ci: Split CI steps

.github/workflows/ci.yml

@@ -11,52 +11,134 @@ permissions:
   packages: write
 
 jobs:
-  ci:
-    name: Build & Test
-    runs-on: ubuntu-latest
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v4
+  # Rust Components
+  confidence-resolver:
+    uses: ./.github/workflows/docker-build.yml
+    secrets: inherit
+    with:
+      job-name: Confidence Resolver (Rust)
+      targets: confidence-resolver.test,confidence-resolver.lint
 
-      - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+  wasm-msg:
+    uses: ./.github/workflows/docker-build.yml
+    secrets: inherit
+    with:
+      job-name: WASM Message (Rust)
+      targets: wasm-msg.test,wasm-msg.lint
 
-      - name: Login to GitHub Container Registry
-        if: github.event_name == 'push'
-        uses: docker/login-action@v3
-        with:
-          registry: ghcr.io
-          username: ${{ github.actor }}
-          password: ${{ secrets.GITHUB_TOKEN }}
+  wasm-rust-guest:
+    uses: ./.github/workflows/docker-build.yml
+    secrets: inherit
+    with:
+      job-name: WASM Rust Guest
+      targets: wasm-rust-guest.build,wasm-rust-guest.lint
+      upload-artifact: true
 
-      - name: Build and test everything (PR)
-        if: github.event_name != 'push'
-        uses: docker/build-push-action@v6
-        with:
-          context: .
-          target: all
-          push: false
-          cache-from: type=registry,ref=ghcr.io/${{ github.repository }}/cache:main
-
-      - name: Build and test everything (Push - updates cache)
-        if: github.event_name == 'push'
-        uses: docker/build-push-action@v6
-        with:
-          context: .
-          target: all
-          push: false
-          cache-from: type=registry,ref=ghcr.io/${{ github.repository }}/cache:main
-          cache-to: type=registry,ref=ghcr.io/${{ github.repository }}/cache:main,mode=max
+  cloudflare-resolver:
+    uses: ./.github/workflows/docker-build.yml
+    secrets: inherit
+    with:
+      job-name: Cloudflare Resolver (Rust)
+      targets: confidence-cloudflare-resolver.lint
 
-      - name: Extract artifacts
-        run: |
-          mkdir artifacts
-          docker build --target=wasm-rust-guest.artifact --output=type=local,dest=./artifacts .
+  # OpenFeature Providers
+  openfeature-js:
+    uses: ./.github/workflows/docker-build.yml
+    secrets: inherit
+    with:
+      job-name: OpenFeature Provider (JS)
+      targets: openfeature-provider-js.test,openfeature-provider-js.build
+
+  openfeature-java:
+    uses: ./.github/workflows/docker-build.yml
+    secrets: inherit
+    with:
+      job-name: OpenFeature Provider (Java)
+      targets: openfeature-provider-java.test,openfeature-provider-java.build
+
+  # Integration Tests (Host Examples)
+  node-host:
+    uses: ./.github/workflows/docker-build.yml
+    secrets: inherit
+    with:
+      job-name: Node.js Host Integration
+      targets: node-host.test
+
+  java-host:
+    uses: ./.github/workflows/docker-build.yml
+    secrets: inherit
+    with:
+      job-name: Java Host Integration
+      targets: java-host.test
 
