release: freeze V2 production candidate

.github/workflows/build-test-quality-gate.yml

@@ -0,0 +1,99 @@
+name: Build and Test Quality Gate
+
+on:
+  pull_request:
+  push:
+    branches:
+      - main
+      - master
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+jobs:
+  web:
+    name: Contract Web typecheck and build
+    runs-on: ubuntu-latest
+    timeout-minutes: 20
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Set up Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: "22"
+          cache: npm
+
+      - name: Install workspace dependencies
+        run: |
+          npm install -g npm@10.9.7
+          npm ci
+
+      - name: Typecheck Contract Web
+        run: npm run typecheck --workspace @yuqei/contract-web
+
+      - name: Build Contract Web
+        run: npm run build --workspace @yuqei/contract-web
+
+  python:
+    name: Python tests and Contract API migration
+    runs-on: ubuntu-latest
+    timeout-minutes: 25
+    env:
+      CONTRACT_API_ENVIRONMENT: test
+      CONTRACT_API_DATABASE_URL: "sqlite+pysqlite:///:memory:"
+      CONTRACT_API_DATABASE_AUTO_CREATE: "true"
+      CONTRACT_API_SEED_DEMO_DATA: "false"
+      AI_PLATFORM_ENVIRONMENT: test
+      AI_PLATFORM_DATABASE_URL: "sqlite+pysqlite:///:memory:"
+      AI_PLATFORM_DATABASE_AUTO_CREATE: "true"
+      AI_PLATFORM_REPOSITORY_BACKEND: sqlalchemy
+      YUQEI_WORKER_ENVIRONMENT: test
+      YUQEI_WORKER_DATABASE_URL: "sqlite+pysqlite:///:memory:"
+      YUQEI_WORKER_DATABASE_AUTO_CREATE: "true"
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Set up Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: "3.12"
+          cache: pip
+
+      - name: Install Python projects and test runner
+        run: |
+          python -m pip install --upgrade pip
+          python -m pip install pytest \
+            -e yuqei-contract-platform/services/contract-api \
+            -e yuqei-ai-platform/services/ai-platform-api \
+            -e yuqei-ai-platform/services/worker \
+            -e yuqei-ai-sdk-python
+
+      - name: Test Contract API
+        run: python -m pytest yuqei-contract-platform/services/contract-api/tests -q
+
+      - name: Test AI Platform API
+        run: python -m pytest yuqei-ai-platform/services/ai-platform-api/tests -q
+
+      - name: Test AI worker
+        run: python -m pytest yuqei-ai-platform/services/worker/tests -q
+
+      - name: Test Python SDK
+        run: python -m pytest yuqei-ai-sdk-python/tests -q
+
+      - name: Test production release tools
+        run: python -m pytest yuqei-infra/tests -q
+
+      - name: Verify Contract API empty-database migrations
+        working-directory: yuqei-contract-platform/services/contract-api
+        env:
+          CONTRACT_API_DATABASE_URL: sqlite+pysqlite:////tmp/yuqei-contract-api-ci.sqlite3
+          CONTRACT_API_DATABASE_AUTO_CREATE: "false"
+        run: |
+          python -m alembic upgrade head
+          python -m alembic downgrade 20260710_0030
+          python -m alembic upgrade head
+          python -m alembic current | grep -F "20260713_0031 (head)"

.github/workflows/security-quality-gate.yml

@@ -71,6 +71,10 @@ jobs:
                yuqei-ai-platform/services/ai-platform-api/src \
                yuqei-ai-platform/services/worker/src \
                yuqei-ai-sdk-python/src \
+               yuqei-infra/deploy \
+               yuqei-infra/backup \
+               yuqei-infra/observability \
+               yuqei-infra/scripts/run-ai-provider-acceptance.py \
             -f json \
             -o security-artifacts/bandit-project.json