AI 接管 CI :从发现到修复,一个 Flutter 移动端项目的自动巡检实践

on:
  pull_request: { types: [opened, synchronize] }
  schedule:
    - cron: '*/30 * * * *'   # 每 30 分钟

- uses: anthropics/claude-code-action@v1
  with:
    anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
    prompt: 扫描仓库状态，生成今日健康报告，只读不动手。
    claude_args: |
      --max-turns 15
      --model claude-sonnet-4-6
      --allowedTools "Read,Write,Bash(gh run:*),Bash(gh pr:*)"

# CLAUDE.md（app-flutter）## 项目概述
Flutter 应用（iOS/Android），后端为独立 API Server 仓库。
## Agent 行为规范- 自动 PR 标题前缀 [AI-Sweep]；描述含问题分析、修复方案、验证方式
- 不确定时报告而非猜测；每次只修一个问题，做最小修复
## 禁止修改的路径（铁律）- .env* / secrets/ / credentials/ / auth/      # 密钥与认证
- android/app/google-services.json             # Firebase 配置
- ios/Runner/GoogleService-Info.plist / lib/firebase_options*.dart
- migrations/                                  # 数据库迁移，不可逆
- pubspec.yaml / .github/workflows/            # 依赖与护栏自身

github.com/your-org/
├── app-flutter/       # Flutter 前端（iOS / Android）
└── api-server/        # 后端 API

# app-flutter/.github/workflows/flutter-test.yml
name: Flutter CI
on: { pull_request: {}, push: { branches: [main] } }
jobs:
  test:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v6
      - uses: subosito/flutter-action@v2
        with: { flutter-version: '3.x', channel: stable }
      - run: flutter pub get
      - run: dart analyze
      - run: flutter test --coverage
      - run: flutter build apk --debug   # 至少确保能编译

# pubspec.yaml
dev_dependencies:
  flutter_test: { sdk: flutter }
  integration_test: { sdk: flutter }

// integration_test/login_test.dart
import 'package:flutter_test/flutter_test.dart';
import 'package:integration_test/integration_test.dart';
import 'package:your_app/main.dart' as app;

void main() {
  IntegrationTestWidgetsFlutterBinding.ensureInitialized();
  testWidgets('登录流程', (tester) async {
    app.main();
    await tester.pumpAndSettle();
    await tester.enterText(find.byKey(const Key('email_field')), 'test@example.com');
    await tester.tap(find.byKey(const Key('login_button')));
    await tester.pumpAndSettle();
    expect(find.text('Welcome'), findsOneWidget);
  });
}

flutter test integration_test/ -d emulator-5554   # Android（模拟器）
flutter test integration_test/ -d "iPhone 16"     # iOS（模拟器）

# app-flutter/.github/workflows/daily-triage.yml
name: Daily Triage
on:
  schedule: [{ cron: '0 9 * * *' }]
  workflow_dispatch: {}
permissions: { contents: read, issues: write, pull-requests: write }   # 给不了改代码的能力
jobs:
  triage:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v6
      - uses: anthropics/claude-code-action@v1
        with:
          anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
          prompt: |
            扫描 ${{ github.repository }}，生成今日健康报告：
            CI 成功率/红的 workflow；open PR 与超 3 天没动的；新增/无标签 issue；
            flutter analyze 新 warning；curl staging 健康。
            分类输出 🚨 需要行动 / 👀 需要观察 / 🔇 噪音，写到 .loop/state/triage-日期.md
          claude_args: |
            --max-turns 15
            --allowedTools "Read,Write,Bash(gh run:*),Bash(gh issue:*),Bash(gh pr:*),Bash(curl:*)"

.loop/
├── loop.config.json          # 单一事实来源：模型/预算/禁改
├── run.mjs                    # CI Sweeper 主循环
├── e2e-run.mjs                # E2E Sweep 主循环（第四步）
├── orchestrator.mjs           # 截图/日志/健康（第四步）
├── loop/
│   ├── claude.mjs             # 起独立会话
│   ├── budget.mjs             # 运行账本 + 预算熔断
│   ├── fix.mjs                # maker→verifier→PR（两个循环共用）
│   └── issues.mjs             # 去重建 issue（第四步）
├── skills/{sweep-triage,sweep-implementer,sweep-verifier,e2e-explore,e2e-visual-triage}/SKILL.md
└── state/{run-log.jsonl,attempts.json}

