Claude Code 非交互（Headless）模式：在脚本和 CI/CD 中自动化 AI 编程

# 基本用法
claude -p "your prompt here"

# 从标准输入读取提示词
echo "analyze this code" | claude -p -

# 读取文件内容作为输入
claude -p "review this" < myfile.ts

#!/bin/bash
# 审查最近的 git 变更
git diff HEAD~1 | claude -p "Review these changes for security vulnerabilities and code quality issues. Be concise."

#!/bin/bash
# 基于 diff 生成 Conventional Commit 格式的提交信息
COMMIT_MSG=$(git diff --staged | claude -p "
Generate a git commit message for these staged changes.
Follow Conventional Commits format: <type>(<scope>): <description>
Types: feat, fix, docs, style, refactor, test, chore
Be concise, no more than 72 characters for the first line.
Output ONLY the commit message, nothing else.
")
echo "Suggested commit message: $COMMIT_MSG"
read -p "Use this message? [y/N] " confirm
if [[ "$confirm" == [yY] ]]; then
  git commit -m "$COMMIT_MSG"
fi

#!/bin/bash
# 为所有缺少 JSDoc 的函数生成文档
for file in src/**/*.ts; do
  echo "Processing $file..."
  claude -p "Add JSDoc comments to any exported functions in this file that are missing documentation. Only output the modified file content." < "$file" > "$file.new"
  mv "$file.new" "$file"
done
echo "Documentation generation complete!"

name: AI Code Review
on:
  pull_request:
    types: [opened, synchronize]

jobs:
  review:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
        with:
          fetch-depth: 0
      
      - name: Install Claude Code
        run: curl -fsSL https://claude.ai/install.sh | bash
      
      - name: Review PR Changes
        env:
          ANTHROPIC_API_KEY: ${{ secrets.ANTHROPIC_API_KEY }}
        run: |
          git diff origin/main...HEAD | claude -p "
          Review these PR changes. Check for:
          1. Security vulnerabilities
          2. Performance issues  
          3. Missing error handling
          4. Breaking changes
          Format as a concise list. Use ✅ for looks good, ⚠️ for suggestions, ❌ for issues.
          " > review.txt
          cat review.txt
      
      - name: Post Review Comment
        uses: actions/github-script@v7
        with:
          script: |
            const fs = require('fs');
            const review = fs.readFileSync('review.txt', 'utf8');
            github.rest.issues.createComment({
              issue_number: context.issue.number,
              owner: context.repo.owner,
              repo: context.repo.repo,
              body: `## 🤖 AI Code Review\n\n${review}`
            });

#!/bin/bash
# 分析错误日志并生成摘要报告
tail -n 1000 /var/log/app/error.log | claude -p "
Analyze these error logs and provide:
1. Top 5 most frequent errors (with count)
2. Critical issues requiring immediate attention
3. Suggested fixes for the most common issue
Format as markdown.
" > error_report.md

echo "Error report generated: error_report.md"

# 以只读 Plan Mode 分析代码
claude --permission-mode plan -p "Analyze the authentication system for potential security improvements. Do not make any changes."

# 获取 JSON 格式的分析结果，方便脚本处理
RESULT=$(claude -p "Analyze the package.json and return a JSON object with keys: hasTests, hasCI, hasDependencyLock, securityIssues (array)" \
  --output-format json < package.json)

echo "$RESULT" | jq '.securityIssues[]'

# Plan Mode（只读，安全）- 适合 CI 代码审查
claude --permission-mode plan -p "Analyze this PR for issues"

# acceptEdits（自动接受文件修改）- 适合自动化代码生成
claude --permission-mode acceptEdits -p "Add JSDoc to all functions"

# bypassPermissions（跳过所有确认）- 仅在完全受控环境使用！
claude --permission-mode bypassPermissions -p "Refactor the auth module"

# 只允许读取工具（最安全）
claude --permission-mode plan \
  --allowedTools "Read,Bash(git log *),Bash(git diff *)" \
  -p "Review the last 5 commits for any security concerns"

# 禁止网络访问
claude --disallowedTools "Bash(curl *),Bash(wget *),mcp__*" \
  -p "Refactor the user service"

# 防止无限循环
claude --max-turns 10 -p "Fix the failing tests in src/auth/"

# 处理大文件：分块处理
for i in $(seq 1 10 100); do
  sed -n "${i},$((i+9))p" large-file.ts | \
    claude -p "Add TypeScript types to these function signatures"
done

# 或使用 --add-dir 访问整个目录
claude --add-dir /path/to/extra/context \
  -p "Analyze the codebase with access to the additional context"