FROM ghcr.io/puppeteer/puppeteer:24

USER root
WORKDIR /root
RUN npm install -g @anthropic-ai/claude-code md-to-pdf

module.exports = {
stylesheet: [
    'https://cdnjs.cloudflare.com/ajax/libs/github-markdown-css/5.5.1/github-markdown.min.css'
],
highlight_style: 'atom-one-light',
body_class: 'markdown-body',

marked_options: {
    headerIds: true,
    smartypants: true,
    gfm: true,
    breaks: false,
},

pdf_options: {
    format: 'A4',
    margin: {
    top: '20mm',
    right: '20mm',
    bottom: '25mm',
    left: '20mm'
    },
    printBackground: true,
    displayHeaderFooter: true,
    headerTemplate: '<div></div>',
    footerTemplate: `
    <div style="font-size: 10px; width: 100%; text-align: center; color: #888;">
        <span class="pageNumber"></span> / <span class="totalPages"></span>
    </div>
    `,
},

launch_options: {
    args: [
        "--no-sandbox",
        "--disable-setuid-sandbox"
    ]
},

css: `
    pre,
    pre code,
    pre code.hljs,
    code,
    .hljs {
        white-space: pre-wrap !important;
        word-wrap: break-word !important;
        word-break: break-all !important;
        overflow-wrap: break-word !important;
    }

    pre {
        max-width: 100% !important;
        overflow-x: visible !important;
        padding: 12px;
        border-radius: 8px;
        font-size: 12px;
        line-height: 1;
        background-color: #f6f8fa !important;
        page-break-inside: avoid;
    }

    pre > code {
        display: block !important;
        max-width: 100% !important;
        overflow: visible !important;
    }

    code {
        font-family: 'Cascadia Code', 'JetBrains Mono', 'Fira Code', monospace;
    }

    @media print {
    pre, pre code, .hljs {
        white-space: pre-wrap !important;
        word-break: break-all !important;
        overflow: visible !important;
    }
    }

    .markdown-body {
        font-size: 12px;
        max-width: 100% !important;
        overflow: hidden;
    }
`
};

stages:
  - code-review
  - build-assets
  - build-docker-image
  - deploy

claude-code-review:
  image: registry.example.com/infrastructure/claude-code:v0.0.1
  tags:
    - us-proxy  # Runner with transparent proxy configured
  stage: code-review
  variables:
    GIT_DEPTH: 100
  script:
    - git fetch --depth=20 origin main:main
    - |
      claude \
      --model opus \
      --permission-mode acceptEdits \
      --allowedTools "Bash(*) Read(*) Edit(*) Write(*)" \
      -p "$(cat << EOF
      Perform a code review on all commits from main to ${CI_COMMIT_BRANCH}.

      Requirements:
      1. Write the report in Chinese to ${CI_PIPELINE_ID}_review.md, do not modify other files
      2. Analyze issues that still exist in the current code state
      3. For each issue, include the following:
         - File path and line number (based on the current code state)
         - Code snippet (using markdown code blocks)
         - Issue analysis: explain why this is a problem
         - Fix suggestion: provide a specific fix or code example
      4. Categorize by severity: Critical, High, Medium, Low
      5. Do not use emoji
      6. Use markdown list format (avoid markdown tables)
      7. If no issues are found, simply state that the code quality is good

      Focus on:
      - Potential bugs and logic errors
      - Security vulnerabilities
      - Performance issues
      - Leftover debug code
      - Type errors or type-unsafe code

      Analysis strategy:
      1. Analyze all commits in chronological order (oldest to newest)
      2. For each issue found in a commit, check whether subsequent commits have fixed it
      3. If an issue has been fixed by a later commit, do not include it in the final report
      4. Only report issues that still exist in the current code state

      Criteria for considering an issue fixed:
      - The problematic code was deleted or rewritten in a subsequent commit
      - A subsequent commit explicitly addressed the issue (e.g., fixed a bug, added missing validation)
      - The code logic at the same location was optimized or improved in a subsequent commit
      EOF
      )"
    - md2pdf --config-file ${MD_TO_PDF_CONFIG_FILE} ${CI_PIPELINE_ID}_review.md
    - |
      echo \
      "markdown: ${CI_SERVER_URL}/${CI_PROJECT_PATH}/-/jobs/${CI_JOB_ID}/artifacts/raw/${CI_PIPELINE_ID}_review.md"
    - |
      echo \
      "pdf: ${CI_SERVER_URL}/${CI_PROJECT_PATH}/-/jobs/${CI_JOB_ID}/artifacts/file/${CI_PIPELINE_ID}_review.pdf"
  artifacts:
    paths:
      - "*_review.md"
      - "*_review.pdf"
    when: always
  rules:
    - if: '$CI_COMMIT_BRANCH != "main"'

# Subsequent build and deploy stages omitted