// .loop/loop.config.json
{
  "model_mapping": {
    "triage": "claude-haiku-4-5", "maker": "claude-sonnet-4-6",
    "verifier": "claude-opus-4-8", "explorer": "claude-sonnet-4-6"
  },
  "budget": { "daily_token_cap": 1000000, "degrade_at": 0.8, "max_attempts_per_item": 3 },
  "guardrails": { "denylist": ["**/.env*", "**/secrets/**", "**/auth/**", "**/migrations/**"] },
  "api_server": { "staging_url": "https://staging-api.yourapp.com" }
}

# .loop/skills/sweep-triage/SKILL.md
---
name: sweep-triage
description: Triage CI failures into regression/flaky/infra. Output JSON only.
---
读最近 CI 失败，每条三选一：regression / flaky / infra。只输出 JSON，不动代码。
存疑放 watch 或 noise，绝不放 high。
输出：{ "high":[{ "id":"", "title":"", "class":"regression" }], "watch":[], "noise":[] }

# .loop/skills/sweep-implementer/SKILL.md
---
name: sweep-implementer
description: Implement the smallest credible fix for one triaged item.
---
你是制造者，只修给定那一项，做最小可信改动。
绝不碰禁改清单路径（.env/secrets/auth/migrations…），碰到就停下交人。
不塞无关重构。自己跑测试报通过/失败，但你说「通过」不算数，以验证者独立复跑为准。

# .loop/skills/sweep-verifier/SKILL.md
---
name: sweep-verifier
description: Independent checker. Default REJECT until proven. Run tests yourself.
---
你是独立验证者，独立会话。Default stance: REJECT until proven otherwise.
五项全过才 APPROVE：
1 Scope：只动相关文件，没碰禁改路径  2 Intent：真解决，非绕过  3 Tests：你亲自跑了，附输出
4 No cheating：没禁用测试/跳断言/降门槛  5 Risk：中风险以上即使过也建议人审
只输出 { "decision": "APPROVE|REJECT|ESCALATE_HUMAN", "evidence": "" }
跑不了测试或无法判定 → ESCALATE_HUMAN，绝不「不确定就放行」。

// .loop/loop/claude.mjs：起独立 headless 会话，model 按角色注入
import { execFileSync } from 'node:child_process';

export function runClaude({ prompt, system, allowedTools = [], maxTurns = 20, cwd = process.cwd(), model = null, mcpConfig = '' }) {
  const args = ['-p', prompt, '--output-format', 'json', '--max-turns', String(maxTurns)];
  if (model) args.push('--model', model);
  if (system) args.push('--append-system-prompt', system);
  if (mcpConfig) args.push('--mcp-config', mcpConfig);
  for (const t of allowedTools) args.push('--allowedTools', t);
  try {
    const r = JSON.parse(execFileSync('claude', args, { cwd, encoding: 'utf8', maxBuffer: 64 << 20 }));
    const u = r.usage || {};
    let data = null; try { data = JSON.parse(r.result || ''); } catch {}
    return { tokens: (u.input_tokens || 0) + (u.output_tokens || 0), text: r.result || '', data };
  } catch (e) {
    return { tokens: 0, text: '', data: null, error: String(e) };
  }
}

// .loop/loop/budget.mjs：运行账本 + 熔断
import { readFileSync, existsSync, appendFileSync } from 'node:fs';
const LOG = '.loop/state/run-log.jsonl';

export const record = (tokens, outcome) =>
  appendFileSync(LOG, JSON.stringify({ at: new Date().toISOString(), tokens, outcome }) + '\n');

export function spentToday() {
  if (!existsSync(LOG)) return 0;
  const today = new Date().toISOString().slice(0, 10);
  return readFileSync(LOG, 'utf8').split('\n').filter(Boolean).map(JSON.parse)
    .filter((e) => e.at.startsWith(today)).reduce((s, e) => s + (e.tokens || 0), 0);
}

export function gate(cfg) {                                  // 'stop' | 'report-only' | 'normal'
  if (existsSync('.loop/loop-pause-all')) return 'stop';     // kill switch
  const spent = spentToday(), cap = cfg.budget.daily_token_cap;
  if (spent >= cap) return 'stop';
  return spent >= cap * cfg.budget.degrade_at ? 'report-only' : 'normal';
}

