main.ts

import * as core from '@actions/core'
import * as github from '@actions/github'
import {features, Octokit, optional, required} from '../lib'
import {ForbiddenError} from '../lib/api'
import {approve as approveFromServer} from '../lib/github'
import {track} from '../lib/track'
import {list as listMessages} from '../lib/jobs/messages'

const jobID = optional('codeball-job-id')
const shouldApprove = required('approve') === 'true'
const githubToken = required('GITHUB_TOKEN')
const octokit = new Octokit({auth: githubToken})
const approvalMessage = required('message')

const defaultMessages = [
  `> [[dashboard](https://codeball.ai/${process.env.GITHUB_REPOSITORY})]`
]

const getServerSideMessages = (jobId: string) =>
  listMessages(jobId).then(messages => [
    ...messages.map(message => message.text)
  ])

const getMessages = async (jobId: string | undefined): Promise<string[]> => {
  const messages = jobId
    ? await getServerSideMessages(jobId).catch(() => defaultMessages)
    : defaultMessages
  return shouldApprove ? [approvalMessage, ...messages] : messages
}

const approveFromActions = async (params: {
  owner: string
  repo: string
  pull_number: number
  commit_id: string
  body: string
  event: 'APPROVE' | 'COMMENT'
}) => {
  const existingReviews = await octokit.pulls
    .listReviews({
      owner: params.owner,
      repo: params.repo,
      pull_number: params.pull_number
    })
    .catch(e => {
      throw new Error(`failed to current existing reviews ${e}`)
    })
    .then(r => r.data)

  const previousReviews = existingReviews
    .filter(r => r.user?.type === 'Bot')
    .sort(
      (a, b) =>
        new Date(a.submitted_at ?? 0).getTime() -
        new Date(b.submitted_at ?? 0).getTime()
    )
  const latestReview = previousReviews.slice(-1).at(0)

  const latestReviewExists = latestReview !== undefined
  const latestReviewIsApproval = latestReview?.state === 'APPROVED'

  if (latestReviewExists && shouldApprove) {
    await octokit.pulls.createReview(params).catch(e => {
      throw new Error(`failed to create review ${e}`)
    })
  } else if (latestReviewExists && !shouldApprove && latestReviewIsApproval) {
    await octokit.pulls
      .dismissReview({
        review_id: latestReview.id,
        owner: params.owner,
        repo: params.repo,
        pull_number: params.pull_number,
        message: params.body
      })
      .catch(e => {
        throw new Error(`failed to dismiss review ${e}`)
      })
  } else if (!latestReviewExists && shouldApprove) {
    await octokit.pulls.createReview(params).catch(e => {
      throw new Error(`failed to create review ${e}`)
    })
  }
}

async function run(): Promise<void> {
  const pullRequestURL = github.context.payload?.pull_request?.html_url
  if (!pullRequestURL) throw new Error('No pull request URL found')

  const pullRequestNumber = github.context.payload?.pull_request?.number
  if (!pullRequestNumber) throw new Error('No pull request number found')

  const commitId = github.context.payload.pull_request?.head.sha
  if (!commitId) throw new Error('No commit ID found')

  const repoOwner = github.context.payload.repository?.owner.login
  if (!repoOwner) throw new Error('No repo owner found')

  const repoName = github.context.payload.repository?.name
  if (!repoName) throw new Error('No repo name found')

  const reviewMessage = (await getMessages(jobID)).join('\n\n')

  const pr = await octokit.pulls
    .get({
      owner: repoOwner,
      repo: repoName,
      pull_number: pullRequestNumber
    })
    .then(r => r.data)

  const isPrivate = pr.base.repo.private
  const isFromFork = pr.head.repo?.fork
  const isToFork = pr.base.repo.fork

  const feats = await features({jobID})

  if (!feats.approve) {
    core.error(
      'Unable to run this action as the feature is not available for your organization. Please upgrade your Codeball plan, or contact support@codeball.ai'
    )
    return
  }

  await approveFromActions({
    owner: repoOwner,
    repo: repoName,
    pull_number: pullRequestNumber,
    commit_id: commitId,
    body: reviewMessage,
    event: feats.approve ? 'APPROVE' : 'COMMENT'
  }).catch(async error => {
    core.error(error)

    if (
      error instanceof Error &&
      error.message === 'Resource not accessible by integration'
    ) {
      // If the token is not allowed to create reviews (for example it's a pull request from a public fork),
      // we can try to approve the pull request from the backend with the app token.
      return approveFromServer({
        link: pullRequestURL,
        message: reviewMessage,
        approve: shouldApprove
      }).catch(error => {
        if (error.name === ForbiddenError.name) {
          throw new Error(
            !isPrivate && isFromFork && !isToFork
              ? 'Codeball Approver failed to access GitHub. Install https://github.com/apps/codeball-ai-writer to the base repository to give Codeball permission to approve Pull Requests.'
              : 'Codeball Approver failed to access GitHub. Check the "GITHUB_TOKEN Permissions" of this job and make sure that the job has WRITE permissions to Pull Requests.'
          )
        }
        throw error
      })
    } else {
      throw error
    }
  })
}

run()
  .then(async () => await track({jobID, actionName: 'approver'}))
  .catch(async error => {
    if (error instanceof Error) {
      await track({jobID, actionName: 'approver', error: error.message})
      core.setFailed(error.message)
    }
  })