feat: add server_url input to override auto-detected API server URL

Allows specifying internal routing addresses for Gitea/GitHub API calls (e.g., http://server:3000), addressing container network restrictions when external URLs are not routable.

action.yml

@@ -18,6 +18,10 @@ inputs:
     description: "Custom API base URL (for OpenAI-compatible providers). Ignored for built-in providers."
     required: false
     default: ""
+  server_url:
+    description: "Override the Gitea/GitHub server URL used for API calls (e.g. http://server:3000 for internal routing inside the runner). Defaults to the auto-detected server URL."
+    required: false
+    default: ""
   token:
     description: "Git platform token for posting PR comments"
     required: true

entrypoint.sh

@@ -11,6 +11,7 @@ export PI_API_KEY="${INPUT_API_KEY}"
 export PI_PROVIDER="${INPUT_PROVIDER:-zai}"
 export PI_MODEL="${INPUT_MODEL:-glm-5.1}"
 export PI_BASE_URL="${INPUT_BASE_URL:-}"
+export PI_SERVER_URL="${INPUT_SERVER_URL:-}"
 export PI_TOOLS="${INPUT_TOOLS:-read,grep,find,ls}"
 export PI_REVIEW_PROMPT="${INPUT_REVIEW_PROMPT:-}"
 export PI_EXCLUDE="${INPUT_EXCLUDE_PATTERNS:-*.lock package-lock.json yarn.lock pnpm-lock.yaml *.min.js *.min.css *.map}"

scripts/review.sh

@@ -70,94 +70,148 @@ chmod 600 "$AUTH_FILE"
 echo "Configured provider: ${PI_PROVIDER}"
 echo "::endgroup::"
 
-# ─── Phase 2: Generate diff ───────────────────────────────────────────────────
+# ─── Phase 2: Fetch diff via API ───────────────────────────────────────────────
-echo "::group::Generate diff"
+echo "Generate diff"
 
-# Configure git auth using the provided token, so we can fetch inside Docker.
+# Git operations inside the Docker container have no auth credentials
-# actions/checkout@v5 stores credentials in $RUNNER_TEMP which isn't mounted
+# (actions/checkout@v5 stores them in $RUNNER_TEMP, which isn't mounted).
-# into the container, so we re-authenticate using the token input.
+# Instead, we get the diff directly from the Gitea/GitHub API using the token
-if [ -n "${PI_TOKEN}" ]; then
+# we already have for posting comments.
-  REMOTE_URL=$(git remote get-url origin 2>/dev/null || echo "")
+
-  if echo "$REMOTE_URL" | grep -q '://'; then
+# Gitea Actions mirrors GitHub Actions env vars ($GITHUB_*) and exposes the
-    # HTTP(S) remote: inject token into URL
+# event payload at $GITHUB_EVENT_PATH. There is no flat $GITEA_EVENT_*
-    # e.g. https://git.example.com/owner/repo.git → https://token:xxx@git.example.com/owner/repo.git
+# variable for the PR number, so we parse it out of the event JSON.
-    PROTOCOL=$(echo "$REMOTE_URL" | sed -E 's|^(https?://).*|\1|')
+
-    HOST_PATH=$(echo "$REMOTE_URL" | sed -E 's|^https?://||')
+REPO="${GITHUB_REPOSITORY:-${GITEA_REPOSITORY:-}}"
-    git remote set-url origin "${PROTOCOL}token:${PI_TOKEN}@${HOST_PATH}"
+
-    echo "Git auth configured via remote URL"
+# Detect Gitea vs GitHub. Gitea sets $GITHUB_SERVER_URL too, so the only
-  fi
+# reliable signal is $GITEA_ACTIONS (or a non-github.com server URL).
+#
+# $PI_SERVER_URL (server_url input) overrides the auto-detected server URL.
+# Gitea reports its *external* hostname (e.g. git.example.com), which may not
+# be routable from inside the runner's container network. Setting server_url
+# to the internal address (e.g. http://server:3000) fixes API calls.
+SERVER_URL="${PI_SERVER_URL:-${GITHUB_SERVER_URL:-${GITEA_SERVER_URL:-}}}"
+if [ -n "${GITEA_ACTIONS:-}" ] || { [ -n "$SERVER_URL" ] && [ "${SERVER_URL#*github.com}" = "$SERVER_URL" ]; }; then
+  API_BASE="${SERVER_URL}/api/v1"
+  PLATFORM="gitea"
+  echo "Platform: Gitea (${SERVER_URL})"
+else
+  API_BASE="${GITHUB_API_URL:-https://api.github.com}"
+  PLATFORM="github"
+  echo "Platform: GitHub"
 fi
 