// .loop/loop/fix.mjs：maker → 硬门禁 → verifier → PR
import { readFileSync, writeFileSync, existsSync } from 'node:fs';
import { execSync } from 'node:child_process';
import { runClaude } from './claude.mjs';

const sh = (cmd, cwd) => execSync(cmd, { cwd, encoding: 'utf8' });
const skill = (n) => readFileSync(`.loop/skills/${n}/SKILL.md`, 'utf8');
const reDeny = (g) => new RegExp('^' + g.replace(/[.+^${}()|[\]\\]/g, '\\$&').replace(/\*\*/g, '\0').replace(/\*/g, '[^/]*').replace(/\0/g, '.*') + '$');
const denied = (files, list) => files.some((f) => list.some((g) => reDeny(g).test(f)));
const AT = '.loop/state/attempts.json';
const load = () => (existsSync(AT) ? JSON.parse(readFileSync(AT, 'utf8')) : {});
const save = (m) => writeFileSync(AT, JSON.stringify(m));

export function runMakerVerifierPR(id, cfg) {
  const a = load();
  if ((a[id] || 0) >= cfg.budget.max_attempts_per_item) return 'escalated-max-attempts';
  const M = cfg.model_mapping, wt = `.wt/${id}`;
  sh(`git worktree add -q ``{wt} -b sweep/``{id} || true`);
  try {
    runClaude({ prompt: `Fix ${id}. Minimal change only. Never touch denylist paths.`,
      system: skill('sweep-implementer'),
      allowedTools: ['Read', 'Write', 'Bash(npm test:*)', 'Bash(flutter test:*)'], maxTurns: 30, cwd: wt, model: M.maker });

    const changed = sh('git diff --name-only', wt).split('\n').filter(Boolean);
    if (denied(changed, cfg.guardrails.denylist)) return 'escalated-denylist';   // 不验证不提交

    const v = runClaude({ prompt: `Verify the fix for ${id} against the 5-item checklist. Run the tests yourself. Output verdict JSON.`,
      system: skill('sweep-verifier'),
      allowedTools: ['Read', 'Bash(npm test:*)', 'Bash(flutter test:*)'], maxTurns: 20, cwd: wt, model: M.verifier });
    const d = v.data?.decision || 'REJECT';                 // 解析失败按拒绝

    if (d !== 'APPROVE') { if (d === 'REJECT') { a[id] = (a[id] || 0) + 1; save(a); } return d; }
    sh(`git commit -am "fix: ``{id}" && git push -u origin sweep/``{id} && gh pr create --fill --title "[AI-Sweep] fix ${id}"`, wt);
    delete a[id]; save(a);
    return 'fix-proposed';
  } finally {
    sh(`git worktree remove ${wt} --force || true`);
  }
}

#!/usr/bin/env node
// .loop/run.mjs：CI Sweeper：Triage → 早退 → maker → verifier → PR
import { readFileSync } from 'node:fs';
import { runClaude } from './loop/claude.mjs';
import { gate, record } from './loop/budget.mjs';
import { runMakerVerifierPR } from './loop/fix.mjs';

const cfg = JSON.parse(readFileSync('.loop/loop.config.json', 'utf8'));
if (gate(cfg) === 'stop') process.exit(0);

const triage = runClaude({
  prompt: 'Triage CI failures. Output findings JSON only.',
  system: readFileSync('.loop/skills/sweep-triage/SKILL.md', 'utf8'),
  allowedTools: ['Bash(gh run:*)', 'Read'], maxTurns: 12, model: cfg.model_mapping.triage,
});
const high = (triage.data || { high: [] }).high;
if (!high.length || gate(cfg) === 'report-only' || process.env.WEEK_ONE === '1') {
  record(triage.tokens, 'no-op'); process.exit(0);           // CI 全绿/只读 → 早退
}
const outcome = runMakerVerifierPR(high[0].id, cfg);         // 每轮只处理最高优一项
record(triage.tokens, outcome);
console.log(outcome);

