ci: pin platformatic world image to 0.7.0 and harden community-world runner

Signed-off-by: marcopiraccini <marco.piraccini@gmail.com>

Author: marcopiraccini

.changeset/add-platformatic-world.md

@@ -0,0 +1,4 @@
+---
+---
+
+Add Platformatic to `worlds-manifest.json` as a community world, and add a generic `docker` service type to the community-world CI so worlds can declare arbitrary Docker containers in their manifest `services` array. Platformatic's CI job is gated by the existing `if: false` on `e2e-community` until community worlds ship CBOR queue transport support.

.github/workflows/e2e-community-world.yml

@@ -89,7 +89,16 @@ jobs:
 
       - name: Start Docker services
         if: ${{ inputs.service-type == 'docker' }}
+        # Services start serially in manifest order. Each service's health check
+        # must pass before the next one starts, so any service that depends on
+        # another (e.g. a workflow service that needs postgres) must be listed
+        # AFTER its dependency in the manifest's `services` array.
+        #
+        # `healthCheck.cmd` is executed via `sh -c` below, which means the
+        # manifest is a shell-execution surface. Safe here because
+        # `worlds-manifest.json` is in-repo and PR-reviewed.
         run: |
+          set -euo pipefail
           SERVICES='${{ inputs.services }}'
           count=$(echo "$SERVICES" | jq '. | length')
           for idx in $(seq 0 $((count - 1))); do
@@ -99,18 +108,21 @@ jobs:
             health_cmd=$(echo "$svc" | jq -r '.healthCheck.cmd // empty')
             retries=$(echo "$svc" | jq -r '.healthCheck.retries // 10')
 
-            # Build docker run command with env flags
-            cmd="docker run -d --name $name --network host"
-            for key in $(echo "$svc" | jq -r '.env // {} | keys[]'); do
-              val=$(echo "$svc" | jq -r ".env[\"$key\"]")
-              cmd="$cmd -e $key=$val"
-            done
-            cmd="$cmd $image"
+            # Build docker run as an array so env values with spaces/quotes
+            # survive intact (no shell re-interpretation via eval).
+            args=(docker run -d --name "$name" --network host)
+            env_lines=$(echo "$svc" | jq -r '.env // {} | to_entries[] | "\(.key)=\(.value)"')
+            if [ -n "$env_lines" ]; then
+              while IFS= read -r line; do
+                args+=(-e "$line")
+              done <<< "$env_lines"
+            fi
+            args+=("$image")
 
             echo "Starting $name ($image)..."
-            eval "$cmd"
+            "${args[@]}"
 
-            # Health check runs on the host (--network host shares the network)
+            # Health check runs on the host (--network host shares the network).
             if [ -n "$health_cmd" ]; then
               echo "Waiting for $name to be ready..."
               for i in $(seq 1 "$retries"); do
@@ -119,7 +131,8 @@ jobs:
                   break
                 fi
                 if [ "$i" -eq "$retries" ]; then
-                  echo "WARNING: $name health check did not pass after $retries retries"
+                  echo "ERROR: $name health check did not pass after $retries retries"
+                  exit 1
                 fi
                 sleep 2
               done

scripts/create-community-worlds-matrix.mjs

@@ -46,15 +46,17 @@ const testableWorlds = manifest.worlds.filter((world) => {
 // Build the matrix
 const matrix = {
   world: testableWorlds.map((world) => {
-    // Determine service type based on services array
+    // Determine service type based on services array.
+    // `mongodb` and `redis` have dedicated single-service CI steps; anything
+    // else (or any multi-service world) goes through the generic `docker`
+    // path driven by the manifest's `services` array.
     let serviceType = 'none';
     if (world.services && world.services.length > 0) {
-      // Use the first service's name as the service type
-      // mongodb and redis have dedicated CI steps; everything else
-      // is started generically via the manifest services definition
-      const serviceName = world.services[0].name;
-      if (['mongodb', 'redis'].includes(serviceName)) {
-        serviceType = serviceName;
+      if (world.services.length === 1) {
+        const serviceName = world.services[0].name;
+        serviceType = ['mongodb', 'redis'].includes(serviceName)
+          ? serviceName
+          : 'docker';
       } else {
         serviceType = 'docker';
       }

worlds-manifest.json

@@ -172,23 +172,19 @@
           },
           "healthCheck": {
             "cmd": "pg_isready -h localhost",
-            "interval": "10s",
-            "timeout": "5s",
             "retries": 5
           }
         },
         {
           "name": "platformatic-workflow",
-          "image": "platformatic/workflow:latest",
+          "image": "platformatic/workflow:0.7.0",
           "ports": ["3042:3042"],
           "env": {
             "DATABASE_URL": "postgres://wf:wf@localhost:5432/workflow",
             "PORT": "3042"
           },
           "healthCheck": {
             "cmd": "curl -sf http://localhost:3042/status",
-            "interval": "10s",
-            "timeout": "5s",
             "retries": 10
           }
         }