ci: add automatic backend quality gate

2026-07-21 00:20:09 +08:00
parent 4232c893e8
commit 0a87f7756e
3 changed files with 211 additions and 0 deletions
@@ -0,0 +1,108 @@
+name: Staging Backend Quality Gate
+
+on:
+  pull_request:
+  push:
+    branches: [staging]
+  workflow_dispatch:
+
+concurrency:
+  group: backend-quality-${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+permissions:
+  contents: read
+
+jobs:
+  validate:
+    runs-on: ubuntu-latest
+    timeout-minutes: 30
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Set up Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: '3.12'
+
+      - name: Set up Node
+        uses: actions/setup-node@v4
+        with:
+          node-version: '22'
+          cache: npm
+          cache-dependency-path: frontend/package-lock.json
+
+      - name: Install dependencies
+        run: |
+          python -m pip install --upgrade pip
+          python -m pip install -r requirements.txt -r requirements-dev.txt
+          npm ci --prefix frontend
+
+      - name: Run Python quick quality gate
+        run: |
+          ruff check scripts/run_quality_gate.py tests/test_varga_bphs.py \
+            tests/test_ashtakavarga_invariants.py tests/test_cli_smoke.py \
+            tests/test_yoga_rules_integrity.py
+          python -m py_compile scripts/*.py jyotish_vedic/*.py mcp_server.py
+          mkdir -p artifacts
+          python scripts/run_quality_gate.py \
+            --profile quick --skip-yoga-logic --skip-frontend-runtime \
+            2>&1 | tee artifacts/quick-quality-gate.log
+          python -m build --no-isolation
+
+      - name: Upload quick quality gate diagnostics
+        if: always()
+        uses: actions/upload-artifact@v4
+        with:
+          name: quick-quality-gate-diagnostics
+          path: artifacts/quick-quality-gate.log
+
+      - name: Run database tests
+        run: npm run test:db --prefix frontend
+
+      - name: Validate frontend
+        env:
+          NEXT_PUBLIC_SUPABASE_URL: https://placeholder.supabase.co
+          NEXT_PUBLIC_SUPABASE_ANON_KEY: placeholder
+        run: |
+          npm test --prefix frontend
+          npm run lint --prefix frontend
+          npm run build --prefix frontend
+
+  publish:
+    if: github.event_name == 'push' && github.ref == 'refs/heads/staging'
+    needs: validate
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: write
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Log in to GHCR
+        uses: docker/login-action@v3
+        with:
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Build and publish API image
+        uses: docker/build-push-action@v6
+        with:
+          context: .
+          file: deploy/railway-api.Dockerfile
+          push: true
+          tags: ghcr.io/jesse-ux/jyotisha-api:${{ github.sha }}
+
+      - name: Build and publish web image
+        uses: docker/build-push-action@v6
+        with:
+          context: .
+          file: deploy/railway-web.Dockerfile
+          push: true
+          tags: ghcr.io/jesse-ux/jyotisha-web:${{ github.sha }}
+          build-args: |
+            NEXT_PUBLIC_SUPABASE_URL=https://placeholder.supabase.co
+            NEXT_PUBLIC_SUPABASE_ANON_KEY=placeholder