code-review/app/main.js

import fs from 'fs';
import path from 'path';
import { GITEA_REPOSITORY, PR_NUMBER, PR_HEAD_BRANCH, PR_BASE_BRANCH, getLLMConfig, FINDINGS_PATH, EXCLUSIONS_PATH } from './config.js';
import { loadRoles, getRoleIntro } from './roles.js';
import { getPRDiff, postComment } from './gitea.js';
import { analyzeWithRole, loadOldFindings, mergeFindings, sortByLevel, deduplicateWithAI, loadExclusions, applyExclusions, filterFalsePositivesWithAI } from './findings.js';
import { saveFindings, postOldFindingsComment, postNewNonCriticalComment, postNewCriticalComments } from './comments.js';
import { cloneRepo, commitAndPush } from './git.js';

const WORKSPACE = process.env.GITHUB_WORKSPACE || '/workspace';

async function main() {
  console.log('='.repeat(60));
  console.log('🚀 Step1: Pipeline 啟動');
  console.log(`  repo=${GITEA_REPOSITORY}  PR=#${PR_NUMBER}`);
  console.log(`  ${PR_HEAD_BRANCH} -> ${PR_BASE_BRANCH}`);

  const { provider, baseURL, model } = getLLMConfig();
  if (!provider) {
    console.error('❌ 未設定任何 LLM API Key，請檢查 action inputs');
    process.exit(1);
  }
  console.log(`  LLM: provider=${provider}  model=${model}  base_url=${baseURL}`);

  const roles = loadRoles();
  console.log(`  已載入 ${roles.length} 個角色: [${roles.map(r => r.name).join(', ')}]`);

  let diff;
  try {
    diff = await getPRDiff();
    console.log(`  diff 長度: ${diff.length} 字元`);
  } catch (e) {
    console.error(`  ❌ 取得 diff 失敗: ${e.message}`);
    process.exit(1);
  }

  if (!diff.trim()) {
    console.log('  ⚠️  diff 為空，無需審查');
    process.exit(0);
  }

  try {
    const intro = getRoleIntro(roles) + `\n\n> 🔍 服務：${provider}  模型：${model}`;
    await postComment(intro);
    console.log('  ✅ 角色介紹 comment 發布成功');
  } catch (e) {
    console.log(`  ⚠️  comment 發布失敗（繼續執行）: ${e.message}`);
  }

  // Step2: 各角色分析 diff 產生新 findings
  console.log('\n📊 Step2: Findings 產生');
  const results = await Promise.allSettled(roles.map(role => analyzeWithRole(role, diff)));
  const newFindings = [];
  for (let i = 0; i < results.length; i++) {
    if (results[i].status === 'fulfilled') {
      newFindings.push(...results[i].value);
    } else {
      console.log(`  ⚠️  [${roles[i].name}] 分析失敗（跳過）: ${results[i].reason?.message}`);
    }
  }
  console.log(`  Step2 完成: 新 findings 總計 ${newFindings.length} 筆`);

  // Step4: 讀取舊 findings，合併去重（含 AI 語意去重）
  console.log('\n🔀 Step3: Findings 合併');
  // Clone repo 以讀取舊 findings 與排除清單
  let repoDir;
  try {
    repoDir = cloneRepo(WORKSPACE);
  } catch (e) {
    console.log(`  ⚠️  clone repo 失敗（繼續執行）: ${e.message}`);
  }
  const oldFindings = loadOldFindings(repoDir || WORKSPACE);
  const mergedFindings = mergeFindings(oldFindings, newFindings);
  console.log(`  Step3 merged findings total=${mergedFindings.length}`);

  console.log('\n🤖 Step3b: AI 語意去重');
  const deduped = await deduplicateWithAI(mergedFindings);
  const sorted = sortByLevel(deduped);
  console.log(`  Step3b dedup findings total=${sorted.length} (critical=${sorted.filter(f=>f.level==='critical').length} warning=${sorted.filter(f=>f.level==='warning').length} info=${sorted.filter(f=>f.level==='info').length})`);

  // Step5: 讀取排除問題檔案，過濾 PR 問題表格，並請 AI 判斷誤報
  console.log('\n🚫 Step4: AI 排除問題過濾');
  // 輸入至 findings 用於 AI 誤報過濾，exclusions 同時作為已知誤報參考
  const exclusions = loadExclusions(repoDir || WORKSPACE);
  const ruleFiltered = applyExclusions(sorted, exclusions);
  const filtered = await filterFalsePositivesWithAI(ruleFiltered, exclusions);
  console.log(`  Step4 完成: findings total=${filtered.length}`);

  // Step6: 寫入 findings.json，依序發布 comment
  console.log('\n📝 Step5: Findings 寫入與 Comment 發布');
  saveFindings(WORKSPACE, filtered);
  try {
    await postOldFindingsComment(filtered);
    await postNewNonCriticalComment(filtered);
    await postNewCriticalComments(filtered);
    console.log('  Step5 完成');
  } catch (e) {
    console.log(`  ⚠️  comment 發布失敗（繼續執行）: ${e.message}`);
  }

  // Step7: 驗證 findings.json 與 exclusions.json 為合法 JSON
  console.log('\n🔎 Step6: JSON 格式驗證');
  for (const relPath of [FINDINGS_PATH, EXCLUSIONS_PATH]) {
    const fullPath = path.join(repoDir || WORKSPACE, relPath);
    if (!fs.existsSync(fullPath)) {
      console.log(`  ⚠️  ${relPath} 不存在，跳過驗證`);
      continue;
    }
    try {
      JSON.parse(fs.readFileSync(fullPath, 'utf8'));
      console.log(`  ✅ ${relPath} JSON 格式正確`);
    } catch (e) {
      console.error(`  ❌ ${relPath} JSON 格式錯誤: ${e.message}，嘗試修正...`);
      try {
        const backupPath = fullPath + '.bak';
        fs.copyFileSync(fullPath, backupPath);
        fs.writeFileSync(fullPath, '[]\n', 'utf8');
        console.log(`  ✅ ${relPath} 已重置為空陣列（原檔備份至 ${relPath}.bak）`);
      } catch (repairErr) {
        console.error(`  ❌ ${relPath} 修正失敗: ${repairErr.message}`);
        process.exit(1);
      }
    }
  }

  // Step7: commit/push findings.json 到來源分支
  console.log('\n💾 Step7: 記憶區 Commit/Push');
  await commitAndPush(WORKSPACE, repoDir);

  // Step9: 有 critical 問題則 exit 1
  console.log('\n🚦 Step8: 嚴重問題檢查');
  const criticalCount = filtered.filter(f => f.level === 'critical').length;
  if (criticalCount > 0) {
    console.log(`  ❌ 發現 ${criticalCount} 個嚴重問題，workflow 結束（exit 1）`);
    console.log('='.repeat(60));
    process.exit(1);
  }
  console.log('  ✅ 無嚴重問題');
  console.log('\n✅ Pipeline 完成');
  console.log('='.repeat(60));
}

main().catch(e => {
  console.error('❌ Runner failed:', e.message);
  process.exit(1);
});