# api-server/.github/workflows/api-ci-sweep.yml
name: CI Sweep
on:
  schedule: [{ cron: '*/30 * * * *' }]
  workflow_dispatch: {}
permissions: { contents: write, pull-requests: write, actions: read, statuses: write }
concurrency: { group: ci-sweep, cancel-in-progress: false }
jobs:
  sweep:
    runs-on: ubuntu-latest
    env:
      ANTHROPIC_API_KEY: ${{ secrets.ANTHROPIC_API_KEY }}
      GH_TOKEN: ${{ secrets.SWEEP_BOT_TOKEN }}    # 独立 bot 令牌，自动 PR 才能触发 CI
      WEEK_ONE: ${{ vars.WEEK_ONE }}              # 第一周设 '1' 强制只读
    steps:
      - uses: actions/checkout@v6
        with: { fetch-depth: 0 }
      - uses: actions/setup-node@v4
        with: { node-version: '20' }
      - run: npm i -g @anthropic-ai/claude-code
      - run: node .loop/run.mjs
      - if: always()                              # 手动补 status，配合 bot token 让自动 PR 触发检查
        run: gh api repos/${{ github.repository }}/statuses/${{ github.sha }} -f state=success -f context=ci-sweep || true

curl -fsSL https://get.maestro.mobile.dev | bash && echo "$HOME/.maestro/bin" >> $GITHUB_PATH
# iOS 不用 Maestro 时的兜底：brew tap facebook/fb && brew install idb-companion && pipx install fb-idb

# .loop/skills/e2e-explore/SKILL.md
---
name: e2e-explore
description: Explore a Flutter app via Maestro MCP. Output a JSON summary ONLY. No issue/edit.
---
你像真人一样操作 App，只发现与取证，产 JSON，不创建 issue、不改代码。
用 mcp__maestro__* 点按/读 hierarchy，用 orchestrator screenshot/logs/api-health 取证。
按旅程探索：启动→登录→核心功能→退出；记录崩溃/白屏/数据异常/导航死胡同/API 失败。
每个发现记可稳定复现的步骤；写回归到 integration_test/agent/<platform>_<seq>_test.dart。
每次最多 30 步，发现 3 个就停。
输出：{ "platform":"ios", "findings":[ { "title":"[E2E][ios] 登录后白屏",
  "repro_steps":[...], "screen":"home_after_login", "error_signature":"blank_view",
  "evidence":["shot-...png"], "regression_test":"integration_test/agent/ios_042_test.dart" } ] }

#!/usr/bin/env node
// .loop/orchestrator.mjs：screenshot | logs | api-health
import { execSync } from 'node:child_process';
import { mkdirSync } from 'node:fs';
import { tmpdir } from 'node:os';
import { join } from 'node:path';

const P = process.env.E2E_PLATFORM || process.argv[process.argv.indexOf('--platform') + 1] || 'ios';
const UDID = process.env.SIM_UDID || '';
const DIR = join(tmpdir(), 'agent-shots'); mkdirSync(DIR, { recursive: true });
const run = (c) => { try { return execSync(c, { encoding: 'utf8', timeout: 30000 }); } catch (e) { return e.stdout || String(e); } };

switch (process.argv[2]) {
  case 'screenshot': {
    const f = join(DIR, `shot-${Date.now()}.png`);
    run(P === 'android' ? `adb exec-out screencap -p > "``{f}"` : `xcrun simctl io "``{UDID}" screenshot "${f}"`);
    console.log(f); break;
  }
  case 'logs':
    console.log(run(P === 'android' ? 'adb logcat -d -t 200 | grep -i flutter'
      : `xcrun simctl spawn "${UDID}" log show --last 2m --predicate 'process=="Runner"' | tail -80`)); break;
  case 'api-health':
    console.log(run(`curl -sf ${process.env.API_STAGING_URL}/health || echo UNREACHABLE`)); break;
}

// .loop/loop/issues.mjs：指纹去重后建 issue
import { execSync } from 'node:child_process';
const sh = (c) => { try { return execSync(c, { encoding: 'utf8' }); } catch (e) { return e.stdout || ''; } };

export function createIssuesFromFindings(findings, { platform }) {
  const open = sh('gh issue list --state open --label e2e-found --json title --jq ".[].title"');
  const ids = [];
  for (const f of findings) {
    const fp = `[E2E][``{platform}] ``{f.error_signature}@${f.screen}`;   // 指纹
    if (open.includes(fp)) continue;                                    // 撞已开 issue 就跳过
    const body = `复现：${(f.repro_steps || []).join(' → ')}\n证据：${(f.evidence || []).join(', ')}\n回归：${f.regression_test}`;
    const m = /\/issues\/(\d+)/.exec(sh(`gh issue create --title ``{JSON.stringify(fp)} --label "bug,e2e-found,``{platform}" --body ${JSON.stringify(body)}`));
    if (m) ids.push(Number(m[1]));
  }
  return ids;
}

