Check

Harden Graphify handoff and expand host tooling #1190

Workflow file for this run

	name: Check

	on:
	push:
	branches:
	- main
	- "plan/**"
	- "feature/**"
	- "graphify/**"
	- "core-cli/**"
	- "lds-core-cli/**"
	pull_request:
	schedule:
	# Related moving latest images refresh weekly; re-run the full compatibility
	# suite after that window even when LocalDevStack source has not changed.
	- cron: "30 2 * * 1"
	workflow_dispatch:

	permissions:
	contents: read

	concurrency:
	group: check-${{ github.workflow }}-${{ github.ref }}
	cancel-in-progress: true

	jobs:
	static-and-contracts:
	name: Static and contracts
	runs-on: ubuntu-latest
	timeout-minutes: 15
	steps:
	- name: Checkout
	uses: actions/checkout@v7

	- name: Install ShellCheck
	run: \|
	sudo apt-get update
	sudo apt-get install -y --no-install-recommends shellcheck

	- name: Static validation
	run: tests/static.sh

	- name: CLI contract
	run: tests/cli-contract.sh

	- name: Execution baseline contract
	run: tests/execution-contract.sh

	- name: Container execution substrate contract
	run: tests/container-exec-contract.sh

	- name: Conversion contracts
	run: \|
	bash tests/document-convert-contract.sh
	bash tests/image-convert-contract.sh

	- name: Environment contract
	run: tests/env-contract.sh

	- name: Catalog contract
	run: bash tests/catalog-contract.sh

	- name: PHP runtime contract
	run: tests/runtime-php-contract.sh

	- name: Node runtime contract
	run: tests/runtime-node-contract.sh

	- name: Networking characterization
	run: tests/networking-contract.sh

	- name: Wrapper contract
	run: tests/wrappers-contract.sh

	- name: Service hardening contract
	run: bash tests/service-hardening-contract.sh

	- name: QoL contract
	run: bash tests/qol-contract.sh

	- name: Permission contract
	run: bash tests/permissions-contract.sh

	- name: Documentation contract
	run: bash tests/docs-contract.sh


	graphify-package:
	name: Graphify package compatibility
	runs-on: ubuntu-latest
	timeout-minutes: 10
	steps:
	- name: Checkout
	uses: actions/checkout@v7

	- name: Set up Python
	uses: actions/setup-python@v6
	with:
	python-version: "3.13"

	- name: Validate minimum supported Graphify
	run: \|
	python -m pip install "graphifyy[openai]==0.9.65"
	graphify --version
	python - <<'PY'
	import inspect
	import graphify.llm as llm

	source = inspect.getsource(llm)
	assert hasattr(llm, "_load_custom_providers")
	assert hasattr(llm, "_mark_hollow")
	for token in (
	"GRAPHIFY_ALLOW_LOCAL_PROVIDERS",
	"GRAPHIFY_MAX_RETRIES",
	"GRAPHIFY_MAX_RETRY_DEPTH",
	):
	assert token in source, token
	PY

	- name: Smoke direct provider on minimum Graphify
	run: bash tests/graphify-direct-provider-contract.sh

	- name: Validate document merge round trip on minimum Graphify
	run: bash tests/graphify-roundtrip-contract.sh

	- name: Validate latest Graphify contract
	run: \|
	python -m pip install --upgrade "graphifyy[openai]"
	graphify --version
	python - <<'PY'
	import inspect
	import graphify.llm as llm

	source = inspect.getsource(llm)
	assert hasattr(llm, "_load_custom_providers")
	assert hasattr(llm, "_mark_hollow")
	for token in (
	"GRAPHIFY_ALLOW_LOCAL_PROVIDERS",
	"GRAPHIFY_MAX_RETRIES",
	"GRAPHIFY_MAX_RETRY_DEPTH",
	):
	assert token in source, token
	PY

	- name: Smoke direct provider on latest Graphify
	run: bash tests/graphify-direct-provider-contract.sh

	- name: Validate document merge round trip on latest Graphify
	run: bash tests/graphify-roundtrip-contract.sh


	compose:
	name: Compose contract
	runs-on: ubuntu-latest
	timeout-minutes: 15
	steps:
	- name: Checkout
	uses: actions/checkout@v7

	- name: Docker versions
	run: \|
	docker version
	docker compose version

	- name: Render supported Compose matrices
	run: tests/compose-contract.sh

	fake-llm:
	name: Common LLM contract
	runs-on: ubuntu-latest
	timeout-minutes: 10
	steps:
	- name: Checkout
	uses: actions/checkout@v7

	- name: Validate common OpenAI-compatible LLM fixture
	run: tests/ai-contract.sh

	published-images:
	name: Published image baseline
	runs-on: ubuntu-latest
	timeout-minutes: 25
	steps:
	- name: Checkout
	uses: actions/checkout@v7

	- name: Validate published compatibility images
	run: tests/published-images.sh

	- name: Smoke host document conversion
	run: \|
	set -euo pipefail
	tmp="$(mktemp -d)"
	trap 'rm -rf "$tmp"' EXIT
	mkdir -p "$tmp/input" "$tmp/output"
	printf '# LocalDevStack conversion\n\nPandoc-backed host document.\n' >"$tmp/input/source.md"
	./lds convert docs "$tmp/input/source.md" "$tmp/output/source.html" --standalone
	grep -Fq '<h1' "$tmp/output/source.html"
	./lds convert docs --list-input-formats \| grep -qx markdown

	windows-bridge:
	name: Windows bridge
	runs-on: windows-latest
	timeout-minutes: 10
	steps:
	- name: Checkout
	uses: actions/checkout@v7

	- name: Validate lds.bat contract
	shell: pwsh
	run: tests/windows-bridge.ps1


	docs:
	name: Documentation build
	runs-on: ubuntu-latest
	timeout-minutes: 10
	steps:
	- name: Checkout
	uses: actions/checkout@v7

	- name: Set up Python
	uses: actions/setup-python@v6
	with:
	python-version: "3.13"
	cache: pip
	cache-dependency-path: docs/requirements.txt

	- name: Install documentation dependencies
	run: python -m pip install -r docs/requirements.txt

	- name: Build documentation
	run: sphinx-build -W --keep-going -b html docs docs/_build/html


	runtime-build:
	name: Runtime build compatibility
	if: github.event_name == 'schedule' \|\| github.event_name == 'workflow_dispatch' \|\| (github.event_name == 'push' && github.ref == 'refs/heads/plan/docker-ecosystem-bottom-up')
	runs-on: ubuntu-latest
	timeout-minutes: 45
	steps:
	- name: Checkout
	uses: actions/checkout@v7

	- name: Build current selected PHP/Node runtimes
	run: bash tests/runtime-build-smoke.sh

Navigation Menu

Harden Graphify handoff and expand host tooling #1190

Workflow file

Harden Graphify handoff and expand host tooling #1190

Uh oh!

Workflow file for this run