在 Cloudflare 上构建面向百万仓库的可定制 CI/CD 平台

// src/workflows/ci.ts
// 示意代码：请按当前 Cloudflare CI SDK 的实际 API 调整 import 和方法名。
import { WorkflowEntrypoint, WorkflowStep } from "cloudflare:workers";
import { createSandbox } from "@cloudflare/ci";
import { artifacts } from "@cloudflare/artifacts";

type Env = {
  CI_REPOSITORY: string;
  CI_TOKEN: string;
};

type TriggerInput = {
  repository: string;
  commit: string;
  command?: string;
};

export class PullRequestCI extends WorkflowEntrypoint<Env, TriggerInput> {
  async run(event: TriggerInput, step: WorkflowStep) {
    const source = await step.do("checkout", async () => {
      return {
        repository: event.repository,
        commit: event.commit,
      };
    });

    const result = await step.do("test in isolated sandbox", async () => {
      const sandbox = await createSandbox({
        network: "restricted",
        timeoutSeconds: 900,
        environment: {
          CI: "true",
          CI_COMMIT_SHA: source.commit,
        },
      });

      await sandbox.checkout(source.repository, source.commit, {
        token: this.env.CI_TOKEN,
      });

      const command = event.command ?? "npm ci && npm test";
      return sandbox.exec(command);
    });

    await step.do("save build artifacts", async () => {
      await artifacts.upload({
        name: `ci-${source.commit}`,
        files: ["coverage/**", "dist/**", "test-results/**"],
        metadata: {
          repository: source.repository,
          commit: source.commit,
          exitCode: result.exitCode,
        },
      });
    });

    return {
      repository: source.repository,
      commit: source.commit,
      passed: result.exitCode === 0,
      logs: result.stdout,
    };
  }
}

set -eu

mkdir -p ci-artifacts

if [ -d coverage ]; then
  cp -R coverage ci-artifacts/coverage
fi

if [ -d dist ]; then
  cp -R dist ci-artifacts/dist
fi

find . -maxdepth 3 -type f \
  \( -name "junit*.xml" -o -name "test-results*.xml" \) \
  -exec cp --parents {} ci-artifacts/ \; 2>/dev/null || true

tar -czf ci-artifacts.tar.gz ci-artifacts
printf 'artifact=%s\n' "ci-artifacts.tar.gz"

你是 CI 诊断代理。

输入：
- 仓库：{{repository}}
- 提交：{{commit}}
- 失败步骤：{{step}}
- 最近 200 行日志：{{logs}}
- 相关 Artifact：{{artifact_manifest}}

任务：
1. 判断失败属于代码错误、依赖错误、基础设施错误还是暂时性错误。
2. 给出证据，引用日志中的具体信息。
3. 只有在判断为暂时性错误时，建议一次重试。
4. 只有在获得显式授权时，才生成代码补丁。

输出 JSON：
{
  "category": "code|dependency|infrastructure|transient|unknown",
  "confidence": 0.0,
  "evidence": ["..."],
  "action": "retry|comment|create_patch|stop",
  "reason": "..."
}