ai-engineering-fluency/.github/workflows/cli-build.yml at 515e8d8577774153c8688c2ffe32b577d13521fe · rajbos/ai-engineering-fluency · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
name: CLI - Build & Validate

on:
  push:
    branches: [main]
    paths:
      - 'cli/**'
      - 'src/sessionDiscovery.ts'
      - 'src/sessionParser.ts'
      - 'src/tokenEstimation.ts'
      - 'src/maturityScoring.ts'
      - 'src/usageAnalysis.ts'
      - 'src/opencode.ts'
      - 'src/types.ts'
      - 'src/tokenEstimators.json'
      - 'src/modelPricing.json'
      - 'src/toolNames.json'
  pull_request:
    branches: [main]

permissions:
  contents: read

jobs:
  check-changes:
    runs-on: ubuntu-latest
    outputs:
      cli-relevant: ${{ github.event_name == 'push' || steps.filter.outputs.cli-relevant == 'true' }}
    steps:
      - name: Harden Runner
        uses: step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0 # v2.12.0
        with:
          egress-policy: audit

      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2

      - name: Check for CLI-relevant file changes
        if: github.event_name == 'pull_request'
        uses: dorny/paths-filter@de90cc6b5708d14e015ca8c3acee5b86b31db2a8 # v3.0.2
        id: filter
        with:
          filters: |
            cli-relevant:
              - 'cli/**'
              - 'src/sessionDiscovery.ts'
              - 'src/sessionParser.ts'
              - 'src/tokenEstimation.ts'
              - 'src/maturityScoring.ts'
              - 'src/usageAnalysis.ts'
              - 'src/opencode.ts'
              - 'src/types.ts'
              - 'src/tokenEstimators.json'
              - 'src/modelPricing.json'
              - 'src/toolNames.json'

  build-and-validate:
    needs: check-changes
    if: needs.check-changes.outputs.cli-relevant == 'true'
    runs-on: ubuntu-latest
    env:
        node-version: 22
    steps:
      - name: Harden Runner
        uses: step-security/harden-runner@fa2e9d605c4eeb9fcad4c99c224cee0c6c7f3594 # v2.16.0
        with:
          egress-policy: audit

      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2

      - name: Setup Node.js ${{ env.node-version }}
        uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
        with:
          node-version: ${{ env.node-version }}

      - name: Install extension dependencies
        run: npm ci

      - name: Install CLI dependencies
        working-directory: cli
        run: npm ci

      - name: Build CLI
        working-directory: cli
        run: npm run build

      - name: Validate CLI --help
        working-directory: cli
        run: node dist/cli.js --help

      - name: Validate CLI --version
        working-directory: cli
        run: node dist/cli.js --version

      - name: Validate stats command
        working-directory: cli
        run: node dist/cli.js stats --verbose

      - name: Validate usage command
        working-directory: cli
        run: node dist/cli.js usage

      - name: Validate environmental command
        working-directory: cli
        run: node dist/cli.js environmental

      - name: Validate fluency command
        working-directory: cli
        run: node dist/cli.js fluency --tips

      - name: Validate diagnostics command
        working-directory: cli
        run: node dist/cli.js diagnostics

      - name: Build production bundle
        working-directory: cli
        run: npm run build:production

      - name: Verify production bundle runs
        working-directory: cli
        run: node dist/cli.js --help