#!/usr/bin/env node
// .loop/e2e-run.mjs：E2E：探索 → 去重建 issue → maker → verifier → PR
import { readFileSync } from 'node:fs';
import { execSync } from 'node:child_process';
import { runClaude } from './loop/claude.mjs';
import { gate, record } from './loop/budget.mjs';
import { createIssuesFromFindings } from './loop/issues.mjs';
import { runMakerVerifierPR } from './loop/fix.mjs';

const cfg = JSON.parse(readFileSync('.loop/loop.config.json', 'utf8'));
if (gate(cfg) === 'stop') process.exit(0);
const platform = process.argv[process.argv.indexOf('--platform') + 1] || 'ios';

const health = execSync(`curl -sf ${cfg.api_server.staging_url}/health || echo UNREACHABLE`, { encoding: 'utf8' }).trim();
if (health === 'UNREACHABLE') {                              // API 挂是基础设施事实，可信代码直接登记
  execSync(`gh issue create --title "[E2E][${platform}] API unreachable" --label "bug,infra,e2e-found" --body "staging /health 不可达"`);
  record(0, 'api-down'); process.exit(0);
}

const explorer = runClaude({                                 // 只产 JSON，无写权限
  prompt: `Explore the app on ${platform} via Maestro MCP, screenshot via orchestrator. Output ONLY a JSON summary of findings.`,
  system: readFileSync('.loop/skills/e2e-explore/SKILL.md', 'utf8'),
  mcpConfig: '{"mcpServers":{"maestro":{"command":"maestro","args":["mcp"]}}}',
  allowedTools: ['mcp__maestro__*', 'Read', 'Write', 'Bash(node .loop/orchestrator.mjs:*)', 'Bash(curl:*)', 'Bash(flutter test:integration_test/*)'],
  maxTurns: 30, model: cfg.model_mapping.explorer,
});
const findings = (explorer.data || { findings: [] }).findings;
if (gate(cfg) === 'report-only' || process.env.WEEK_ONE === '1') {   // 只读阶段：只报告不修
  record(explorer.tokens, 'report-only'); console.log(JSON.stringify(findings)); process.exit(0);
}
const ids = createIssuesFromFindings(findings, { platform });
for (const id of ids) console.log(runMakerVerifierPR(id, cfg));
record(explorer.tokens, ids.length ? 'issues-found' : 'clean');

# app-flutter/.github/workflows/flutter-e2e-sweep.yml
name: Flutter E2E Sweep
on:
  push: { paths: ['lib/**', 'integration_test/**', 'pubspec.yaml'] }
  schedule: [{ cron: '0 3 * * *' }]
  workflow_dispatch: { inputs: { platform: { default: 'all' } } }
concurrency: { group: e2e-sweep, cancel-in-progress: false }
jobs:
  ios-e2e:
    runs-on: macos-14    # iOS 模拟器只能跑在 macOS；成本见下节
    if: github.event_name != 'workflow_dispatch' || inputs.platform == 'all' || inputs.platform == 'ios'
    env: { ANTHROPIC_API_KEY: "${{ secrets.ANTHROPIC_API_KEY }}", GH_TOKEN: "${{ secrets.SWEEP_BOT_TOKEN }}" }
    steps:
      - uses: actions/checkout@v6
        with: { fetch-depth: 0 }
      - uses: subosito/flutter-action@v2
        with: { flutter-version: '3.x', channel: stable }
      - run: curl -fsSL https://get.maestro.mobile.dev | bash && echo "$HOME/.maestro/bin" >> $GITHUB_PATH
      - name: Boot simulator
        run: |
          UDID=$(xcrun simctl list devices available -j | jq -r '.devices."iOS-18-0"[]|select(.name|contains("iPhone 16"))|.udid' | head -1)
          echo "SIM_UDID=$UDID" >> $GITHUB_ENV
          xcrun simctl boot "$UDID" || true; xcrun simctl bootstatus "$UDID" -b
      - run: flutter pub get && flutter build ios --simulator --no-codesign
      - name: Install & launch
        run: |
          APP=$(xcodebuild -showBuildSettings -scheme Runner -configuration Debug -sdk iphonesimulator -json 2>/dev/null \
            | jq -r '.[0].buildSettings | "\(.TARGET_BUILD_DIR)/\(.WRAPPER_NAME)"')   # 比 find DerivedData 稳
          xcrun simctl install "$SIM_UDID" "$APP"
          xcrun simctl launch "$SIM_UDID" com.yourorg.app_flutter || true
      - run: node .loop/e2e-run.mjs --platform ios --udid "$SIM_UDID"
      - uses: actions/upload-artifact@v4
        if: always()
        with: { name: ios-shots, path: "${{ runner.temp }}/agent-shots/" }

