ci.yml

# This workflow will build a Java project with Maven, and cache/restore any dependencies to improve the workflow execution time
# For more information see: https://docs.github.com/en/actions/automating-builds-and-tests/building-and-testing-java-with-maven

# This workflow uses actions that are not certified by GitHub.
# They are provided by a third-party and are governed by
# separate terms of service, privacy policy, and support
# documentation.

name: Continuous Integration

on:
  push:
  pull_request:
    branches: [ "main" ]

permissions:
  contents: read

jobs:
  build-apps:
    runs-on: ubuntu-latest
    env:
      AWS_REGION: 'us-east-1'
    strategy:
      fail-fast: false
      matrix:
        include:
          - app: apps/ai-jvm-analyzer
          - app: apps/aiagent
          - app: apps/aiagent-agentcore/aiagent
          - app: apps/aiagent-agentcore/backoffice/trip
          - app: apps/aiagent-agentcore/currency
          # Tests in this app need a live Bedrock + AgentCore runtime.
          - app: apps/java-spring-ai-agents/aiagent
            skipTests: true
          - app: apps/java-spring-ai-agents/currency
          # Tests need a Postgres + Bedrock environment.
          - app: apps/unicorn-spring-ai-agent
            skipTests: true
          - app: apps/unicorn-store-spring
    name: Build ${{ matrix.app }}
    steps:
    - uses: actions/checkout@v6
    - name: Set up JDK 25
      uses: actions/setup-java@v5
      with:
        distribution: 'corretto'
        java-version: 25
        cache: maven
    - name: Java version
      run: java --version
    - name: Build ${{ matrix.app }} with Maven
      run: mvn -B clean package --file pom.xml --no-transfer-progress ${{ matrix.skipTests && '-DskipTests' || '' }}
      working-directory: ./${{ matrix.app }}/

  # Temporary: backoffice is assembled from multiple sources by
  # apps/java-spring-ai-agents/scripts/01-setup.sh. This job mirrors the
  # file-combining steps of that script (skipping AWS/direnv setup) so we
  # can verify the assembled project compiles.
  build-backoffice:
    runs-on: ubuntu-latest
    env:
      AWS_REGION: 'us-east-1'
      SRC: apps/java-spring-ai-agents/backoffice
    steps:
    - uses: actions/checkout@v6
    - name: Set up JDK 25
      uses: actions/setup-java@v5
      with:
        distribution: 'corretto'
        java-version: 25
        cache: maven
    - name: Assemble backoffice (mirror of 01-setup.sh)
      run: |
        set -euxo pipefail
        DEST="${RUNNER_TEMP}/backoffice"
        cp -r "${SRC}/trip" "${DEST}"
        cp -r "${SRC}/expense" "${DEST}/src/main/java/com/example/backoffice/expense"
        cp "${SRC}/tools/TripTools.java" "${DEST}/src/main/java/com/example/backoffice/trip/TripTools.java"
        cp "${SRC}/tools/ExpenseTools.java" "${DEST}/src/main/java/com/example/backoffice/expense/ExpenseTools.java"
        cp "${SRC}/tools/pom.xml" "${DEST}/pom.xml"
        cp "${SRC}/tools/application.properties" "${DEST}/src/main/resources/application.properties"
    - name: Build assembled backoffice with Maven
      run: mvn -B clean package --file pom.xml --no-transfer-progress
      working-directory: ${{ runner.temp }}/backoffice

  build-samples:
    runs-on: ubuntu-latest
    env:
      AWS_REGION: 'us-east-1'
    strategy:
      fail-fast: false
      matrix:
        include:
          # Tests need Docker/Bedrock/Ollama runtime.
          - sample: samples/quality-assurance/ai-agent
            skipTests: true
          # Tests need a live MCP server runtime.
          - sample: samples/quality-assurance/weather
            skipTests: true
          - sample: samples/security/apikey/ai-agent
          - sample: samples/security/apikey/weather
          - sample: samples/security/oauth/ai-agent
          - sample: samples/security/oauth/authorization-server
          # Tests need a running OAuth authorization server.
          - sample: samples/security/oauth/weather
            skipTests: true
          # Tests need Postgres + Docker testcontainers.
          - sample: samples/spring-ai-agent
            skipTests: true
          - sample: samples/spring-ai-simple-chat-client
          # Tests need a Spring Cloud Function HTTP runtime.
          - sample: samples/spring-cloud-function-demo
            skipTests: true
    name: Build ${{ matrix.sample }}
    steps:
    - uses: actions/checkout@v6
    - name: Set up JDK 25
      uses: actions/setup-java@v5
      with:
        distribution: 'corretto'
        java-version: 25
        cache: maven
    - name: Java version
      run: java --version
    - name: Build ${{ matrix.sample }} with Maven
      run: mvn -B clean package --file pom.xml --no-transfer-progress ${{ matrix.skipTests && '-DskipTests' || '' }}
      working-directory: ./${{ matrix.sample }}/

  build-infra:
    runs-on: ubuntu-latest
    env:
      AWS_REGION: 'us-east-1'
    steps:
    - uses: actions/checkout@v6
    - name: Set up JDK 25
      uses: actions/setup-java@v5
      with:
        distribution: 'corretto'
        java-version: 25
        cache: maven
    - name: Install AWS CDK
      run: npm install -g aws-cdk
    - name: AWS CDK version
      run: cdk version
    - name: Build infra CDK
      run: mvn clean package --no-transfer-progress
      working-directory: ./infra/cdk/
    - name: CDK Synth infra
      run: cdk synth
      working-directory: ./infra/cdk/

  build-thread-dump-lambda:
    runs-on: ubuntu-latest
    defaults:
      run:
        working-directory: ./infra/scripts/setup/thread-dump-lambda/
    steps:
    - uses: actions/checkout@v6
    - name: Set up Python
      uses: actions/setup-python@v6
      with:
        python-version: '3.12'
        cache: 'pip'
        cache-dependency-path: infra/scripts/setup/thread-dump-lambda/requirements.txt
    - name: Install dependencies
      run: |
        python -m pip install --upgrade pip
        pip install -r requirements.txt
    - name: Syntax check sources
      run: python -m compileall -q src

#    - name: Submit Dependency Snapshot
#      uses: advanced-security/maven-dependency-submission-action@v4
#      with:
#        directory: ./apps/unicorn-store-spring/