Claude Code /ultrareview 実践ガイド — マルチエージェントレビューで本番バグを事前に潰す

graph TD
    A["/ultrareview 実行"] --> B["リポジトリをクラウドサンドボックスにアップロード"]
    B --> C["Find Phase"]
    C --> D["Agent 1: ロジックバグ検出"]
    C --> E["Agent 2: セキュリティ脆弱性"]
    C --> F["Agent 3: 境界条件・エッジケース"]
    C --> G["Agent N: パフォーマンス・API誤用"]
    D --> H["Verify Phase"]
    E --> H
    F --> H
    G --> H
    H --> I["独立再現検証"]
    I --> J{"再現できたか？"}
    J -- Yes --> K["最終レポートに含める"]
    J -- No --> L["偽陽性として除去"]
    K --> M["検証済みfindingsをセッションに通知"]

# 現在のブランチとデフォルトブランチのdiffをレビュー
/ultrareview

# ブランチをpushしてPRを作成後
git push -u origin feature/payment-refactor
gh pr create --draft
/ultrareview 1234

<!-- REVIEW.md の例（Managed Code Review向け、/ultrareviewではCLAUDE.mdに類似の指針を記述） -->

# Review instructions

## What Important means here

Reserve Important for findings that would break behavior, leak data,
or block a rollback: incorrect logic, unscoped database queries, PII
in logs or error messages, and migrations that aren't backward
compatible. Style, naming, and refactoring suggestions are Nit at
most.

## Always check

- Stripe webhook の冪等性キーが全エンドポイントで使用されていること
- DB migration に対応する rollback migration が存在すること
- 認証ミドルウェアの変更が全保護ルートに適用されていること
- Log lines don't include email addresses, user IDs, or request bodies

## Do not report

- Generated files under `src/gen/` and any `*.lock` file
- Test-only code that intentionally violates production rules

# .github/workflows/ultrareview.yml
name: Ultrareview on high-risk PRs

on:
  pull_request:
    types: [labeled]

jobs:
  ultrareview:
    if: github.event.label.name == 'needs-ultrareview'
    runs-on: ubuntu-latest
    timeout-minutes: 30
    steps:
      - uses: actions/checkout@v4
        with:
          fetch-depth: 0

      - name: Install Claude Code
        run: npm install -g @anthropic-ai/claude-code

      - name: Run ultrareview
        env:
          ANTHROPIC_API_KEY: ${{ secrets.ANTHROPIC_API_KEY }}
        run: |
          claude -p "Run /ultrareview ${{ github.event.pull_request.number }} and report findings" \
            --output-format json > review-results.json

      - name: Post results to PR
        if: always()
        uses: actions/github-script@v7
        with:
          script: |
            const fs = require('fs');
            const results = fs.readFileSync('review-results.json', 'utf8');
            await github.rest.issues.createComment({
              owner: context.repo.owner,
              repo: context.repo.repo,
              issue_number: ${{ github.event.pull_request.number }},
              body: `## Ultrareview Results\n\n${results}`
            });

// src/pipelines/autonomous-dev.ts に追加するステージ例
import { runClaude } from '../claude-runner.js';
import { notify } from '../notifier.js';

interface UltrareviewResult {
  findings: Array<{ file: string; line: number; issue: string }>;
  hasCritical: boolean;
}

async function ultrareviewStage(
  projectSlug: string,
  prNumber: number
): Promise<UltrareviewResult> {
  const projectDir = `${process.env.HOME}/Repo/${projectSlug}`;

  // PR の変更行数を取得してコスト判定
  const diffStat = await runClaude(
    `Run "git diff --stat main" in ${projectDir} and return the total lines changed as a number only.`,
    { cwd: projectDir }
  );

  const linesChanged = parseInt(diffStat.trim(), 10);

  // 100行未満の変更は /review で十分
  if (linesChanged < 100) {
    const reviewResult = await runClaude(
      `Run /review in ${projectDir} and summarize findings as JSON.`,
      { cwd: projectDir }
    );
    return { findings: JSON.parse(reviewResult), hasCritical: false };
  }

  // 100行以上の変更に /ultrareview を実行
  const result = await runClaude(
    `Run /ultrareview ${prNumber} and wait for completion. Return findings as JSON array with {file, line, issue} objects.`,
    { cwd: projectDir, timeout: 30 * 60 * 1000 } // 30分タイムアウト
  );

  const findings = JSON.parse(result);
  const hasCritical = findings.some(
    (f: { issue: string }) =>
      f.issue.toLowerCase().includes('security') ||
      f.issue.toLowerCase().includes('data loss')
  );

  if (hasCritical) {
    await notify(
      `*[${projectSlug}]* ultrareview で重大な問題を検出。デプロイを中断します。\n` +
      findings.map((f: { file: string; line: number; issue: string }) =>
        `• ${f.file}:${f.line} — ${f.issue}`
      ).join('\n')
    );
  }

  return { findings, hasCritical };
}