  android-e2e:
    runs-on: ubuntu-latest
    if: github.event_name != 'workflow_dispatch' || inputs.platform == 'all' || inputs.platform == 'android'
    env: { ANTHROPIC_API_KEY: "${{ secrets.ANTHROPIC_API_KEY }}", GH_TOKEN: "${{ secrets.SWEEP_BOT_TOKEN }}" }
    steps:
      - uses: actions/checkout@v6
        with: { fetch-depth: 0 }
      - uses: subosito/flutter-action@v2
        with: { flutter-version: '3.x', channel: stable }
      - run: curl -fsSL https://get.maestro.mobile.dev | bash && echo "$HOME/.maestro/bin" >> $GITHUB_PATH
      - run: flutter pub get
      - uses: reactivecircus/android-emulator-runner@v2
        with:
          api-level: 34
          target: google_apis
          arch: x86_64
          profile: pixel_7
          script: |
            flutter build apk --debug
            adb install build/app/outputs/flutter-apk/app-debug.apk
            adb shell am start -n com.yourorg.app_flutter/.MainActivity || true
            node .loop/e2e-run.mjs --platform android
      - uses: actions/upload-artifact@v4
        if: always()
        with: { name: android-shots, path: /tmp/agent-shots/ }

# app-flutter/.github/workflows/flutter-regression-matrix.yml
name: Flutter Regression Matrix
on:
  schedule: [{ cron: '0 3 * * *' }]                 # 夜间：smoke + nightly
  workflow_dispatch:
    inputs: { mode: { description: 'smoke / nightly / release', default: 'release' } }
jobs:
  matrix:
    name: ${{ matrix.platform }}-${{ matrix.device }}
    runs-on: ${{ matrix.os }}
    timeout-minutes: 60
    strategy:
      fail-fast: false      # 一台挂了，其它机型照跑
      matrix:
        include:
          - { platform: ios,     device: iphone-std,  sim: 'iPhone 16',                  os: macos-14,      tier: smoke }
          - { platform: android, device: pixel-std,   api: 34, profile: pixel_7,         os: ubuntu-latest, tier: smoke }
          - { platform: ios,     device: iphone-se,   sim: 'iPhone SE (3rd generation)', os: macos-14,      tier: nightly }
          - { platform: ios,     device: iphone-max,  sim: 'iPhone 16 Pro Max',          os: macos-14,      tier: nightly }
          - { platform: ios,     device: ipad,        sim: 'iPad (10th generation)',     os: macos-14,      tier: nightly }
          - { platform: android, device: pixel-small, api: 30, profile: pixel,           os: ubuntu-latest, tier: nightly }
          - { platform: android, device: tablet,      api: 34, profile: pixel_tablet,    os: ubuntu-latest, tier: nightly }
          - { platform: android, device: fold,        api: 34, profile: pixel_fold,      os: ubuntu-latest, tier: nightly }
          - { platform: android, device: low-end,     api: 30, profile: pixel,           os: ubuntu-latest, tier: release }
    steps:
      - uses: actions/checkout@v6
      - uses: subosito/flutter-action@v2
        with: { flutter-version: '3.x', channel: stable }
      - run: flutter pub get
      - name: 选层（schedule 跑 smoke+nightly，dispatch 按 mode）
        id: gate
        shell: bash
        run: |
          MODE='${{ github.event.inputs.mode || 'nightly' }}'; T='${{ matrix.tier }}'; R=no
          if [ "$MODE" = release ]; then R=yes; fi
          if [ "$MODE" = nightly ] && [ "$T" != release ]; then R=yes; fi
          if [ "$MODE" = smoke ] && [ "$T" = smoke ]; then R=yes; fi
          echo "run=$R" >> "$GITHUB_OUTPUT"
      - name: iOS 回归
        if: steps.gate.outputs.run == 'yes' && matrix.platform == 'ios'
        run: |
          UDID=$(xcrun simctl list devices available -j \
            | jq -r --arg n "${{ matrix.sim }}" '.devices|to_entries[].value[]|select(.name==$n)|.udid' | head -1)
          xcrun simctl boot "$UDID"; xcrun simctl bootstatus "$UDID" -b
          flutter test integration_test/ -d "$UDID"
      - name: Android 回归
        if: steps.gate.outputs.run == 'yes' && matrix.platform == 'android'
        uses: reactivecircus/android-emulator-runner@v2
        with:
          api-level: ${{ matrix.api }}
          arch: x86_64
          profile: ${{ matrix.profile }}
          script: flutter test integration_test/
      - if: always() && steps.gate.outputs.run == 'yes'
        uses: actions/upload-artifact@v4
        with:
          name: reg-${{ matrix.platform }}-${{ matrix.device }}
          path: test-results/
          if-no-files-found: ignore

