ai-code-review/app/preflight.js

import axios from 'axios';
import https from 'https';
import {
  GITEA_TOKEN,
  GITEA_COMMENT_TOKEN,
  GITEA_SERVER_URL,
  GITEA_REPOSITORY,
  GITEA_SKIP_TLS_VERIFY,
  PR_NUMBER,
  getOpenCodeHttpsAgent,
  getLLMConfig,
} from './config.js';
import { verifyRemoteAccess } from './git.js';
import { step, line, ok, error, result } from './log.js';

const httpsAgent = GITEA_SKIP_TLS_VERIFY ? new https.Agent({ rejectUnauthorized: false }) : undefined;
const api = (path) => `${GITEA_SERVER_URL.replace(/\/$/, '')}/api/v1${path}`;
const giteaHeaders = (token) => ({ Authorization: `token ${token}`, 'Content-Type': 'application/json' });
const opencodeModelConfig = (model) => {
  const [providerID, modelID] = model.includes('/') ? model.split('/', 2) : [process.env.OPENCODE_PROVIDER || 'google', model];
  return { providerID, modelID };
};
const opencodeAxiosOptions = (headers) => ({
  headers,
  timeout: 30000,
  httpsAgent: getOpenCodeHttpsAgent(),
});

function giteaErr(e) {
  const status = e.response?.status;
  return status ? `HTTP ${status} ${e.message}` : e.message;
}

/** 檢查必要環境變數是否齊全；可傳入覆寫值供測試使用 */
export function checkRequiredEnv({ token = GITEA_TOKEN, repo = GITEA_REPOSITORY, pr = PR_NUMBER } = {}) {
  const missing = [];
  if (!token) missing.push('GITEA_TOKEN');
  if (!repo) missing.push('GITEA_REPOSITORY');
  if (!pr) missing.push('PR_NUMBER');
  return { ok: missing.length === 0, missing };
}

/** 用 GITEA_TOKEN 讀取此 repo，同時驗證 token 有效與有讀取權限 */
export async function verifyGiteaToken(token = GITEA_TOKEN, repo = GITEA_REPOSITORY) {
  try {
    await axios.get(api(`/repos/${repo}`), { headers: giteaHeaders(token), timeout: 30000, httpsAgent });
    return { ok: true };
  } catch (e) {
    return { ok: false, error: giteaErr(e) };
  }
}

/** 若有提供 comment token，用它呼叫 /user 驗證可用；沒提供則略過 */
export async function verifyCommentToken(token = GITEA_COMMENT_TOKEN) {
  if (!token) return { ok: true, skipped: true };
  try {
    await axios.get(api('/user'), { headers: giteaHeaders(token), timeout: 30000, httpsAgent });
    return { ok: true };
  } catch (e) {
    return { ok: false, error: giteaErr(e) };
  }
}

/**
 * 驗證 LLM 設定可用：
 * - 僅支援 OpenCode server
 * - 檢查 OpenCode base URL 是否可連線，並確認 provider/model 已設定
 */
export async function verifyLLM() {
  const { provider, baseURL, model } = getLLMConfig();
  if (!provider) return { ok: false, error: '未設定 OpenCode server，請設定 OPENCODE_BASE_URL' };
  if (!baseURL) return { ok: false, provider, error: `${provider} 缺少 base URL` };

  const base = baseURL.replace(/\/$/, '');
  const headers = { 'Content-Type': 'application/json' };

  const { providerID, modelID } = opencodeModelConfig(model);
  try {
    await axios.get(`${base}/global/health`, opencodeAxiosOptions(headers));
    const providers = await axios.get(`${base}/config/providers`, opencodeAxiosOptions(headers));
    const configuredProvider = providers.data.providers?.find(p => p.id === providerID);
    if (!configuredProvider) return { ok: false, provider, error: `OpenCode server 未設定 provider=${providerID}` };
    if (!configuredProvider.models?.[modelID]) return { ok: false, provider, error: `OpenCode server provider=${providerID} 未列出 model=${modelID}` };
    return { ok: true, provider };
  } catch (e) {
    return { ok: false, provider, error: `OpenCode server 驗證失敗: ${e.message}` };
  }
}

/**
 * 集中執行所有驗證相關設定的前置檢查；全部通過回傳 true，任一失敗回傳 false。
 * 僅做唯讀的認證/連線確認，不發布任何 comment。
 */
export async function runPreflight(workspace = process.env.GITHUB_WORKSPACE || '/workspace', deps = {}) {
  const {
    checkEnv = checkRequiredEnv,
    verifyToken = verifyGiteaToken,
    verifyComment = verifyCommentToken,
    verifyRemote = verifyRemoteAccess,
    verifyLLMFn = verifyLLM,
  } = deps;
  step('Step2', '前置驗證（驗證相關設定）');

  const env = checkEnv();
  if (!env.ok) {
    error(`缺少必要環境變數: ${env.missing.join(', ')}`);
    return false;
  }
  ok('必要環境變數齊全 (GITEA_TOKEN, GITEA_REPOSITORY, PR_NUMBER)');

  const gitea = await verifyToken();
  if (!gitea.ok) {
    error(`GITEA_TOKEN 驗證失敗（無法讀取 repo ${GITEA_REPOSITORY}）: ${gitea.error}`);
    return false;
  }
  ok(`GITEA_TOKEN 可讀取 repo ${GITEA_REPOSITORY}`);

  const comment = await verifyComment();
  if (!comment.ok) {
    error(`GITEA_COMMENT_TOKEN 驗證失敗: ${comment.error}`);
    return false;
  }
  if (comment.skipped) line('未提供 GITEA_COMMENT_TOKEN，comment 將沿用 GITEA_TOKEN');
  else ok('GITEA_COMMENT_TOKEN 可用');

  const remote = verifyRemote(workspace);
  if (!remote.ok) {
    error(`git push 認證/連線驗證失敗（ls-remote）: ${remote.error}`);
    return false;
  }
  ok('git remote 認證可用（ls-remote 成功）');

  const llm = await verifyLLMFn();
  if (!llm.ok) {
    error(`LLM 驗證失敗: ${llm.error}`);
    return false;
  }
  ok(`LLM provider=${llm.provider} 連線正常`);

  result(true, '前置驗證通過');
  return true;
}