CI/CD & Self-hosted Runner

- name: Start ephemeral Postgres
  run: docker compose -f docker-compose.yml up -d postgres

- name: Run Flyway migrate (ephemeral)
  run: docker compose -f docker-compose.yml --profile migrate run --rm flyway migrate

- name: Show migration status
  run: docker compose -f docker-compose.yml --profile migrate run --rm flyway info

- name: Tear down ephemeral stack
  if: always()
  run: docker compose -f docker-compose.yml down -v --remove-orphans

- name: Build healthcheck image
  run: docker compose -f docker-compose.yml build healthcheck

- name: Tear down
  if: always()
  run: docker compose -f docker-compose.yml down --volumes --remove-orphans

- name: Build and start Valkey + Healthcheck (block until healthy)
  run: docker compose -f docker-compose.yml up -d --build --wait valkey healthcheck

- name: Smoke-test health endpoint from host
  run: curl -sf http://localhost:8083/health

- name: Create ephemeral .env and dummy key
  run: |
    cat > .env << 'EOF'
    GITHUB_APP_ID=0
    GITHUB_APP_INSTALLATION_ID=0
    EOF
    mkdir -p secrets
    printf '-----BEGIN RSA PRIVATE KEY-----\nMIIE...\n-----END RSA PRIVATE KEY-----\n' \
      > secrets/github_app_key.pem

- name: Typecheck + test (inside Docker)
  run: docker build --target test -t amtp-github-mcp-test:${{ github.run_id }} apps/github-mcp

- name: Build production Docker image
  run: docker compose -f docker-compose.yml build github-mcp

- name: Tear down
  if: always()
  run: |
    docker compose -f docker-compose.yml down --volumes --remove-orphans
    docker rmi amtp-github-mcp-test:${{ github.run_id }} || true

- name: Write .env from secrets
  run: |
    printf '...GITHUB_APP_ID=%s\nGITHUB_APP_INSTALLATION_ID=%s\n' \
      "${{ secrets.GH_APP_ID }}" \
      "${{ secrets.GH_APP_INSTALLATION_ID }}" >> .env

- name: Write GitHub App private key
  run: |
    mkdir -p secrets
    printf '%s' "${{ secrets.GH_APP_PRIVATE_KEY_B64 }}" | base64 -d \
      > secrets/github_app_key.pem
    chmod 644 secrets/github_app_key.pem

- name: Deploy GitHub MCP (wait for healthy)
  run: docker compose -f docker-compose.yml up -d --build --wait github-mcp

- name: Smoke-test health endpoint
  run: curl -sf http://localhost:8090/healthz

- name: Guard against non-conf files in infra/nginx/
  run: test -z "$(find infra/nginx -maxdepth 1 -type f ! -name '*.conf')"

- name: Install docs build dependencies
  run: npm install
  working-directory: docs/AMTP_Docs_Website

- name: Hydrate diagrams and inject build timestamp
  run: node build.js
  working-directory: docs/AMTP_Docs_Website

- name: Build Pagefind search index
  run: npx pagefind --site . --output-path pagefind
  working-directory: docs/AMTP_Docs_Website

- name: Remove node_modules before serving
  run: rm -rf docs/AMTP_Docs_Website/node_modules

- name: Normalize file permissions for nginx DAC
  run: chmod -R a+rX docs infra/nginx

- name: Start docs (block until healthy)
  run: docker compose -f docker-compose.yml up -d --wait docs

- name: Smoke-test healthz
  run: curl -sf "http://127.0.0.1:${DOCS_HOST_PORT}/healthz"

- name: Smoke-test index page
  run: curl -sf "http://127.0.0.1:${DOCS_HOST_PORT}/" -o /dev/null

- name: Tear down ephemeral stack
  if: always()
  run: docker compose -f docker-compose.yml down --volumes --remove-orphans

- name: Deploy docs (block until healthy)
  run: docker compose -f docker-compose.yml up -d --wait docs

- name: Smoke-test healthz from host
  run: curl -sf http://localhost/healthz

- name: Smoke-test index page from host
  run: curl -sf http://localhost/ -o /dev/null

- name: Rolling update — observability stack (block until all healthy)
  run: >
    docker compose -f docker-compose.observability.yml
    up -d --wait --wait-timeout 180 --remove-orphans

TRACE_ID=$(
  .venv/bin/python verify_trace.py \
    --endpoint "http://localhost:${OBS_OTEL_HTTP_PORT}" \
    2>/dev/null \
  | grep -oE '[0-9a-f]{32}' \
  | head -n 1
)

for i in $(seq 1 20); do
  STATUS=$(curl -s -o /dev/null -w '%{http_code}' \
    "http://localhost:${OBS_TEMPO_HTTP_PORT}/api/traces/${TRACE_ID}" || true)
  if [ "$STATUS" = "200" ]; then
    echo "Trace ${TRACE_ID} confirmed in Tempo (attempt $i)"
    exit 0
  fi
  echo "Waiting for Tempo to ingest trace... ($i/20, status=$STATUS)"
  sleep 3
done
exit 1