// test/layout/breakpoints_test.dart：不开模拟器，多尺寸跑布局断言
import 'package:flutter/material.dart';
import 'package:flutter_test/flutter_test.dart';
import 'package:your_app/app.dart';   // MyApp 为应用根 widget

const sizes = {
  'small':     Size(320, 568),    // 小屏 SE 类
  'max':       Size(430, 932),    // 大屏 Pro Max 类
  'tablet':    Size(834, 1194),   // iPad
  'fold-open': Size(673, 841),    // 折叠屏展开
};

void main() {
  for (final e in sizes.entries) {
    testWidgets('布局可用 @${e.key}', (tester) async {
      tester.view.devicePixelRatio = 1.0;
      tester.view.physicalSize = e.value;
      addTearDown(tester.view.reset);

      await tester.pumpWidget(const MyApp());
      await tester.pumpAndSettle();

      expect(tester.takeException(), isNull);            // RenderFlex 溢出会在这里抛出
      if (e.value.width >= 800) {                         // 平板/大屏应走多栏分支
        expect(find.byKey(const Key('multi_column')), findsOneWidget);
      }
      // 可选像素级视觉回归：先 flutter test --update-goldens 生成基线再开启
      // await expectLater(find.byType(MyApp), matchesGoldenFile('goldens/home_${e.key}.png'));
    });
  }
}

  layout:
    runs-on: ubuntu-latest          # 纯 flutter test，不开模拟器，最便宜
    steps:
      - uses: actions/checkout@v6
      - uses: subosito/flutter-action@v2
        with: { flutter-version: '3.x', channel: stable }
      - run: flutter pub get
      - run: flutter test test/layout/
      - if: always()
        uses: actions/upload-artifact@v4
        with: { name: layout-failures, path: test/layout/failures/, if-no-files-found: ignore }

  realdevice:                         # 真机层：只在 nightly / release 触发，PR 不碰
    runs-on: ubuntu-latest
    if: github.event_name == 'schedule' || github.event.inputs.mode != 'smoke'
    steps:
      - uses: actions/checkout@v6
      - uses: subosito/flutter-action@v2
        with: { flutter-version: '3.x', channel: stable }
      - run: flutter pub get
      - uses: google-github-actions/auth@v2
        with:
          credentials_json: ${{ secrets.GCP_SA_KEY }}
      - uses: google-github-actions/setup-gcloud@v2
      - run: flutter build apk --debug
      - name: 把 integration_test 打成 androidTest 包
        run: |
          pushd android
          ./gradlew app:assembleDebugAndroidTest -Ptarget=integration_test/app_test.dart
          popd
      - name: 丢给一台真机跑，再拉回截图
        run: |
          gcloud firebase test android run \
            --type instrumentation \
            --app build/app/outputs/flutter-apk/app-debug.apk \
            --test android/app/build/outputs/apk/androidTest/debug/app-debug-androidTest.apk \
            --device model=oriole,version=34 \
            --directories-to-pull /sdcard/screenshots \
            --results-bucket gs://your-ftl-bucket --timeout 8m
          gsutil -m cp -r "gs://your-ftl-bucket/**/*.png" test-results/realdevice/ || true
      - if: always()
        uses: actions/upload-artifact@v4
        with:
          name: realdevice-shots
          path: test-results/realdevice/
          if-no-files-found: ignore