-# Now find the base branch. With auth configured, fetch should work.
+# Resolve PR number from the event payload.
-BASE=""
+PR_NUMBER=""
-
+if [ -n "${GITHUB_EVENT_PATH:-}" ] && [ -f "${GITHUB_EVENT_PATH}" ]; then
-# 1. Check if remote tracking refs already exist (from a pre-step)
+  PR_NUMBER=$(node -e "
-for candidate in origin/main origin/master; do
+    try {
-  if git rev-parse --verify "$candidate" >/dev/null 2>&1; then
+      const e = require(process.env.GITHUB_EVENT_PATH);
-    BASE="$candidate"
+      const n = (e.pull_request && e.pull_request.number) || e.number || '';
-    echo "Found existing ref: ${BASE}"
+      process.stdout.write(String(n || ''));
-    break
+    } catch { process.stdout.write(''); }
-  fi
+  ")
-done
-
-# 2. Try Gitea/GitHub event context for target branch name
-if [ -z "$BASE" ]; then
-  TARGET_BRANCH="${GITEA_BASE_REF:-${GITHUB_BASE_REF:-}}"
-  if [ -n "${TARGET_BRANCH}" ] && git rev-parse --verify "origin/${TARGET_BRANCH}" >/dev/null 2>&1; then
-    BASE="origin/${TARGET_BRANCH}"
-    echo "Found target branch from event: ${BASE}"
-  fi
 fi
 
-# 3. Fetch the base branch (now works with auth)
+echo "Repo: ${REPO}, PR: ${PR_NUMBER}"
-if [ -z "$BASE" ]; then
+echo "DEBUG: PLATFORM=${PLATFORM} API_BASE=${API_BASE} EVENT=${GITHUB_EVENT_PATH:-}"
-  echo "No base ref found locally. Fetching..."
+
-  git fetch --unshallow origin 2>/dev/null || true
+if [ -z "$PR_NUMBER" ]; then
-  for branch in main master; do
+  echo "Not a pull request event. Skipping review."
-    if git fetch origin "+refs/heads/${branch}:refs/remotes/origin/${branch}" 2>/dev/null; then
+  exit 0
-      BASE="origin/${branch}"
-      echo "Fetched: ${BASE}"
-      break
-    fi
-  done
-  # Also try the target branch from event context
-  if [ -z "$BASE" ] && [ -n "${TARGET_BRANCH}" ]; then
-    if git fetch origin "+refs/heads/${TARGET_BRANCH}:refs/remotes/origin/${TARGET_BRANCH}" 2>/dev/null; then
-      BASE="origin/${TARGET_BRANCH}"
-      echo "Fetched target: ${BASE}"
-    fi
-  fi
 fi
 
-if [ -z "$BASE" ]; then
+# Fetch diff via API — works regardless of git auth inside the container.
-  echo "::error::Could not determine base branch. Ensure 'token' input has repo read access."
+# Gitea: GET /repos/{owner}/{repo}/pulls/{index}.diff
-  exit 1
+# GitHub: GET /repos/{owner}/{repo}/pulls/{index} (Accept: application/diff)
-fi
+node -e "
+const http = require('http');
+const https = require('https');
 
-echo "Base ref: ${BASE} -> $(git rev-parse --short "${BASE}" 2>/dev/null || echo 'NOT FOUND')"
+const apiBase = '${API_BASE}';
-echo "HEAD:     $(git rev-parse --short HEAD)"
+const repo = '${REPO}';
-echo "Files changed:"
+const prNumber = '${PR_NUMBER}';
-git diff --stat "${BASE}...HEAD" 2>/dev/null | tail -3 || echo "(could not stat diff)"
+const token = '${PI_TOKEN}';
+const platform = '${PLATFORM}';
+const maxBytes = ${PI_MAX_DIFF:-80000};
 
-# Build exclude pathspecs
+function fetchDiff() {
-EXCLUDE_ARGS=""
+  return new Promise((resolve, reject) => {
-for pattern in $PI_EXCLUDE; do
+    // Gitea:  GET {api}/repos/{owner}/{repo}/pulls/{n}.diff
-  EXCLUDE_ARGS="$EXCLUDE_ARGS ':!$pattern'"
+    // GitHub: GET {api}/repos/{owner}/{repo}/pulls/{n} with Accept: application/vnd.github.v3.diff
-done
+    const path = platform === 'gitea'
+      ? '/repos/' + repo + '/pulls/' + prNumber + '.diff'
+      : '/repos/' + repo + '/pulls/' + prNumber;
 
