deepseek-code-write.yml

name: DeepSeekCode Write

on:
  issue_comment:
    types: [created]
  pull_request_review:
    types: [submitted]
  pull_request_review_comment:
    types: [created]

permissions:
  contents: write
  pull-requests: write
  issues: write
  actions: read

jobs:
  write:
    name: DeepSeekCode PR fix or patch
    if: >-
      ${{
        vars.DEEPSEEK_CODE_WRITE_ENABLED == 'true' &&
        (
          (github.event_name == 'issue_comment' && (contains(github.event.comment.body, '@deepseek fix') || contains(github.event.comment.body, '@deepseek patch'))) ||
          (github.event_name == 'pull_request_review' && (contains(github.event.review.body, '@deepseek fix') || contains(github.event.review.body, '@deepseek patch'))) ||
          (github.event_name == 'pull_request_review_comment' && (contains(github.event.comment.body, '@deepseek fix') || contains(github.event.comment.body, '@deepseek patch')))
        )
      }}
    runs-on: ubuntu-latest
    env:
      DEEPSEEK_API_KEY: ${{ secrets.DEEPSEEK_API_KEY }}
      GH_TOKEN: ${{ github.token }}
      GITHUB_TOKEN: ${{ github.token }}
    steps:
      - name: Checkout DeepSeekCode
        uses: actions/checkout@v4

      - name: Install Rust toolchain
        uses: dtolnay/rust-toolchain@stable

      - name: Resolve PR target
        id: target
        if: ${{ env.DEEPSEEK_API_KEY != '' }}
        run: |
          set -euo pipefail
          cargo run --locked -- github action \
            --mode auto \
            --dry-run \
            --github-output \
            --require-mode fix \
            --require-mode patch \
            --trigger "@deepseek"

      - name: Resolve PR head
        id: pr
        if: ${{ env.DEEPSEEK_API_KEY != '' }}
        run: |
          set -euo pipefail
          cargo run --locked -- github pr-head "${{ steps.target.outputs.reference }}" \
            --repo-owner "${GITHUB_REPOSITORY%%/*}" \
            --github-output

      - name: Checkout PR head
        if: ${{ env.DEEPSEEK_API_KEY != '' }}
        uses: actions/checkout@v4
        with:
          ref: ${{ steps.pr.outputs.head_ref }}
          token: ${{ github.token }}

      - name: Run DeepSeekCode write bridge
        if: ${{ env.DEEPSEEK_API_KEY != '' }}
        run: cargo run --locked -- github action --mode auto --trigger "@deepseek"

      - name: Commit and push changes
        if: ${{ env.DEEPSEEK_API_KEY != '' }}
        run: |
          set -euo pipefail
          if git diff --quiet; then
            echo "DeepSeekCode produced no workspace changes."
            exit 0
          fi
          git config user.name "deepseek-code[bot]"
          git config user.email "deepseek-code[bot]@users.noreply.github.com"
          git add -A
          git commit -m "deepseek: apply requested PR update"
          git push origin "HEAD:${{ steps.pr.outputs.head_ref }}"

      - name: Explain disabled secret
        if: ${{ env.DEEPSEEK_API_KEY == '' }}
        run: |
          echo "DeepSeekCode write workflow skipped: configure the DEEPSEEK_API_KEY secret."