Merge pull request 'v47' (#47) from mitch into develop

Reviewed-on: #47

.editorconfig

@@ -0,0 +1,22 @@
+#https://editorconfig.org/
+#INI format
+
+root = true
+
+[*]
+charset = utf-8
+indent_style = tab
+indent_size = 4
+end_of_line = lf
+insert_final_newline = true
+trim_trailing_whitespace = true
+
+[*.yml]
+indent_style = space
+indent_size = 2
+
+[*.md]
+#EditorConfig for VS Code v0.16.4
+#Known Issues
+#trim_trailing_whitespace = false is not applied when user/workspace setting of files.trimTrailingWhitespace is set to true.
+trim_trailing_whitespace = false

.gitignore

@@ -1,3 +1,4 @@
 *.log
 .DS_Store
 .env
+.env.local

.woodpecker.yml

@@ -0,0 +1,102 @@
+# 全体像
+# PR と push で 別の処理 が走ります。
+#NOTE depends_on なし → 並列実行
+#WARN failure: ignore がないため、Drep が失敗すると パイプライン全体が ❌ になり、マージが止まる可能性があります。
+# pull_request イベント
+#     ├─ php-lint   … PHP 構文チェック（マージ前の CI）
+#     └─ ai-review  … Drep による AI コードレビュー
+#          ↑
+#     depends_on なし → 並列実行
+# push イベント（develop ブランチのみ）
+#     └─ deploy     … EC2 へ SSH してデプロイ確認
+
+steps:
+  # 疎通テスト
+  # hello:
+  #   image: alpine:latest
+  #   commands:
+  #     - echo "Woodpecker is working!"
+
+  # PHP構文チェック（merge前）
+  php-lint:
+    image: php:8.3-cli
+    commands:
+      - find . -name "*.php" -print0 | xargs -0 -n1 php -l
+    when:
+      event:
+        - pull_request
+
+  # AI コードレビュー（skip-ai-review ラベル付き PR はスキップ）
+  # 成功時に ai-reviewed ラベルを Gitea API で付与
+  ai-review:
+    image: ghcr.io/slb350/drep:latest
+    environment:
+      GITEA_TOKEN:
+        from_secret: gitea_token
+      DREP_LLM_API_KEY:
+        from_secret: drep_llm_api_key
+      OPENAI_API_KEY:
+        from_secret: drep_llm_api_key
+      DREP_LLM_ENDPOINT: https://openrouter.ai/api/v1
+      DREP_LLM_MODEL: nvidia/nemotron-3-ultra-550b-a55b:free
+    commands:
+      - |
+        case ",${CI_COMMIT_PULL_REQUEST_LABELS}," in
+          *",skip-ai-review,"*)
+            echo "★ skip-ai-review label detected — skipping AI review"
+            exit 0
+            ;;
+        esac
+
+        cat > /tmp/config.yaml <<EOF
+        gitea:
+          url: https://gitea.git.mitchecp.com
+          token: $${GITEA_TOKEN}
+          repositories:
+            - ${CI_REPO_OWNER}/*
+        llm:
+          enabled: true
+          endpoint: $${DREP_LLM_ENDPOINT}
+          api_key: $${DREP_LLM_API_KEY}
+          model: $${DREP_LLM_MODEL}
+          temperature: 0.2
+          timeout: 120
+          max_tokens: 4096
+        database_url: sqlite:////tmp/drep.db
+        documentation:
+          enabled: true
+          markdown_checks: false
+        EOF
+        export DREP_CONFIG=/tmp/config.yaml
+
+        echo "★ Running drep review for ${CI_REPO} PR #${CI_COMMIT_PULL_REQUEST}"
+        drep review "${CI_REPO}" "${CI_COMMIT_PULL_REQUEST}"
+
+        echo "★ Adding ai-reviewed label to PR #${CI_COMMIT_PULL_REQUEST}"
+        python3 ci/add-ai-reviewed-label.py
+    when:
+      event:
+        - pull_request
+
+  # 本番デプロイ
+  deploy:
+    image: alpine:latest
+
+    environment:
+      SSH_KEY:
+        from_secret: mitchecp_ssh_key
+
+    #WARN secret key(.pem) の追加は gitea ではなく woodpecker 側に必要。
+    #NOTE $$SSH_KEY は Woodpecker が $$ → $ に変換してから shell 実行（PID 展開ではない）
+    commands:
+      - apk add --no-cache openssh-client
+      - mkdir -p ~/.ssh
+      - echo "$$SSH_KEY" > ~/.ssh/mitchecp.pem
+      - chmod 600 ~/.ssh/mitchecp.pem
+      - ssh-keyscan gitea.git.mitchecp.com >> ~/.ssh/known_hosts
+      - ssh -i ~/.ssh/mitchecp.pem ec2-user@gitea.git.mitchecp.com "cd /home/ec2-user && touch woodpecker.created.develop.txt"
+    when:
+      branch:
+        - develop
+      event:
+        - push

