Add AIOS v26.1 Universal Agent Kernel #1304
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: AIOS CI Enhanced (mypy + ruff + tests) | |
| on: | |
| push: | |
| branches: [ main, master ] | |
| pull_request: | |
| branches: [ main, master ] | |
| jobs: | |
| lint-and-typecheck: | |
| # Legacy/advisory job; the blocking surface is core-gate.yml. | |
| continue-on-error: true | |
| runs-on: ubuntu-latest | |
| strategy: | |
| matrix: | |
| python-version: ["3.11"] | |
| steps: | |
| - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 | |
| - name: Set up Python ${{ matrix.python-version }} | |
| uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7 | |
| with: | |
| python-version: ${{ matrix.python-version }} | |
| cache: 'pip' | |
| - name: Install dependencies | |
| run: | | |
| python -m pip install --upgrade pip | |
| pip install -r requirements.txt | |
| pip install pytest pytest-asyncio ruff mypy types-PyYAML types-requests | |
| - name: Validate compilation | |
| run: | | |
| python -m compileall -q aios_core aios_cli run_telegram_bot.py run_coder_orchestrator.py | |
| - name: Lint with Ruff (check) | |
| run: | | |
| ruff check aios_core --select E,F,W --ignore E402 --output-format=github | |
| - name: Format with Ruff (check) | |
| run: | | |
| ruff format --check aios_core | |
| - name: Type check with mypy (non-blocking) | |
| run: | | |
| mypy aios_core --ignore-missing-imports --no-strict-optional --allow-untyped-defs || echo "mypy found issues (non-blocking for now)" | |
| - name: Security audit - tech debt reporter | |
| run: | | |
| python -m aios_core.tech_debt_reporter || echo "tech debt report generated" | |
| cat data/tech_debt_report.json | python3 -c "import json,sys; d=json.load(sys.stdin); print(d['summary'])" | |
| - name: Security audit - XSS/secrets | |
| run: | | |
| python -m aios_core.security_audit || true | |
| - name: Test with pytest + coverage | |
| run: | | |
| pytest tests/test_tech_debt_reporter.py tests/test_security_audit.py tests/test_llm_balancer.py -v --tb=short || echo "new tests may not exist yet" | |
| pytest tests/security tests/integration -q | |
| env: | |
| LLM_API_KEY: "test_dummy_key" | |
| OLX_WEBHOOK_SECRET: "test_secret" | |
| secret-scan: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 | |
| with: | |
| fetch-depth: 0 | |
| - name: Scan for secrets | |
| uses: gitleaks/gitleaks-action@ff98106e4c7b2bc287b24eaf42907196329070c7 # v2 | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} |