diff --git a/.gitea/ai-review/findings.json b/.gitea/ai-review/findings.json
new file mode 100644
index 0000000..0637a08
--- /dev/null
+++ b/.gitea/ai-review/findings.json
@@ -0,0 +1 @@
+[]
\ No newline at end of file
diff --git a/app/git.js b/app/git.js
index 07a4d54..1b89d22 100644
--- a/app/git.js
+++ b/app/git.js
@@ -10,6 +10,7 @@ export async function commitAndPush(workspace) {
   try {
     const fullPath = path.join(workspace, FINDINGS_PATH);
     const content = fs.readFileSync(fullPath, 'utf8');
+    console.log(`  [debug] FINDINGS_PATH=${FINDINGS_PATH} branch=${process.env.PR_HEAD_BRANCH} token=${process.env.GITEA_TOKEN ? '***' : 'EMPTY'}`);
     const result = await commitFile(
       FINDINGS_PATH,
       content,
diff --git a/app/gitea.js b/app/gitea.js
index e30b1b1..cbd59d4 100644
--- a/app/gitea.js
+++ b/app/gitea.js
@@ -28,7 +28,9 @@ export async function commitFile(filePath, content, message) {
   try {
     const existing = await axios.get(`${url}?ref=${PR_HEAD_BRANCH}`, { headers: headers(), httpsAgent, timeout: 15000 });
     sha = existing.data.sha;
-  } catch {
+    console.log(`  [debug] 取得現有檔案 SHA=${sha}`);
+  } catch (e) {
+    console.log(`  [debug] 檔案不存在，將建立新檔案: ${e.response?.status || e.message}`);
     sha = undefined;
   }
 
@@ -39,6 +41,7 @@ export async function commitFile(filePath, content, message) {
     ...(sha ? { sha } : {}),
   };
 
+  console.log(`  [debug] ${sha ? 'PUT' : 'POST'} ${url} branch=${PR_HEAD_BRANCH}`);
   const resp = await axios.request({
     method: sha ? 'put' : 'post',
     url,