diff --git a/.gitea/workflows/pr-review.yml b/.gitea/workflows/pr-review.yml new file mode 100644 index 00000000..e72f3c4c --- /dev/null +++ b/.gitea/workflows/pr-review.yml @@ -0,0 +1,134 @@ +name: PR Review Automation + +on: + pull_request: + types: [opened, synchronize, reopened, edited] + +concurrency: + group: pr-review-${{ github.event.pull_request.number }} + cancel-in-progress: true + +jobs: + review: + runs-on: ubuntu-latest + permissions: + pull-requests: write + container: + image: ubuntu:22.04 + options: --dns 8.8.8.8 --dns 1.1.1.1 + steps: + - name: Install dependencies + shell: bash + run: | + set -euo pipefail + apt-get update -qq && apt-get install -y -qq git curl jq + + - name: Checkout code + shell: bash + env: + REPOSITORY: ${{ github.repository }} + run: | + set -euo pipefail + git init + git remote add origin "https://gogs.tftsr.com/${REPOSITORY}.git" + git fetch --depth=1 origin ${{ github.head_ref }} + git checkout FETCH_HEAD + + - name: Get PR diff + id: diff + shell: bash + run: | + set -euo pipefail + git fetch origin ${{ github.base_ref }} + git diff origin/${{ github.base_ref }}..HEAD > /tmp/pr_diff.txt + echo "diff_size=$(wc -l < /tmp/pr_diff.txt | tr -d ' ')" >> $GITHUB_OUTPUT + + - name: Analyze with Ollama + id: analyze + if: steps.diff.outputs.diff_size != '0' + shell: bash + env: + OLLAMA_URL: https://ollama-ui.tftsr.com/ollama/v1 + OLLAMA_API_KEY: ${{ secrets.OLLAMA_API_KEY }} + PR_TITLE: ${{ github.event.pull_request.title }} + PR_NUMBER: ${{ github.event.pull_request.number }} + run: | + set -euo pipefail + if grep -q "^Binary files" /tmp/pr_diff.txt; then + echo "WARNING: Binary file changes detected — they will be excluded from analysis" + fi + DIFF_CONTENT=$(head -n 500 /tmp/pr_diff.txt \ + | grep -v -E '^[+-].*(password[[:space:]]*[=:"'"'"']|token[[:space:]]*[=:"'"'"']|secret[[:space:]]*[=:"'"'"']|api_key[[:space:]]*[=:"'"'"']|private_key[[:space:]]*[=:"'"'"']|Authorization:[[:space:]]|AKIA[A-Z0-9]{16}|xox[baprs]-[0-9]{10,13}-[0-9]{10,13}-[a-zA-Z0-9]{24}|gh[opsu]_[A-Za-z0-9_]{36,}|https?://[^@[:space:]]+:[^@[:space:]]+@)' \ + | grep -v -E '^[+-].*[A-Za-z0-9+/]{40,}={0,2}([^A-Za-z0-9+/=]|$)') + PROMPT="Analyze the following code changes for correctness, security issues, and best practices. PR Title: ${PR_TITLE}\n\nDiff:\n${DIFF_CONTENT}\n\nProvide a review with: 1) Summary, 2) Bugs/errors, 3) Security issues, 4) Best practices. Give specific comments with suggested fixes." + BODY=$(jq -cn \ + --arg model "qwen3-coder-next:latest" \ + --arg content "$PROMPT" \ + '{model: $model, messages: [{role: "user", content: $content}], stream: false}') + echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] PR #${PR_NUMBER} - Calling Ollama API (${#BODY} bytes)..." + HTTP_CODE=$(curl -s --max-time 120 --connect-timeout 30 \ + --retry 3 --retry-delay 5 --retry-connrefused --retry-max-time 120 \ + -o /tmp/ollama_response.json -w "%{http_code}" \ + -X POST "$OLLAMA_URL/chat/completions" \ + -H "Authorization: Bearer $OLLAMA_API_KEY" \ + -H "Content-Type: