git pushが詰まるVM環境でGitHub REST APIを使ってcommit/pushする方法

#!/bin/bash
set -e
 
GITHUB_TOKEN="YOUR_GITHUB_TOKEN"
OWNER="your-username"
REPO="your-repo"
BRANCH="main"
COMMIT_MSG="Add: new article (JA+EN)"
 
# ── Step 1: 最新のHEAD SHAを取得 ──────────────────
HEAD_SHA=$(curl -sf \
  -H "Authorization: token ${GITHUB_TOKEN}" \
  "https://api.github.com/repos/${OWNER}/${REPO}/git/refs/heads/${BRANCH}" \
  | python3 -c "import sys,json; print(json.load(sys.stdin)['object']['sha'])")
 
BASE_TREE=$(curl -sf \
  -H "Authorization: token ${GITHUB_TOKEN}" \
  "https://api.github.com/repos/${OWNER}/${REPO}/git/commits/${HEAD_SHA}" \
  | python3 -c "import sys,json; print(json.load(sys.stdin)['tree']['sha'])")
 
echo "HEAD: ${HEAD_SHA}"
echo "BASE_TREE: ${BASE_TREE}"
 
# ── Step 2: blobを作成（変更ファイルごとに実行） ──
FILE_PATH="content/articles/ja/claude-code/my-article.mdx"
FILE_CONTENT=$(cat "${FILE_PATH}")
 
BLOB_SHA=$(curl -sf \
  -X POST \
  -H "Authorization: token ${GITHUB_TOKEN}" \
  -H "Content-Type: application/json" \
  "https://api.github.com/repos/${OWNER}/${REPO}/git/blobs" \
  -d "$(python3 -c "
import sys, json
content = open('${FILE_PATH}', 'r').read()
print(json.dumps({'content': content, 'encoding': 'utf-8'}))
")" | python3 -c "import sys,json; print(json.load(sys.stdin)['sha'])")
 
echo "BLOB: ${BLOB_SHA}"
 
# ── Step 3: treeを作成 ──────────────────────────────
TREE_SHA=$(curl -sf \
  -X POST \
  -H "Authorization: token ${GITHUB_TOKEN}" \
  -H "Content-Type: application/json" \
  "https://api.github.com/repos/${OWNER}/${REPO}/git/trees" \
  -d "$(python3 -c "
import json
tree = {
    'base_tree': '${BASE_TREE}',
    'tree': [{
        'path': '${FILE_PATH}',
        'mode': '100644',
        'type': 'blob',
        'sha': '${BLOB_SHA}'
    }]
}
print(json.dumps(tree))
")" | python3 -c "import sys,json; print(json.load(sys.stdin)['sha'])")
 
echo "TREE: ${TREE_SHA}"
 
# ── Step 4: commitを作成 ───────────────────────────
COMMIT_SHA=$(curl -sf \
  -X POST \
  -H "Authorization: token ${GITHUB_TOKEN}" \
  -H "Content-Type: application/json" \
  "https://api.github.com/repos/${OWNER}/${REPO}/git/commits" \
  -d "$(python3 -c "
import json
commit = {
    'message': '${COMMIT_MSG}',
    'tree': '${TREE_SHA}',
    'parents': ['${HEAD_SHA}']
}
print(json.dumps(commit))
")" | python3 -c "import sys,json; print(json.load(sys.stdin)['sha'])")
 
echo "COMMIT: ${COMMIT_SHA}"
 
# ── Step 5: refを更新（ブランチを進める） ─────────
curl -sf \
  -X PATCH \
  -H "Authorization: token ${GITHUB_TOKEN}" \
  -H "Content-Type: application/json" \
  "https://api.github.com/repos/${OWNER}/${REPO}/git/refs/heads/${BRANCH}" \
  -d "{\"sha\": \"${COMMIT_SHA}\"}" > /dev/null
 
echo "✅ Push完了: ${COMMIT_SHA}"

# 複数ファイルをまとめてtreeに追加する例
python3 -c "
import json
 
# JA版のblob SHAとEN版のblob SHAを事前に取得しておく
tree_items = [
    {
        'path': 'content/articles/ja/claude-code/my-article.mdx',
        'mode': '100644',
        'type': 'blob',
        'sha': '${BLOB_JA_SHA}'
    },
    {
        'path': 'content/articles/en/claude-code/my-article.mdx',
        'mode': '100644',
        'type': 'blob',
        'sha': '${BLOB_EN_SHA}'
    }
]
 
payload = {
    'base_tree': '${BASE_TREE}',
    'tree': tree_items
}
print(json.dumps(payload))
"

# ❌ base_tree なし → 他のファイルが全て消える
tree = {'tree': [{'path': FILE, 'mode': '100644', 'type': 'blob', 'sha': BLOB}]}
 
# ✅ base_tree あり → 既存ツリーに差分を重ねる
tree = {'base_tree': BASE_TREE, 'tree': [{'path': FILE, ...}]}

tree_items = [
    # 既存ファイルを削除
    {'path': 'content/articles/ja/claude-code/old.mdx',
     'mode': '100644', 'type': 'blob', 'sha': None},
    # 新しいパスに同じ内容を追加（= リネーム）
    {'path': 'content/articles/ja/claude-code/new.mdx',
     'mode': '100644', 'type': 'blob', 'sha': BLOB_SHA},
]

push_article() {
  local repo_path="$1"
  
  # git CLIを試みる
  if cd "$repo_path" && git push origin main 2>/dev/null; then
    echo "✅ git push成功"
    return 0
  fi
  
  echo "⚠️ git push失敗 → REST APIにフォールバック"
  # REST API pushの処理を実行...
}

# PATCH 後に検証する
ACTUAL=$(curl -sf -H "Authorization: token ${GITHUB_TOKEN}" \
  "https://api.github.com/repos/${OWNER}/${REPO}/git/refs/heads/${BRANCH}" \
  | python3 -c "import sys,json; print(json.load(sys.stdin)['object']['sha'])")
 
if [ "${ACTUAL}" = "${COMMIT_SHA}" ]; then
  echo "✅ 検証OK: ブランチは ${COMMIT_SHA} に進みました"
else
  echo "❌ 不一致: 期待 ${COMMIT_SHA} / 実際 ${ACTUAL}"
fi