name: Claude Code on Issue

on:
  issues:
    types: [labeled]
  issue_comment:
    types: [created]

jobs:
  claude-work:
    # リポジトリオーナーのみ実行可能
    if: >-
      (
        github.event_name == 'issues' &&
        contains(github.event.issue.labels.*.name, 'claude') &&
        github.event.issue.user.login == github.repository_owner
      ) || (
        github.event_name == 'issue_comment' &&
        github.event.comment.user.login == github.repository_owner &&
        (startsWith(github.event.comment.body, '/claude') || startsWith(github.event.comment.body, '/approve'))
      )
    runs-on: self-hosted
    permissions:
      contents: write
      issues: write
      pull-requests: write

    steps:
      - uses: actions/checkout@v4

      - name: Detect user home
        id: env
        run: |
          echo "home=$(eval echo ~$(whoami))" >> "$GITHUB_OUTPUT"

      - name: Determine mode
        id: mode
        uses: actions/github-script@v7
        with:
          script: |
            const event = context.eventName;
            let mode = 'investigate';

            if (event === 'issue_comment') {
              const body = context.payload.comment.body.trim();

              if (body.startsWith('/approve')) {
                const labels = context.payload.issue.labels.map(l => l.name);
                if (!labels.includes('承認待ち')) {
                  core.setFailed('承認待ちラベルがありません。先に /claude で調査を実行してください。');
                  return;
                }
                mode = 'execute';
              } else if (body.startsWith('/claude')) {
                const args = body.replace('/claude', '').trim();
                if (args === '--execute') {
                  mode = 'execute';
                } else {
                  mode = 'investigate';
                }
              }
            } else {
              mode = 'investigate';
            }

            core.setOutput('mode', mode);
            console.log(`Mode: ${mode}`);

      - name: Build prompt
        id: prompt
        uses: actions/github-script@v7
        with:
          script: |
            const issue = context.payload.issue;
            const mode = '${{ steps.mode.outputs.mode }}';
            let prompt = `GitHub Issue #${issue.number}: ${issue.title}\n\n${issue.body}`;

            if (context.eventName === 'issue_comment') {
              const comment = context.payload.comment.body.trim();
              let instruction = '';

              if (comment.startsWith('/approve')) {
                instruction = comment.replace('/approve', '').trim();
                const comments = await github.rest.issues.listComments({
                  owner: context.repo.owner,
                  repo: context.repo.repo,
                  issue_number: issue.number,
                });
                const planComment = comments.data
                  .reverse()
                  .find(c => c.body.includes('Claude Code 調査結果'));
                if (planComment) {
                  prompt += `\n\n## 承認済み計画\n\n${planComment.body}`;
                }
              } else {
                instruction = comment.replace('/claude', '').replace('--execute', '').trim();
              }

              if (instruction) {
                prompt += `\n\n追加指示: ${instruction}`;
              }
            }

            if (mode === 'investigate') {
              prompt += '\n\n## 指示\n';
              prompt += '読み取り専用モードです。コードの調査と分析のみ行ってください。\n';
              prompt += '以下を出力してください:\n';
              prompt += '1. 問題の分析結果\n';
              prompt += '2. 変更が必要なファイルの一覧\n';
              prompt += '3. 実行予定の変更内容\n';
              prompt += '4. 作成予定の PR の概要\n';
            } else {
              prompt += '\n\n## 指示\n';
              prompt += '書き込み許可モードです。計画に基づきファイル変更・コミット・PR 作成を実行してください。\n';
              prompt += '作業が完了したら結果のサマリを出力してください。\n';
            }

            const fs = require('fs');
            fs.writeFileSync('/tmp/claude-prompt.txt', prompt);

      - name: Run Claude Code
        env:
          CLAUDE_CODE_OAUTH_TOKEN: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
          HOME: ${{ steps.env.outputs.home }}
          PATH: ${{ steps.env.outputs.home }}/.local/bin:/opt/homebrew/bin:/usr/local/bin:/usr/bin:/bin
        run: |
          MODE="${{ steps.mode.outputs.mode }}"

          if [ "$MODE" = "investigate" ]; then
            TOOLS="Read,Glob,Grep"
          else
            TOOLS="Bash,Read,Write,Edit,Glob,Grep"
          fi

          claude -p "$(cat /tmp/claude-prompt.txt)" \
            --allowedTools "$TOOLS" \
            --output-format json > /tmp/claude-result.json 2>/tmp/claude-stderr.log || {
              echo "Claude Code failed. Stderr:"
              cat /tmp/claude-stderr.log 2>/dev/null
              echo "Stdout:"
              cat /tmp/claude-result.json 2>/dev/null || echo "(no output file)"
              exit 1
            }

      - name: Post result to issue
        uses: actions/github-script@v7
        with:
          script: |
            const fs = require('fs');
            const mode = '${{ steps.mode.outputs.mode }}';
            const raw = fs.readFileSync('/tmp/claude-result.json', 'utf8');
            const result = JSON.parse(raw);
            const body = result.result || result.text || JSON.stringify(result, null, 2);

            const header = mode === 'investigate'
              ? '## Claude Code 調査結果'
              : '## Claude Code 実行結果';
            const footer = '---\n🤖 自動実行 by Claude Code (self-hosted runner)';

            await github.rest.issues.createComment({
              owner: context.repo.owner,
              repo: context.repo.repo,
              issue_number: context.payload.issue.number,
              body: `${header}\n\n${body}\n\n${footer}`
            });

            if (mode === 'investigate') {
              try {
                await github.rest.issues.addLabels({
                  owner: context.repo.owner,
                  repo: context.repo.repo,
                  issue_number: context.payload.issue.number,
                  labels: ['承認待ち']
                });
              } catch (e) {
                console.log(`ラベル付与エラー: ${e.message}`);
              }
            }

            if (mode === 'execute') {
              try {
                await github.rest.issues.removeLabel({
                  owner: context.repo.owner,
                  repo: context.repo.repo,
                  issue_number: context.payload.issue.number,
                  name: '承認待ち'
                });
              } catch (e) {
                console.log(`ラベル除去エラー: ${e.message}`);
              }
            }

name: Claude Code Health Check

on:
  schedule:
    - cron: '0 9 1 * *'  # 毎月1日 9:00 UTC

jobs:
  check:
    runs-on: self-hosted
    steps:
      - name: Detect user home
        id: env
        run: echo "home=$(eval echo ~$(whoami))" >> "$GITHUB_OUTPUT"

      - name: Check Claude Code auth
        env:
          CLAUDE_CODE_OAUTH_TOKEN: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
          HOME: ${{ steps.env.outputs.home }}
          PATH: ${{ steps.env.outputs.home }}/.local/bin:/opt/homebrew/bin:/usr/local/bin:/usr/bin:/bin
        run: |
          result=$(claude -p "Reply with only: OK" --output-format json 2>/dev/null)
          if echo "$result" | grep -q '"is_error":true'; then
            echo "::error::Claude Code 認証エラー — CLAUDE_CODE_OAUTH_TOKEN の更新が必要です"
            echo "更新手順: claude setup-token を実行し、gh secret set CLAUDE_CODE_OAUTH_TOKEN で登録"
            exit 1
          fi
          echo "Claude Code 認証OK"