# .loop/skills/e2e-visual-triage/SKILL.md
---
name: e2e-visual-triage
description: Read screenshots, flag visually broken screens. Diff against golden when given. JSON only. No issue, no edit.
---
你是只读视觉初筛，读截图找通用性破损，产 JSON，不建 issue、不改代码。
优先 diff：给了基线就比对基线与当前，只报变化；没基线才冷看单图。
只报高确定性破损：文字溢出/截断、控件重叠、白屏、内容被挤出屏外、对比度过低。
拿不准标 uncertain 交人，绝不替人判定栏数/配色/信息层级这类设计意图。
输出：{ "platform":"ios","device":"ipad","suspects":[ { "screen":"home",
  "kind":"overflow","confidence":"high|uncertain","note":"","shot":"test-results/ipad-home.png" } ] }

// 触发点：integration_test 失败或 golden diff 跳了，才跑视觉复核
const v = runClaude({
  prompt: `Compare goldens/ with test-results/ for ``{platform}-``{device}. Read the PNGs. Output suspicious screens as JSON only.`,
  system: readFileSync('.loop/skills/e2e-visual-triage/SKILL.md', 'utf8'),
  allowedTools: ['Read', 'Bash(ls:*)'],            // 只读，无写、无建 issue 权限
  maxTurns: 12, model: cfg.model_mapping.visual,   // 便宜视觉档
});
const hits = (v.data || { suspects: [] }).suspects.filter((s) => s.confidence === 'high');
createIssuesFromFindings(hits.map((s) => ({         // uncertain 的不自动建，留给人扫
  error_signature: s.kind, screen: s.screen, evidence: [s.shot],
  repro_steps: [s.note], regression_test: '',
})), { platform });

// integration_test/agent/e2e_ios_042_test.dart（import 同前文 login_test，略）
testWidgets('Agent regression: 登录后不应白屏', (tester) async {
  app.main();
  await tester.pumpAndSettle();
  await tester.enterText(find.byKey(const Key('email_field')), 'test@example.com');
  await tester.enterText(find.byKey(const Key('password_field')), 'password123');
  await tester.tap(find.byKey(const Key('login_button')));
  await tester.pump(const Duration(seconds: 3));
  expect(find.byType(Scaffold), findsWidgets);   // 应显示主页而非白屏
});

# .github/workflows/pr-babysitter.yml
name: PR Babysitter
on:
  pull_request: { types: [opened, synchronize, ready_for_review] }
  schedule: [{ cron: '0 */2 * * *' }]
concurrency: { group: pr-babysitter-${{ github.event.pull_request.number }}, cancel-in-progress: true }
jobs:
  babysit:
    if: github.event.pull_request.draft == false || github.event_name == 'schedule'
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v6
        with: { fetch-depth: 0 }
      - uses: subosito/flutter-action@v2
        with: { flutter-version: '3.x' }
      - uses: anthropics/claude-code-action@v1
        with:
          anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
          prompt: |
            确保 PR #${{ github.event.pull_request.number }} 走到可合并：CI 挂了修、有冲突解、
            review comment 逐一回应、补 CHANGELOG、补测试。不改核心逻辑，只做维护性工作。
          claude_args: |
            --max-turns 25
            --allowedTools "Read,Edit,Write,Bash(gh pr:*),Bash(git:*),Bash(flutter test:*),Bash(flutter analyze:*)"

# .github/workflows/post-merge-cleanup.yml
name: Post-Merge Cleanup
on:
  pull_request:
    types: [closed]

jobs:
  cleanup:
    if: github.event.pull_request.merged == true
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v6
      - uses: anthropics/claude-code-action@v1
        with:
          anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
          prompt: |
            PR #${{ github.event.pull_request.number }} 已合并。清理：
            1. 删除已合并的远程分支
            2. 关联 PR 中引用的 issue
            3. 检查是否有调试代码遗留（print、TODO 等）
            4. 有 follow-up item → 创建 issue
          claude_args: |
            --max-turns 10
            --allowedTools "Read,Write,Bash(gh issue:*),Bash(gh pr:*),Bash(git:*)"

env:
  ANTHROPIC_BASE_URL: https://api.deepseek.com/anthropic
  ANTHROPIC_AUTH_TOKEN: ${{ secrets.DEEPSEEK_API_KEY }}
  ANTHROPIC_API_KEY: ""   # 留空，避免回退到 Anthropic