render-blueprint.yml

name: Render Blueprint

on:
  pull_request:
    paths:
      - "render.yaml"
      - "docs/DEPLOY_RENDER.md"
      - ".github/workflows/render-blueprint.yml"
  push:
    branches:
      - main
    paths:
      - "render.yaml"
      - "docs/DEPLOY_RENDER.md"
      - ".github/workflows/render-blueprint.yml"

permissions:
  contents: read

jobs:
  validate:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v7

      - name: Setup Python
        uses: actions/setup-python@v5
        with:
          python-version: "3.12"

      - name: Validate Blueprint contract
        run: |
          python -m pip install PyYAML==6.0.3
          python - <<'PY'
          from pathlib import Path
          import yaml

          data = yaml.safe_load(Path("render.yaml").read_text())
          services = data.get("services", [])
          assert len(services) == 1, services
          service = services[0]
          expected = {
              "type": "web",
              "name": "safe-agent-playground",
              "runtime": "python",
              "plan": "free",
              "rootDir": "examples/safe-agent-api",
              "healthCheckPath": "/health",
              "autoDeployTrigger": "checksPass",
          }
          for key, value in expected.items():
              assert service.get(key) == value, (key, service.get(key), value)
          assert "$PORT" in service.get("startCommand", "")
          assert "pip install -e ." == service.get("buildCommand")
          print("Render Blueprint contract is valid")
          PY