-      - name: Show build summary
+  go-host:
+    uses: ./.github/workflows/docker-build.yml
+    secrets: inherit
+    with:
+      job-name: Go Host Integration
+      targets: go-host.test
+
+  python-host:
+    uses: ./.github/workflows/docker-build.yml
+    secrets: inherit
+    with:
+      job-name: Python Host Integration
+      targets: python-host.test
+
+  # Summary job that depends on all others
+  summary:
+    name: Build Summary
+    runs-on: ubuntu-latest
+    needs:
+      - confidence-resolver
+      - wasm-msg
+      - wasm-rust-guest
+      - cloudflare-resolver
+      - openfeature-js
+      - openfeature-java
+      - node-host
+      - java-host
+      - go-host
+      - python-host
+    if: always()
+    steps:
+      - name: Download WASM artifact
+        uses: actions/download-artifact@v4
+        with:
+          name: wasm-module
+          path: artifacts
+
+      - name: Check job statuses
         run: |
-          echo "## Build Artifacts" >> $GITHUB_STEP_SUMMARY
+          echo "## Build Summary" >> $GITHUB_STEP_SUMMARY
           echo "" >> $GITHUB_STEP_SUMMARY
+          echo "### Component Status" >> $GITHUB_STEP_SUMMARY
+          echo "- Confidence Resolver: ${{ needs.confidence-resolver.result }}" >> $GITHUB_STEP_SUMMARY
+          echo "- WASM Message: ${{ needs.wasm-msg.result }}" >> $GITHUB_STEP_SUMMARY
+          echo "- WASM Rust Guest: ${{ needs.wasm-rust-guest.result }}" >> $GITHUB_STEP_SUMMARY
+          echo "- Cloudflare Resolver: ${{ needs.cloudflare-resolver.result }}" >> $GITHUB_STEP_SUMMARY
+          echo "- OpenFeature JS: ${{ needs.openfeature-js.result }}" >> $GITHUB_STEP_SUMMARY
+          echo "- OpenFeature Java: ${{ needs.openfeature-java.result }}" >> $GITHUB_STEP_SUMMARY
+          echo "- Node Host: ${{ needs.node-host.result }}" >> $GITHUB_STEP_SUMMARY
+          echo "- Java Host: ${{ needs.java-host.result }}" >> $GITHUB_STEP_SUMMARY
+          echo "- Go Host: ${{ needs.go-host.result }}" >> $GITHUB_STEP_SUMMARY
+          echo "- Python Host: ${{ needs.python-host.result }}" >> $GITHUB_STEP_SUMMARY
+          echo "" >> $GITHUB_STEP_SUMMARY
+          echo "### WASM Artifact" >> $GITHUB_STEP_SUMMARY
           echo "\`\`\`" >> $GITHUB_STEP_SUMMARY
-          find artifacts -type f -exec ls -lh {} \; >> $GITHUB_STEP_SUMMARY
+          ls -lh artifacts/ >> $GITHUB_STEP_SUMMARY
           echo "\`\`\`" >> $GITHUB_STEP_SUMMARY
+
+      - name: Fail if any job failed
+        if: |
+          needs.confidence-resolver.result != 'success' ||
+          needs.wasm-msg.result != 'success' ||
+          needs.wasm-rust-guest.result != 'success' ||
+          needs.cloudflare-resolver.result != 'success' ||
+          needs.openfeature-js.result != 'success' ||
+          needs.openfeature-java.result != 'success' ||
+          needs.node-host.result != 'success' ||
+          needs.java-host.result != 'success' ||
+          needs.go-host.result != 'success' ||
+          needs.python-host.result != 'success'
+        run: exit 1

.github/workflows/docker-build.yml

@@ -0,0 +1,66 @@
+name: Docker Build (Reusable)
+
+on:
+  workflow_call:
+    inputs:
+      job-name:
+        required: true
+        type: string
+      targets:
+        required: true
+        type: string
+        description: 'Comma-separated list of Docker targets to build'
+      upload-artifact:
+        required: false
+        type: boolean
+        default: false
+        description: 'Whether to extract and upload WASM artifact'
+
+permissions:
+  contents: read
+  packages: write
+
+jobs:
+  build:
+    name: ${{ inputs.job-name }}
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Login to GitHub Container Registry
+        if: github.event_name == 'push'
+        uses: docker/login-action@v3
+        with:
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Build targets
+        run: |
+          IFS=',' read -ra TARGETS <<< "${{ inputs.targets }}"
+          for target in "${TARGETS[@]}"; do
+            echo "Building target: $target"
+            docker buildx build \
+              --target=$target \
+              --cache-from=type=registry,ref=ghcr.io/${{ github.repository }}/cache:main \
+              ${{ github.event_name == 'push' && format('--cache-to=type=registry,ref=ghcr.io/{0}/cache:main,mode=max', github.repository) || '' }} \
+              .
+          done
+
+      - name: Extract WASM artifact
+        if: inputs.upload-artifact
+        run: |
+          mkdir -p artifacts
+          docker build --target=wasm-rust-guest.artifact --output=type=local,dest=./artifacts .
+
+      - name: Upload WASM artifact
+        if: inputs.upload-artifact
+        uses: actions/upload-artifact@v4
+        with:
+          name: wasm-module
+          path: artifacts/confidence_resolver.wasm
+