NiakVIO/.github/workflows/availability.yml at e0c0877987ab7f6e37aab4b47f4c77687bc8761b · niakw/NiakVIO · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
name: Check published provider availability

on:
  workflow_dispatch:
  schedule:
    # Six low-cost diagnostic checks per day. GitHub schedules use UTC.
    - cron: "23 */4 * * *"

permissions:
  contents: read

concurrency:
  group: nuvio-provider-availability
  cancel-in-progress: true

jobs:
  check:
    name: Probe current published providers
    runs-on: ubuntu-latest
    timeout-minutes: 35
    permissions:
      contents: read

    steps:
      - name: Checkout without persisted credentials
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
        with:
          fetch-depth: 1
          persist-credentials: false

      - name: Set up Python
        uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
        with:
          python-version: "3.12"

      - name: Set up Node.js
        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
        with:
          node-version: "24"
          package-manager-cache: false

      - name: Install pinned direct runtime dependencies without lifecycle scripts
        run: |
          if [ -f package-lock.json ]; then
            npm ci --ignore-scripts --no-audit --no-fund
          else
            npm install --ignore-scripts --no-audit --no-fund --package-lock=false
          fi

      - name: Stage current published providers
        run: python scripts/stage_published.py

      - name: Lock staged provider code against modification
        run: |
          sudo chown -R root:root staging
          sudo chmod -R a-w staging

      - name: Run low-cost availability diagnostics
        env:
          NUVIO_HEALTH_OUTPUT: health-output
        run: node scripts/health_check.mjs --availability

      - name: Upload diagnostic result
        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
        with:
          name: nuvio-availability-${{ github.run_id }}
          path: health-output/health-results.json
          retention-days: 2
          if-no-files-found: error

  report:
    name: Update diagnostic reports only
    needs: check
    runs-on: ubuntu-latest
    timeout-minutes: 12
    permissions:
      contents: write

    steps:
      - name: Checkout current published repository
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
        with:
          fetch-depth: 0

      - name: Set up Python
        uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
        with:
          python-version: "3.12"

      - name: Download availability result
        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
        with:
          name: nuvio-availability-${{ github.run_id }}
          path: checked-artifact

      - name: Update reports without applying manifest toggles
        env:
          NUVIO_HEALTH_RESULTS: checked-artifact/health-results.json
        run: |
          cp manifest.json "$RUNNER_TEMP/manifest.before.json"
          cp vf/manifest.json "$RUNNER_TEMP/vf.before.json"
          python scripts/update_availability.py
          rm -f manifest.next.json
          cmp -s manifest.json "$RUNNER_TEMP/manifest.before.json"
          cmp -s vf/manifest.json "$RUNNER_TEMP/vf.before.json"

      - name: Publish diagnostic reports
        shell: bash
        run: |
          set -euo pipefail
          git config user.name "github-actions[bot]"
          git config user.email "41898282+github-actions[bot]@users.noreply.github.com"
          git add availability-report.json availability-history.json
          if git diff --cached --quiet; then
            echo "Availability reports are unchanged."
            exit 0
          fi
          git commit -m "chore: update provider availability diagnostics"
          git reset --hard HEAD
          git clean -fd
          for attempt in 1 2 3 4 5; do
            git fetch origin main
            if git rebase origin/main && git push origin HEAD:main; then
              exit 0
            fi
            git rebase --abort || true
            sleep $((attempt * 2))
          done
          exit 1