ci: fix anno apply/reject workflows (yaml valid)

.gitea/workflows/anno-reject.yml

@@ -25,46 +25,44 @@ jobs:
           test -f "$EVENT_JSON" || { echo "❌ Missing $EVENT_JSON"; exit 1; }
 
           node --input-type=module - <<'NODE' > /tmp/reject.env
-import fs from "node:fs";
+          import fs from "node:fs";
 
-const ev = JSON.parse(fs.readFileSync(process.env.EVENT_JSON, "utf8"));
-const repoObj = ev?.repository || {};
-const cloneUrl =
-  repoObj?.clone_url ||
-  (repoObj?.html_url ? (repoObj.html_url.replace(/\/$/,"") + ".git") : "");
-if (!cloneUrl) throw new Error("No repository url");
+          const ev = JSON.parse(fs.readFileSync(process.env.EVENT_JSON, "utf8"));
+          const repoObj = ev?.repository || {};
+          const cloneUrl =
+            repoObj?.clone_url ||
+            (repoObj?.html_url ? (repoObj.html_url.replace(/\/$/,"") + ".git") : "");
+          if (!cloneUrl) throw new Error("No repository url");
 
-let owner =
-  repoObj?.owner?.login ||
-  repoObj?.owner?.username ||
-  (repoObj?.full_name ? repoObj.full_name.split("/")[0] : "");
-let repo =
-  repoObj?.name ||
-  (repoObj?.full_name ? repoObj.full_name.split("/")[1] : "");
+          let owner =
+            repoObj?.owner?.login ||
+            repoObj?.owner?.username ||
+            (repoObj?.full_name ? repoObj.full_name.split("/")[0] : "");
+          let repo =
+            repoObj?.name ||
+            (repoObj?.full_name ? repoObj.full_name.split("/")[1] : "");
 
-if (!owner || !repo) {
-  const m = cloneUrl.match(/[:/](?<o>[^/]+)\/(?<r>[^/]+?)(?:\.git)?$/);
-  if (m?.groups) { owner = owner || m.groups.o; repo = repo || m.groups.r; }
-}
-if (!owner || !repo) throw new Error("Cannot infer owner/repo");
+          if (!owner || !repo) {
+            const m = cloneUrl.match(/[:/](?<o>[^/]+)\/(?<r>[^/]+?)(?:\.git)?$/);
+            if (m?.groups) { owner = owner || m.groups.o; repo = repo || m.groups.r; }
+          }
+          if (!owner || !repo) throw new Error("Cannot infer owner/repo");
 
-const issueNumber = ev?.issue?.number || ev?.issue?.index;
-if (!issueNumber) throw new Error("No issue number");
+          const issueNumber = ev?.issue?.number || ev?.issue?.index;
+          if (!issueNumber) throw new Error("No issue number");
 
-const labelName = ev?.label?.name || ev?.label || "";
+          const labelName = ev?.label?.name || ev?.label || "";
+          const u = new URL(cloneUrl);
 
-const u = new URL(cloneUrl);
-const apiBase = u.origin;
-
-function sh(s){ return JSON.stringify(String(s)); }
-process.stdout.write([
-  `OWNER=${sh(owner)}`,
-  `REPO=${sh(repo)}`,
-  `ISSUE_NUMBER=${sh(issueNumber)}`,
-  `LABEL_NAME=${sh(labelName)}`,
-  `API_BASE=${sh(apiBase)}`
-].join("\n") + "\n");
-NODE
+          function sh(s){ return JSON.stringify(String(s)); }
+          process.stdout.write([
+            `OWNER=${sh(owner)}`,
+            `REPO=${sh(repo)}`,
+            `ISSUE_NUMBER=${sh(issueNumber)}`,
+            `LABEL_NAME=${sh(labelName)}`,
+            `API_BASE=${sh(u.origin)}`
+          ].join("\n") + "\n");
+          NODE
 
       - name: Gate on label state/rejected
         run: |
@@ -85,7 +83,7 @@ NODE
           test -n "${FORGE_TOKEN:-}" || { echo "❌ Missing secret FORGE_TOKEN"; exit 1; }
 
           MSG="❌ Ticket #${ISSUE_NUMBER} refusé (label state/rejected)."
-          PAYLOAD="$(node --input-type=module -e 'console.log(JSON.stringify({body: process.env.MSG}))' MSG="$MSG")"
+          PAYLOAD="$(node --input-type=module -e 'console.log(JSON.stringify({body: process.argv[1]||""}))' "$MSG")"
 
           curl -fsS -X POST \
             -H "Authorization: token $FORGE_TOKEN" \
@@ -97,6 +95,4 @@ NODE
             -H "Authorization: token $FORGE_TOKEN" \
             -H "Content-Type: application/json" \
             "$API_BASE/api/v1/repos/$OWNER/$REPO/issues/$ISSUE_NUMBER" \
-            --data-binary '{"state":"closed"}'
-
-          echo "✅ closed #$ISSUE_NUMBER"
+            --data-binary '{"state":"closed"}'