-eval "git diff ${BASE}...HEAD ${EXCLUDE_ARGS}" > /tmp/pi-diff.txt 2>/dev/null || true
+    const url = new URL(apiBase + path);
+    const transport = url.protocol === 'http:' ? http : https;
 
-# Truncate if needed
+    const headers = {
-if [ "${PI_MAX_DIFF}" -gt 0 ]; then
+      'Authorization': 'token ' + token,
-  head -c "${PI_MAX_DIFF}" /tmp/pi-diff.txt > /tmp/pi-diff-trunc.txt
+      'User-Agent': 'pi-code-review',
-  mv /tmp/pi-diff-trunc.txt /tmp/pi-diff.txt
+      'Accept': platform === 'gitea' ? 'text/plain' : 'application/vnd.github.v3.diff',
-fi
+    };
 
-DIFF_SIZE=$(wc -c < /tmp/pi-diff.txt || echo 0)
+    const options = {
-echo "Diff size: ${DIFF_SIZE} bytes"
+      hostname: url.hostname,
-echo "::endgroup::"
+      port: url.port || (url.protocol === 'http:' ? 80 : 443),
+      path: url.pathname,
+      method: 'GET',
+      headers,
+    };
 
-if [ "${DIFF_SIZE}" -eq 0 ]; then
+    const req = transport.request(options, (res) => {
+      if (res.statusCode < 200 || res.statusCode >= 300) {
+        let body = '';
+        res.on('data', (c) => { body += c; });
+        res.on('end', () => { reject(new Error('API ' + res.statusCode + ' for ' + url.href + ': ' + body.slice(0, 200))); });
+        return;
+      }
+
+      let data = '';
+      res.on('data', (chunk) => { data += chunk; });
+      res.on('end', () => { resolve(data); });
+    });
+    req.on('error', (e) => { reject(e); });
+    req.end();
+  });
+}
+
+fetchDiff().then((diff) => {
+  const fs = require('fs');
+
+  // Filter out excluded patterns (lockfiles, generated code, etc.)
+  const excludePatterns = '${PI_EXCLUDE}'.split(' ').filter(Boolean);
+  if (excludePatterns.length > 0) {
+    const lines = diff.split('\\n');
+    const filtered = [];
+    let skipFile = false;
+    for (const line of lines) {
+      if (line.startsWith('diff --git')) {
+        skipFile = excludePatterns.some(p => {
+          const glob = p.replace(/\\./g, '\\\\.').replace(/\\*/g, '.*');
+          return new RegExp(glob).test(line);
+        });
+      }
+      if (!skipFile) filtered.push(line);
+    }
+    diff = filtered.join('\\n');
+  }
+
+  if (maxBytes > 0 && diff.length > maxBytes) {
+    diff = diff.slice(0, maxBytes) + '\\n... (truncated at ' + maxBytes + ' bytes)';
+  }
+
+  fs.writeFileSync('/tmp/pi-diff.txt', diff);
+  console.log('Diff fetched: ' + diff.length + ' bytes');
+}).catch((e) => {
+  console.error('Failed to fetch diff: ' + e.message);
+  process.exit(1);
+});
+"
+
+if [ ! -s /tmp/pi-diff.txt ]; then
   echo "No changes to review. Skipping."
   exit 0
 fi
@@ -262,17 +316,7 @@ echo "::endgroup::"
 # ─── Phase 4: Post comment ────────────────────────────────────────────────────
 echo "::group::Post review comment"
 
-# Detect Gitea vs GitHub
+# API_BASE / REPO / PR_NUMBER were resolved in Phase 2.
-if [ -n "${GITEA_SERVER_URL:-}" ]; then
-  API_BASE="${GITEA_SERVER_URL}/api/v1"
-  PR_NUMBER="${GITEA_EVENT_PULL_REQUEST_NUMBER:-}"
-  REPO="${GITEA_REPOSITORY:-}"
-else
-  API_BASE="${GITHUB_API_URL:-https://api.github.com}"
-  PR_NUMBER="${GITHUB_EVENT_PULL_REQUEST_NUMBER:-}"
-  REPO="${GITHUB_REPOSITORY:-}"
-fi
-
 if [ -z "$PR_NUMBER" ]; then
   echo "Not a pull request event. Review written to /tmp/pi-review.md only."
   echo "::endgroup::"