AgentToolHub
SkillClaude CodeCursorClineOpenClawWindsurfVS CodeChatGPT

open-code-review

Fast, efficient, battle-tested at Alibaba's scale. Hybrid architecture code review tool: deterministic pipelines + LLM Agent, precise line-level comments, built-in multi-language ruleset (NPE, thread-safety, XSS, SQL injection), OpenAI & Anthropic compatible.

Features

  • ✓Hybrid architecture for deterministic pipelines
  • ✓Line-level comments by LLM Agent
  • ✓Multi-language ruleset for NPE, thread-safety, XSS, SQL injection
  • ✓OpenAI & Anthropic compatibility
  • ✓Battle-tested at Alibaba's scale
  • ✓Visit GitHub for more details

Installation Guide

bash
npm install -g @alibaba-group/open-code-review

After installation, the ocr command is available globally.

For other installation methods (install script, GitHub Release binary, from source), see Installation.

#### Quick Start

1. Configure LLM

You must configure an LLM before reviewing code, unless you use Delegation Mode.

bash
ocr config provider          # Select a built-in provider or add a custom one
ocr config model             # Pick a model for the active provider

![Provider setup](imgs/providers.jpg)

The interactive UI guides you through provider selection, API key entry, and model configuration, then automatically tests connectivity.

For CLI setup, environment variables, custom providers, and other advanced configuration, see Configuration.

2. Review

bash
cd your-project

# Workspace mode — review all staged, unstaged, and untracked changes
ocr review

# Branch range — reviews feature-branch's changes since it diverged from main (merge-base mode)
ocr review --from main --to feature-branch

# Single commit
ocr review --commit abc123

# Resume an interrupted range or commit review
ocr session list
ocr review --from main --to feature-branch --resume <session-id>

# Full-file scan — review whole files instead of a diff (no git history needed)
ocr scan                          # scan the entire repository
ocr scan --path internal/agent    # scan a directory or specific files
ocr scan --resume <session-id>   # resume an interrupted full-file scan

# Save results to a file (recommended for AI host agents)
ocr review --format json --output result.json

# Delegation mode — let your AI coding agent perform the review itself
# OCR handles file selection and rule resolution; no LLM configuration needed
ocr delegate preview
ocr delegate rule src/main.go src/handler.go

Reviews