name: Core Launch Readiness

on:
  workflow_dispatch:
    inputs:
      profile:
        description: "Readiness profile"
        required: true
        default: "controlled-pilot"
        type: choice
        options:
          - development
          - controlled-pilot
          - production
      web_base_url:
        description: "Contract Web base URL"
        required: true
        default: "http://192.168.3.90:13000"
      contract_api_base:
        description: "Contract API base URL"
        required: true
        default: "http://192.168.3.90:18100"
      ai_api_base:
        description: "AI Platform API base URL"
        required: true
        default: "http://192.168.3.90:18101"

permissions:
  contents: read

jobs:
  core-launch-readiness:
    name: Core journeys, real model, policies, and pilot gate
    runs-on: [self-hosted, yuqei-smoke]
    timeout-minutes: 30
    env:
      CONTRACT_API_WEB_PROXY_SHARED_SECRET: ${{ secrets.CONTRACT_API_WEB_PROXY_SHARED_SECRET }}
      AI_PLATFORM_SERVICE_SHARED_SECRET: ${{ secrets.AI_PLATFORM_SERVICE_SHARED_SECRET }}

    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Set up Python
        uses: actions/setup-python@v5
        with:
          python-version: "3.12"
          cache: pip

      - name: Install core test dependencies
        run: |
          python -m pip install --upgrade pip
          python -m pip install pytest \
            -e yuqei-contract-platform/services/contract-api \
            -e yuqei-ai-platform/services/ai-platform-api \
            -e yuqei-ai-sdk-python

      - name: Run core launch readiness gate
        run: |
          python yuqei-infra/scripts/run-core-launch-readiness.py \
            --profile "${{ inputs.profile }}" \
            --web-base-url "${{ inputs.web_base_url }}" \
            --contract-api-base "${{ inputs.contract_api_base }}" \
            --ai-api-base "${{ inputs.ai_api_base }}" \
            --artifact-dir core-launch-readiness-artifacts

      - name: Upload readiness evidence
        if: always()
        uses: actions/upload-artifact@v4
        with:
          name: core-launch-readiness-${{ inputs.profile }}
          path: core-launch-readiness-artifacts/
          if-no-files-found: error