Fix migration workflow: upload as artifact instead of scp to practice EC2

2026-08-13 11:14:25 +07:00
parent 7ebbe1f309
commit a4819b8653
51 changed files with 6830 additions and 8 deletions
@@ -0,0 +1,103 @@
+name: CI
+
+# Runs on every push and every pull request. `deploy.yml` triggers
+# independently on push to master; until it is made to depend on this job, a
+# red CI does NOT block a deploy — see docs/22-ci-cd.md.
+on:
+  push:
+  pull_request:
+
+concurrency:
+  group: ci-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  ai-service:
+    name: ai-service — ruff + pytest
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/setup-python@v5
+        with:
+          python-version: "3.12"
+
+      # No lockfile exists for either Python project (docs/27-technical-debt.md
+      # D-07), so this mirrors apps/ai-service/Dockerfile's inline install. When
+      # a lockfile lands, replace this with an install from it.
+      - name: Install dependencies
+        run: |
+          python -m pip install --upgrade pip
+          pip install \
+            "fastapi>=0.115,<1" \
+            "httpx>=0.27,<1" \
+            "psycopg[binary]>=3.2,<4" \
+            "pydantic-settings>=2.6,<3" \
+            "qdrant-client>=1.7,<2" \
+            "uvicorn[standard]>=0.30,<1" \
+            "prometheus-client>=0.20,<1" \
+            "opentelemetry-api>=1.27,<2" \
+            "opentelemetry-sdk>=1.27,<2" \
+            "opentelemetry-exporter-otlp-proto-http>=1.27,<2" \
+            "anthropic>=0.112,<1" \
+            "boto3" \
+            "pytest>=7.4,<9" \
+            "ruff"
+
+      - name: ruff
+        working-directory: apps/ai-service
+        run: ruff check .
+
+      # `tests/conftest.py` forces EMBEDDING_PROVIDER=disabled, because
+      # `main.py` builds the whole runtime at import time and would otherwise
+      # try to reach Qdrant during collection. No test needs a live datastore;
+      # `tests/test_live_datastores.py` gates itself behind RUN_INTEGRATION=1.
+      - name: pytest
+        working-directory: apps/ai-service
+        run: pytest tests -q
+
+  ingestion:
+    name: ingestion — pytest
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/setup-python@v5
+        with:
+          python-version: "3.12"
+
+      # `ruff check` is not run here: `ingestion/pyproject.toml` declares no
+      # [tool.ruff] section, so ruff would apply its full default rule set and
+      # report ~426 pre-existing findings. Adding the same lint config
+      # apps/ai-service uses is tracked as follow-up work, not silenced here.
+      - name: Install dependencies
+        run: |
+          python -m pip install --upgrade pip
+          pip install -e "./ingestion[dev]"
+
+      - name: pytest
+        working-directory: ingestion
+        run: pytest tests -q
+
+  web:
+    name: web — lint + build
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/setup-node@v4
+        with:
+          node-version: "20"
+
+      # Same toolchain the production image uses (apps/web/Dockerfile).
+      - name: Enable pnpm
+        run: corepack enable
+
+      - name: Install
+        run: pnpm install --frozen-lockfile
+
+      - name: Lint
+        run: pnpm --filter @duoc-thu/web lint
+
+      - name: Build
+        run: pnpm --filter @duoc-thu/web build