feat: git 操作 clone 的 repo

app/git.js

@@ -1,22 +1,38 @@
-import { execSync } from 'child_process';
+import { spawnSync } from 'child_process';
+import fs from 'fs';
 import path from 'path';
 import { GITEA_SERVER_URL, GITEA_REPOSITORY, GITEA_TOKEN, PR_HEAD_BRANCH, FINDINGS_PATH } from './config.js';
 
 function git(args, cwd) {
-  return execSync(`git ${args.map(a => `'${a.replace(/'/g, "'\\''")}'`).join(' ')}`, { cwd, encoding: 'utf8' }).trim();
+  const result = spawnSync('git', args, { cwd, encoding: 'utf8' });
+  if (result.error) throw result.error;
+  if (result.status !== 0) throw new Error((result.stderr || result.stdout || '').trim());
+  return (result.stdout || '').trim();
 }
 
 export async function commitAndPush(workspace) {
-  const repoDir = path.join(workspace, GITEA_REPOSITORY);
   const remoteUrl = GITEA_SERVER_URL.replace(/\/$/, '')
     .replace('https://', `https://${GITEA_TOKEN}@`)
     .replace('http://', `http://${GITEA_TOKEN}@`) + `/${GITEA_REPOSITORY}.git`;
 
+  const repoDir = path.join(workspace, 'repo');
+
   try {
+    if (!fs.existsSync(repoDir)) {
+      git(['clone', '--depth=1', '--branch', PR_HEAD_BRANCH, remoteUrl, repoDir], workspace);
+    }
+
     git(['config', 'user.email', 'ai-review[bot]@gitea'], repoDir);
     git(['config', 'user.name', 'AI Review Bot'], repoDir);
     git(['fetch', 'origin', PR_HEAD_BRANCH], repoDir);
     git(['checkout', PR_HEAD_BRANCH], repoDir);
+
+    // 將 findings.json 從 workspace 複製到 clone 的 repo
+    const srcFindings = path.join(workspace, FINDINGS_PATH);
+    const destFindings = path.join(repoDir, FINDINGS_PATH);
+    fs.mkdirSync(path.dirname(destFindings), { recursive: true });
+    fs.copyFileSync(srcFindings, destFindings);
+
     git(['add', FINDINGS_PATH], repoDir);
 
     const status = git(['status', '--porcelain'], repoDir);