override: add the label, then re-run this job
          if gh pr view "$PR" --json labels --jq '.labels[].name' | grep -qx 'store-review-ok'; then
            echo "Label store-review-ok is set, skipping the gate."
            exit 0
          fi

          git diff "origin/$BASE_REF...HEAD" | claude -p \
            "The input is the diff of a pull request. This web app is also published as iOS and Android apps with WebViewGold, which load the production URL. Using the store rules in CLAUDE.md, report every change in this diff that would likely get the iOS or Android app rejected or removed. Only report findings you can tie to a file and line of the diff. Use severity blocker only for a likely rejection." \
            --permission-mode dontAsk \
            --allowedTools "Read,Grep,Glob" \
            --max-turns 15 \
            --output-format json \
            --json-schema "$(cat .github/store-gate-schema.json)" > result.json

          if ! jq -e '.structured_output' result.json > /dev/null; then
            echo "::warning::The store gate returned no structured result; see the log."
            exit 0
          fi
          jq '.structured_output' result.json
          blockers=$(jq '[.structured_output.findings[] | select(.severity == "blocker")] | length' result.json)
          if [ "$blockers" -gt 0 ]; then
            echo "::error::$blockers store-review blocker(s). Fix them or add the store-review-ok label."
            exit 1
          fi

{
  "type": "object",
  "properties": {
    "verdict": { "type": "string", "enum": ["pass", "risks", "blockers"] },
    "findings": {
      "type": "array",
      "items": {
        "type": "object",
        "properties": {
          "severity": { "type": "string", "enum": ["blocker", "risk", "polish"] },
          "rule": { "type": "string" },
          "file": { "type": "string" },
          "line": { "type": "integer" },
          "fix": { "type": "string" }
        },
        "required": ["severity", "rule", "file", "fix"]
      }
    }
  },
  "required": ["verdict", "findings"]
}