A GitHub Action that reads your PR diff and posts a structured analysis: what changed, why it matters, what risks exist, and where to focus.
Cursor, Claude Code, Copilot — they make writing code fast. But reviewers still face PRs with 50+ changed files and no signal of what actually matters.
Every PR gets a structured analysis comment — specific to the actual files, functions, and patterns that changed.
Added OAuth token refresh in src/auth/oauth.ts — the new refreshAccessToken() function exchanges an expired access token for a new one. The user model in src/models/user.ts gained a refresh_token TEXT column with NOT NULL — breaking migration.
This introduces persistent session storage. Users will need to re-authenticate on first deployment after this ships.
Medium Refresh tokens stored as plain text in users table
High No rate limiting on /auth/refresh endpoint
Medium Migration adds NOT NULL to table with 10K+ existing rows
Token storage approach — plain text refresh tokens in the database is a security concern. Verify migration handles existing rows.
Fires automatically on PR open, sync, or reopen. No manual triggers needed.
Gets the complete PR diff via the GitHub API. No checkout step required.
Sends diff to Claude with an expert reviewer system prompt. File-level, specific analysis.
Posts a structured analysis comment directly on the PR. Visible to all reviewers.
The goal isn't to replace human review. It's to make human review faster and more focused. Every comment includes a risk badge so you can scan PR health at a glance.
One workflow file. One secret. That's all it takes.
Add .github/workflows/explainer.yml to your repo.
Add ANTHROPIC_API_KEY to your GitHub repo secrets. Free tier gives ~$5 credit.
Every new PR gets an analysis comment. Review with context, not confusion.