[ci] refactor: replace claude-code-action with direct API call

The claude-code-action has workflow validation and tool compatibility
issues with third-party API proxies. Replace with a simple Python
script that calls the API directly and posts review via gh CLI.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

Author: Zachary-wW

.github/scripts/claude-review.py

@@ -0,0 +1,76 @@
+#!/usr/bin/env python3
+# Copyright 2026 The LoongForge Authors.
+# SPDX-License-Identifier: Apache-2.0
+"""Call Claude API to review a PR diff and output the review as markdown."""
+import json
+import os
+import sys
+import urllib.request
+
+
+def main():
+    api_key = os.environ.get("ANTHROPIC_API_KEY")
+    base_url = os.environ.get("ANTHROPIC_BASE_URL", "https://api.anthropic.com")
+    model = os.environ.get("CLAUDE_MODEL", "Claude Sonnet 4.6")
+    skill_path = os.environ.get("SKILL_PATH", "skills/loongforge-review/SKILL.md")
+    diff_path = os.environ.get("DIFF_PATH", "/tmp/pr-diff.txt")
+    pr_title = os.environ.get("PR_TITLE", "")
+    pr_author = os.environ.get("PR_AUTHOR", "")
+
+    if not api_key:
+        print("ERROR: ANTHROPIC_API_KEY not set", file=sys.stderr)
+        sys.exit(1)
+
+    with open(skill_path, "r") as f:
+        skill = f.read()
+
+    with open(diff_path, "r") as f:
+        diff = f.read()[:80000]
+
+    prompt = f"""{skill}
+
+## PR Information
+
+- Title: {pr_title}
+- Author: {pr_author}
+
+## Diff
+
+```diff
+{diff}
+```
+
+Now review this pull request following the instructions above."""
+
+    payload = {
+        "model": model,
+        "max_tokens": 4096,
+        "messages": [{"role": "user", "content": prompt}],
+    }
+
+    req = urllib.request.Request(
+        f"{base_url}/v1/messages",
+        data=json.dumps(payload).encode(),
+        headers={
+            "x-api-key": api_key,
+            "anthropic-version": "2023-06-01",
+            "content-type": "application/json",
+        },
+    )
+
+    try:
+        with urllib.request.urlopen(req, timeout=180) as resp:
+            result = json.loads(resp.read())
+            text = result["content"][0]["text"]
+            print(text)
+    except urllib.error.HTTPError as e:
+        body = e.read().decode()
+        print(f"API Error ({e.code}): {body}", file=sys.stderr)
+        sys.exit(1)
+    except Exception as e:
+        print(f"Error: {e}", file=sys.stderr)
+        sys.exit(1)
+
+
+if __name__ == "__main__":
+    main()

.github/workflows/claude-review.yml

@@ -3,61 +3,48 @@ name: Claude PR Review
 permissions:
   contents: read
   pull-requests: write
-  issues: write
-  id-token: write
 
 on:
   pull_request:
     types: [opened, synchronize]
-  issue_comment:
-    types: [created]
-  pull_request_review_comment:
-    types: [created]
 
 jobs:
   auto-review:
-    if: github.event_name == 'pull_request'
     runs-on: self-hosted
     timeout-minutes: 15
     steps:
       - uses: actions/checkout@v4
         with:
           fetch-depth: 0
 
-      - name: Read review skill
-        id: skill
+      - name: Get PR diff
+        env:
+          GH_TOKEN: ${{ github.token }}
         run: |
-          {
-            echo 'REVIEW_PROMPT<<EOF'
-            cat skills/loongforge-review/SKILL.md
-            echo 'EOF'
-          } >> "$GITHUB_OUTPUT"
+          gh pr diff ${{ github.event.pull_request.number }} > /tmp/pr-diff.txt
 
-      - uses: anthropics/claude-code-action@v1
+      - name: Run Claude review
         env:
+          ANTHROPIC_API_KEY: ${{ secrets.ANTHROPIC_API_KEY }}
           ANTHROPIC_BASE_URL: ${{ secrets.ANTHROPIC_BASE_URL }}
-        with:
-          anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
-          prompt: |
-            ${{ steps.skill.outputs.REVIEW_PROMPT }}
-
-            Now review the current pull request following the instructions above.
-          claude_args: "--model 'Claude Sonnet 4.6' --max-turns 10"
-
-  interactive:
-    if: |
-      (github.event_name == 'issue_comment' && contains(github.event.comment.body, '@claude')) ||
-      (github.event_name == 'pull_request_review_comment' && contains(github.event.comment.body, '@claude'))
-    runs-on: self-hosted
-    timeout-minutes: 15
-    steps:
-      - uses: actions/checkout@v4
-        with:
-          fetch-depth: 0
+          CLAUDE_MODEL: "Claude Sonnet 4.6"
+          SKILL_PATH: "skills/loongforge-review/SKILL.md"
+          DIFF_PATH: "/tmp/pr-diff.txt"
+          PR_TITLE: ${{ github.event.pull_request.title }}
+          PR_AUTHOR: ${{ github.event.pull_request.user.login }}
+        run: |
+          python3 .github/scripts/claude-review.py > /tmp/review-result.md
 
-      - uses: anthropics/claude-code-action@v1
+      - name: Post review comment
         env:
-          ANTHROPIC_BASE_URL: ${{ secrets.ANTHROPIC_BASE_URL }}
-        with:
-          anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
-          claude_args: "--model 'Claude Sonnet 4.6' --max-turns 10"
+          GH_TOKEN: ${{ github.token }}
+        run: |
+          {
+            echo '## 🤖 Claude Code Review'
+            echo ''
+            cat /tmp/review-result.md
+            echo ''
+            echo '---'
+            echo '*Automated review by Claude Sonnet 4.6 · [Review Skill](skills/loongforge-review/SKILL.md)*'
+          } > /tmp/review-comment.md
+          gh pr comment ${{ github.event.pull_request.number }} --body-file /tmp/review-comment.md