application/json" \ + -d "$BODY") + echo "HTTP status: $HTTP_CODE" + echo "Response file size: $(wc -c < /tmp/ollama_response.json) bytes" + if [ "$HTTP_CODE" != "200" ]; then + echo "ERROR: Ollama returned HTTP $HTTP_CODE" + cat /tmp/ollama_response.json + exit 1 + fi + if ! jq empty /tmp/ollama_response.json 2>/dev/null; then + echo "ERROR: Invalid JSON response from Ollama" + cat /tmp/ollama_response.json + exit 1 + fi + REVIEW=$(jq -r '.choices[0].message.content // empty' /tmp/ollama_response.json) + if [ -z "$REVIEW" ]; then + echo "ERROR: No content in Ollama response" + exit 1 + fi + echo "Review length: ${#REVIEW} chars" + echo "$REVIEW" > /tmp/pr_review.txt + + - name: Post review comment + if: always() && steps.diff.outputs.diff_size != '0' + shell: bash + env: + TF_TOKEN: ${{ secrets.TFT_GITEA_TOKEN }} + PR_NUMBER: ${{ github.event.pull_request.number }} + REPOSITORY: ${{ github.repository }} + run: | + set -euo pipefail + if [ -z "${TF_TOKEN:-}" ]; then + echo "ERROR: TFT_GITEA_TOKEN secret is not set" + exit 1 + fi + if [ -f "/tmp/pr_review.txt" ] && [ -s "/tmp/pr_review.txt" ]; then + REVIEW_BODY=$(head -c 65536 /tmp/pr_review.txt) + BODY=$(jq -n \ + --arg body "🤖 Automated PR Review:\n\n${REVIEW_BODY}\n\n---\n*this is an automated review from Ollama*" \ + '{body: $body, event: "COMMENT"}') + else + BODY=$(jq -n \ + '{body: "⚠️ Automated PR Review could not be completed — Ollama analysis failed or produced no output.", event: "COMMENT"}') + fi + HTTP_CODE=$(curl -s --max-time 30 --connect-timeout 10 \ + -o /tmp/review_post_response.json -w "%{http_code}" \ + -X POST "https://gogs.tftsr.com/api/v1/repos/${REPOSITORY}/pulls/${PR_NUMBER}/reviews" \ + -H "Authorization: Bearer $TF_TOKEN" \ + -H "Content-Type: application/json" \ + -d "$BODY") + echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] Post review HTTP status: $HTTP_CODE" + if [ "$HTTP_CODE" != "200" ] && [ "$HTTP_CODE" != "201" ]; then + echo "ERROR: Failed to post review (HTTP $HTTP_CODE)" + cat /tmp/review_post_response.json + exit 1 + fi + + - name: Cleanup + if: always() + shell: bash + run: rm -f /tmp/pr_diff.txt /tmp/ollama_response.json /tmp/pr_review.txt /tmp/review_post_response.json diff --git a/package.json b/package.json index 5679030b..63d46fe2 100644 --- a/package.json +++ b/package.json @@ -1,7 +1,7 @@ { "name": "tftsr", "private": true, - "version": "0.1.0", + "version": "0.2.50", "type": "module", "scripts": { "dev": "vite", diff --git a/src-tauri/Cargo.toml b/src-tauri/Cargo.toml index 6827b82a..aa83b3c3 100644 --- a/src-tauri/Cargo.toml +++ b/src-tauri/Cargo.toml @@ -1,6 +1,6 @@ [package] name = "trcaa" -version = "0.1.0" +version = "0.2.50" edition = "2021" [lib] diff --git a/src-tauri/tauri.conf.json b/src-tauri/tauri.conf.json index ebc18a9b..0141b39b 100644 --- a/src-tauri/tauri.conf.json +++ b/src-tauri/tauri.conf.json @@ -1,6 +1,6 @@ { "productName": "Troubleshooting and RCA Assistant", - "version": "0.2.49", + "version": "0.2.50", "identifier": "com.trcaa.app", "build": { "frontendDist": "../dist",