chore: remove test findings

TODO.md

@@ -29,4 +29,5 @@
 
 每個階段都會加上明確的 log，並確保即使部分功能未完成也能降級執行、不會中斷 pipeline。
 
-每次執行後請貼 log，我會協助 debug。
+每次執行後請貼 log，我會協助 debug。
+

app/git.js

@@ -1,44 +1,25 @@
-import { execSync } from 'child_process';
-import { GITEA_SERVER_URL, GITEA_REPOSITORY, GITEA_TOKEN, PR_HEAD_BRANCH, FINDINGS_PATH } from './config.js';
-
-function exec(cmd, cwd) {
-  return execSync(cmd, { cwd, stdio: 'pipe' }).toString().trim();
-}
+import fs from 'fs';
+import path from 'path';
+import { commitFile } from './gitea.js';
+import { FINDINGS_PATH } from './config.js';
 
 /**
- * Commit findings.json 並 push 到 PR 來源分支
+ * 透過 Gitea API 將 findings.json push 到來源分支（不需要 git binary）
  */
-export function commitAndPush(workspace) {
-  const repoDir = `${workspace}/${GITEA_REPOSITORY}`;
-  const remoteUrl = `${GITEA_SERVER_URL.replace(/\/$/, '')}/${GITEA_REPOSITORY}.git`
-    .replace('https://', `https://${GITEA_TOKEN}@`);
-
+export async function commitAndPush(workspace) {
   try {
-    // 設定 git 身份
-    exec('git config user.email "ai-review[bot]@gitea"', repoDir);
-    exec('git config user.name "AI Review Bot"', repoDir);
-
-    // 切換到來源分支
-    exec(`git fetch origin ${PR_HEAD_BRANCH}`, repoDir);
-    exec(`git checkout ${PR_HEAD_BRANCH}`, repoDir);
-
-    // 確認 findings.json 存在
-    exec(`git add ${FINDINGS_PATH}`, repoDir);
-
-    // 檢查是否有變更
-    const status = exec('git status --porcelain', repoDir);
-    if (!status) {
-      console.log('  findings.json 無變更，跳過 commit');
-      return;
-    }
-
-    const commitMsg = 'chore: update ai-review findings [skip ci]';
-    const commitHash = exec(`git commit -m "${commitMsg}"`, repoDir)
-      .match(/\[.+ ([a-f0-9]+)\]/)?.[1] || 'unknown';
-
-    exec(`git push ${remoteUrl} ${PR_HEAD_BRANCH}`, repoDir);
-    console.log(`  ✅ persisted findings  commit=${commitHash}  push=${PR_HEAD_BRANCH}`);
+    const fullPath = path.join(workspace, FINDINGS_PATH);
+    const content = fs.readFileSync(fullPath, 'utf8');
+    console.log(`  [debug] FINDINGS_PATH=${FINDINGS_PATH} branch=${process.env.PR_HEAD_BRANCH} token=${process.env.GITEA_TOKEN ? '***' : 'EMPTY'}`);
+    const result = await commitFile(
+      FINDINGS_PATH,
+      content,
+      'chore: update ai-review findings [skip ci]'
+    );
+    const commitHash = result.commit?.sha?.slice(0, 7) || 'unknown';
+    console.log(`  ✅ persisted findings  commit=${commitHash}  push=${process.env.PR_HEAD_BRANCH}`);
   } catch (e) {
-    console.log(`  ⚠️  Runner failed: commit/push 失敗: ${e.message}`);
+    const detail = e.response?.data ? JSON.stringify(e.response.data) : e.message;
+    console.log(`  ⚠️  Runner failed: commit/push 失敗: ${e.response?.status || ''} ${detail}`);
   }
 }

app/gitea.js

@@ -1,6 +1,6 @@
 import axios from 'axios';
 import https from 'https';
-import { GITEA_TOKEN, GITEA_SERVER_URL, GITEA_REPOSITORY, PR_NUMBER } from './config.js';
+import { GITEA_TOKEN, GITEA_SERVER_URL, GITEA_REPOSITORY, PR_NUMBER, PR_HEAD_BRANCH } from './config.js';
 
 const httpsAgent = new https.Agent({ rejectUnauthorized: false });
 const headers = () => ({ Authorization: `token ${GITEA_TOKEN}`, 'Content-Type': 'application/json' });
@@ -15,3 +15,40 @@ export async function postComment(body) {
   const resp = await axios.post(api(`/repos/${GITEA_REPOSITORY}/issues/${PR_NUMBER}/comments`), { body }, { headers: headers(), timeout: 30000, httpsAgent });
   return resp.data;
 }
+
+/**
+ * 透過 Gitea API 建立或更新檔案（不需要 git binary）
+ */
+export async function commitFile(filePath, content, message) {
+  const encoded = Buffer.from(content).toString('base64');
+  const url = api(`/repos/${GITEA_REPOSITORY}/contents/${filePath}`);
+
+  // 先嘗試取得現有檔案的 SHA
+  let sha;
+  try {
+    const existing = await axios.get(`${url}?ref=${PR_HEAD_BRANCH}`, { headers: headers(), httpsAgent, timeout: 15000 });
+    sha = existing.data.sha;
+    console.log(`  [debug] 取得現有檔案 SHA=${sha}`);
+  } catch (e) {
+    console.log(`  [debug] 檔案不存在，將建立新檔案: ${e.response?.status || e.message}`);
+    sha = undefined;
+  }
+
+  const payload = {
+    message,
+    content: encoded,
+    branch: PR_HEAD_BRANCH,
+    ...(sha ? { sha } : {}),
+  };
+
+  console.log(`  [debug] ${sha ? 'PUT' : 'POST'} ${url} branch=${PR_HEAD_BRANCH}`);
+  const resp = await axios.request({
+    method: sha ? 'put' : 'post',
+    url,
+    headers: headers(),
+    httpsAgent,
+    timeout: 30000,
+    data: payload,
+  });
+  return resp.data;
+}

app/main.js

@@ -91,7 +91,7 @@ async function main() {
 
   // Step5: commit/push findings.json 到來源分支
   console.log('\n💾 Step5: 記憶區 Commit/Push');
-  commitAndPush(WORKSPACE);
+  await commitAndPush(WORKSPACE);
 
   // Step6: 有 critical 問題則 exit 1
   console.log('\n🚦 Step6: 嚴重問題檢查');