agents.datum.net/.github/workflows/ci.yml at 3abc0b81b90d56b47d730a8b16ca299e074882f8 · datum-cloud/agents.datum.net · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
name: CI

on:
  pull_request:
  push:
    branches: [ main ]
    paths-ignore:
      - "docs/**"
      - "README.md"
      - "agents-datum.md"
  release:
    types: [ "published" ]

concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

env:
  BUN_CACHE: ~/.bun/install/cache

jobs:
  # ─── Install ────────────────────────────────────────────────
  install:
    name: Install Dependencies
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v6
      - uses: oven-sh/setup-bun@v2
        with: { bun-version: latest }
      - uses: actions/cache@v5
        id: cache-deps
        with:
          path: |
            ${{ env.BUN_CACHE }}
            **/node_modules
          key: ${{ runner.os }}-deps-${{ hashFiles('**/bun.lock', '**/package.json') }}
      - if: steps.cache-deps.outputs.cache-hit != 'true'
        run: bun install --frozen-lockfile

  # ─── Quality ────────────────────────────────────────────────
  lint:
    name: Lint & Format
    needs: install
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v6
      - uses: oven-sh/setup-bun@v2
      - uses: actions/cache@v5
        with:
          path: |
            ${{ env.BUN_CACHE }}
            **/node_modules
          key: ${{ runner.os }}-deps-${{ hashFiles('**/bun.lock', '**/package.json') }}
      - run: bun run lint && bun run format:check

  typecheck:
    name: Type Check
    needs: install
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v6
      - uses: oven-sh/setup-bun@v2
        with: { bun-version: latest }
      - uses: actions/cache@v5
        with:
          path: |
            ${{ env.BUN_CACHE }}
            **/node_modules
          key: ${{ runner.os }}-deps-${{ hashFiles('**/bun.lock', '**/package.json') }}
      - run: bun run typecheck

  build:
    name: Build
    needs: [ lint, typecheck ]
    runs-on: ubuntu-latest
    if: ${{ !failure() && !cancelled() }}
    steps:
      - uses: actions/checkout@v6
      - uses: oven-sh/setup-bun@v2
        with: { bun-version: latest }
      - uses: actions/cache@v5
        with:
          path: |
            ${{ env.BUN_CACHE }}
            **/node_modules
          key: ${{ runner.os }}-deps-${{ hashFiles('**/bun.lock', '**/package.json') }}
      - run: bun run build

  # ─── Status Gate ────────────────────────────────────────────
  status-check:
    name: Final Status Check
    needs: [ install, lint, typecheck, build ]
    if: always()
    runs-on: ubuntu-latest
    steps:
      - name: Check Workflow Status
        run: |
          if [[ "${{ contains(needs.*.result, 'failure') }}" == "true" ]]; then
            echo "❌ One or more jobs failed"
            exit 1
          elif [[ "${{ contains(needs.*.result, 'cancelled') }}" == "true" ]]; then
            echo "⚠️ One or more jobs were cancelled"
            exit 1
          else
            echo "✅ All jobs passed"
          fi

  # ─── Publish (only after all checks pass) ───────────────────
  publish-container-image:
    name: Publish Container Image
    needs: [ status-check ]
    if: ${{ !failure() && !cancelled() }}
    permissions:
      id-token: write
      contents: read
      packages: write
      attestations: write
    uses: datum-cloud/actions/.github/workflows/publish-docker.yaml@v1.14.0
    with:
      image-name: agents-datum-net
    secrets: inherit

  publish-kustomize-bundles:
    name: Publish Kustomize Bundles
    needs: [ publish-container-image ]
    if: ${{ !failure() && !cancelled() }}
    permissions:
      id-token: write
      contents: read
      packages: write
    uses: datum-cloud/actions/.github/workflows/publish-kustomize-bundle.yaml@v1.14.0
    with:
      bundle-name: ghcr.io/datum-cloud/agents-datum-net-kustomize
      bundle-path: config
      image-overlays: config/base
      image-name: ghcr.io/datum-cloud/agents-datum-net
    secrets: inherit