ci/add-ai-reviewed-label.py

@@ -0,0 +1,82 @@
+#!/usr/bin/env python3
+"""Add ai-reviewed label to a Gitea PR after successful Drep review."""
+
+from __future__ import annotations
+
+import json
+import os
+import sys
+import urllib.error
+import urllib.request
+
+GITEA_URL = "https://gitea.git.mitchecp.com"
+LABEL_NAME = "ai-reviewed"
+REQUEST_TIMEOUT = 30
+
+
+def require_env(name: str) -> str:
+    value = os.environ.get(name, "").strip()
+    if not value:
+        print(f"ERROR: required environment variable {name!r} is not set", file=sys.stderr)
+        sys.exit(1)
+    return value
+
+
+def api_request(token: str, method: str, url: str, data: dict | None = None) -> dict | list:
+    headers = {"Authorization": f"token {token}"}
+    body = None
+    if data is not None:
+        headers["Content-Type"] = "application/json"
+        body = json.dumps(data).encode()
+
+    req = urllib.request.Request(url, data=body, headers=headers, method=method)
+    try:
+        with urllib.request.urlopen(req, timeout=REQUEST_TIMEOUT) as resp:
+            raw = resp.read().decode()
+            return json.loads(raw) if raw else {}
+    except urllib.error.HTTPError as exc:
+        detail = exc.read().decode(errors="replace")
+        print(f"ERROR: Gitea API {method} {url} failed ({exc.code}): {detail}", file=sys.stderr)
+        sys.exit(1)
+    except urllib.error.URLError as exc:
+        print(f"ERROR: Gitea API {method} {url} failed: {exc.reason}", file=sys.stderr)
+        sys.exit(1)
+
+
+def main() -> None:
+    token = require_env("GITEA_TOKEN")
+    owner = require_env("CI_REPO_OWNER")
+    repo = require_env("CI_REPO_NAME")
+    pr = require_env("CI_COMMIT_PULL_REQUEST")
+    base = f"{GITEA_URL}/api/v1/repos/{owner}/{repo}"
+
+    issue = api_request(token, "GET", f"{base}/issues/{pr}")
+    labels_on_pr = issue.get("labels", [])
+    if any(label.get("name") == LABEL_NAME for label in labels_on_pr):
+        print(f"Label {LABEL_NAME!r} already present on PR #{pr}")
+        return
+
+    repo_labels = api_request(token, "GET", f"{base}/labels")
+    label_id = next(
+        (label["id"] for label in repo_labels if label.get("name") == LABEL_NAME),
+        None,
+    )
+    if label_id is None:
+        created = api_request(
+            token,
+            "POST",
+            f"{base}/labels",
+            {
+                "name": LABEL_NAME,
+                "color": "0e8a16",
+                "description": "Drep AI review completed by Woodpecker",
+            },
+        )
+        label_id = created["id"]
+
+    api_request(token, "POST", f"{base}/issues/{pr}/labels", {"labels": [label_id]})
+    print(f"Added label {LABEL_NAME!r} to PR #{pr}")
+
+
+if __name__ == "__main__":
+    main()

index.php

@@ -0,0 +1,2 @@
+<?php
+echo "Hello, World! - v47";