|
| 1 | +name: Publish Schema |
| 2 | + |
| 3 | +on: |
| 4 | + push: |
| 5 | + tags: |
| 6 | + - "schema-v*" |
| 7 | + workflow_dispatch: |
| 8 | + |
| 9 | +permissions: |
| 10 | + contents: read |
| 11 | + pages: write |
| 12 | + id-token: write |
| 13 | + |
| 14 | +concurrency: |
| 15 | + group: "pages" |
| 16 | + cancel-in-progress: false |
| 17 | + |
| 18 | +jobs: |
| 19 | + publish: |
| 20 | + runs-on: ubuntu-latest |
| 21 | + environment: |
| 22 | + name: github-pages |
| 23 | + url: ${{ steps.deployment.outputs.page_url }} |
| 24 | + steps: |
| 25 | + - name: Checkout |
| 26 | + uses: actions/checkout@v4 |
| 27 | + |
| 28 | + - name: Resolve contract metadata |
| 29 | + id: contract |
| 30 | + shell: bash |
| 31 | + run: | |
| 32 | + set -euo pipefail |
| 33 | +
|
| 34 | + extract_const() { |
| 35 | + local key="$1" |
| 36 | + grep -E "^[[:space:]]*${key}[[:space:]]*=" internal/schema/constants.go | sed -E 's/.*"([^"]+)".*/\1/' |
| 37 | + } |
| 38 | +
|
| 39 | + SCHEMA_VERSION="$(extract_const ExpectedSchemaVersion)" |
| 40 | + SCHEMA_URI="$(extract_const ExpectedSchemaURI)" |
| 41 | + SCHEMA_DIGEST="$(extract_const ExpectedSchemaDigest)" |
| 42 | +
|
| 43 | + if [[ -z "${SCHEMA_VERSION}" || -z "${SCHEMA_URI}" || -z "${SCHEMA_DIGEST}" ]]; then |
| 44 | + echo "failed to resolve schema constants from internal/schema/constants.go" |
| 45 | + exit 1 |
| 46 | + fi |
| 47 | +
|
| 48 | + if [[ "${GITHUB_EVENT_NAME}" == "push" ]]; then |
| 49 | + if [[ "${GITHUB_REF_NAME}" != schema-v* ]]; then |
| 50 | + echo "unexpected tag: ${GITHUB_REF_NAME}; expected schema-v*" |
| 51 | + exit 1 |
| 52 | + fi |
| 53 | + TAG_VERSION="${GITHUB_REF_NAME#schema-v}" |
| 54 | + if [[ "${TAG_VERSION}" != "${SCHEMA_VERSION}" ]]; then |
| 55 | + echo "tag version mismatch: tag=${TAG_VERSION} schema=${SCHEMA_VERSION}" |
| 56 | + exit 1 |
| 57 | + fi |
| 58 | + else |
| 59 | + TAG_VERSION="${SCHEMA_VERSION}" |
| 60 | + fi |
| 61 | +
|
| 62 | + echo "schema_version=${SCHEMA_VERSION}" >> "${GITHUB_OUTPUT}" |
| 63 | + echo "schema_uri=${SCHEMA_URI}" >> "${GITHUB_OUTPUT}" |
| 64 | + echo "schema_digest=${SCHEMA_DIGEST}" >> "${GITHUB_OUTPUT}" |
| 65 | + echo "tag_version=${TAG_VERSION}" >> "${GITHUB_OUTPUT}" |
| 66 | +
|
| 67 | + - name: Validate schema JSON and $id binding |
| 68 | + shell: bash |
| 69 | + env: |
| 70 | + EXPECTED_URI: ${{ steps.contract.outputs.schema_uri }} |
| 71 | + EXPECTED_DIGEST: ${{ steps.contract.outputs.schema_digest }} |
| 72 | + run: | |
| 73 | + set -euo pipefail |
| 74 | + python - <<'PY' |
| 75 | + import hashlib |
| 76 | + import json |
| 77 | + import os |
| 78 | + from pathlib import Path |
| 79 | +
|
| 80 | + schema_path = Path("api/schema/model.schema.json") |
| 81 | + raw = schema_path.read_bytes() |
| 82 | + payload = json.loads(raw.decode("utf-8")) |
| 83 | + expected_uri = os.environ["EXPECTED_URI"] |
| 84 | + actual_uri = payload.get("$id") |
| 85 | + if actual_uri != expected_uri: |
| 86 | + raise SystemExit(f"schema $id mismatch: got={actual_uri!r} want={expected_uri!r}") |
| 87 | +
|
| 88 | + digest = "sha256:" + hashlib.sha256(raw).hexdigest() |
| 89 | + expected_digest = os.environ["EXPECTED_DIGEST"] |
| 90 | + if digest != expected_digest: |
| 91 | + raise SystemExit(f"schema digest mismatch: got={digest!r} want={expected_digest!r}") |
| 92 | + PY |
| 93 | +
|
| 94 | + - name: Build publish artifact |
| 95 | + shell: bash |
| 96 | + env: |
| 97 | + SCHEMA_VERSION: ${{ steps.contract.outputs.schema_version }} |
| 98 | + SCHEMA_URI: ${{ steps.contract.outputs.schema_uri }} |
| 99 | + SCHEMA_DIGEST: ${{ steps.contract.outputs.schema_digest }} |
| 100 | + run: | |
| 101 | + set -euo pipefail |
| 102 | +
|
| 103 | + ROOT="out" |
| 104 | + VERSION_DIR="${ROOT}/schema/model/v${SCHEMA_VERSION}" |
| 105 | + LATEST_DIR="${ROOT}/schema/model/latest" |
| 106 | +
|
| 107 | + mkdir -p "${VERSION_DIR}" "${LATEST_DIR}" "${ROOT}/schema" |
| 108 | +
|
| 109 | + cp api/schema/model.schema.json "${VERSION_DIR}/model.schema.json" |
| 110 | + cp api/schema/model.schema.json "${LATEST_DIR}/model.schema.json" |
| 111 | +
|
| 112 | + UPDATED_AT="$(date -u +"%Y-%m-%dT%H:%M:%SZ")" |
| 113 | + cat > "${ROOT}/schema/index.json" <<EOF |
| 114 | + { |
| 115 | + "name": "io.mb3r.bering.model", |
| 116 | + "version": "${SCHEMA_VERSION}", |
| 117 | + "uri": "${SCHEMA_URI}", |
| 118 | + "digest": "${SCHEMA_DIGEST}", |
| 119 | + "updated_at": "${UPDATED_AT}" |
| 120 | + } |
| 121 | + EOF |
| 122 | +
|
| 123 | + - name: Setup Pages |
| 124 | + uses: actions/configure-pages@v5 |
| 125 | + |
| 126 | + - name: Upload Pages artifact |
| 127 | + uses: actions/upload-pages-artifact@v3 |
| 128 | + with: |
| 129 | + path: out |
| 130 | + |
| 131 | + - name: Deploy to GitHub Pages |
| 132 | + id: deployment |
| 133 | + uses: actions/deploy-pages@v4 |
0 commit comments