tests pipeline run attempt

.gitea/workflows/local-ci-verify.yml

@@ -0,0 +1,137 @@
+# Local CI Verification Pipeline
+# Manual-dispatch only — validates devops/ci-local/ scaffolding and CI image.
+# Triggers: workflow_dispatch (Gitea UI or API).
+name: Local CI Verification
+
+on:
+  workflow_dispatch:
+    inputs:
+      workflow:
+        description: 'Archived workflow file to dry-run (e.g. test-matrix.yml). Leave empty to skip.'
+        required: false
+        default: ''
+      dry_run:
+        description: 'Pass -n (dry-run) to act'
+        required: false
+        default: 'true'
+
+jobs:
+  validate-scaffolding:
+    name: Validate CI scaffolding
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Check devops/ci-local files exist
+        run: |
+          echo "::group::Checking required files"
+          errors=0
+
+          for f in \
+            devops/ci-local/.env.local.template \
+            devops/ci-local/run-act.sh \
+            devops/ci-local/run-act.ps1 \
+            devops/ci-local/README.md \
+            devops/ci-local/events/push.json \
+            devops/ci-local/events/pull-request.json \
+            devops/docker/Dockerfile.ci \
+            .actrc; do
+            if [ -f "$f" ]; then
+              echo "✓ $f"
+            else
+              echo "✗ MISSING: $f"
+              errors=$((errors + 1))
+            fi
+          done
+
+          echo "::endgroup::"
+          if [ "$errors" -gt 0 ]; then
+            echo "::error::$errors required file(s) missing"
+            exit 1
+          fi
+
+      - name: Lint event JSON files
+        run: |
+          echo "::group::Validating JSON payloads"
+          for f in devops/ci-local/events/*.json; do
+            if python3 -m json.tool "$f" > /dev/null 2>&1; then
+              echo "✓ $f — valid JSON"
+            else
+              echo "✗ $f — invalid JSON"
+              exit 1
+            fi
+          done
+          echo "::endgroup::"
+
+      - name: Verify runner scripts are executable
+        run: |
+          if [ ! -x devops/ci-local/run-act.sh ]; then
+            echo "::warning::run-act.sh is not executable (chmod +x recommended)"
+          fi
+
+  build-ci-image:
+    name: Build stellaops-ci image
+    runs-on: ubuntu-latest
+    needs: validate-scaffolding
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Build CI image
+        run: |
+          docker build \
+            -t stellaops-ci:local \
+            -f devops/docker/Dockerfile.ci \
+            .
+
+      - name: Verify image exists
+        run: |
+          docker image inspect stellaops-ci:local > /dev/null 2>&1
+          echo "stellaops-ci:local built successfully"
+          docker image ls stellaops-ci:local
+
+  dry-run-smoke:
+    name: Dry-run smoke test
+    runs-on: ubuntu-latest
+    needs: build-ci-image
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Install act
+        run: |
+          curl -sSL https://raw.githubusercontent.com/nektos/act/master/install.sh | sudo bash
+
+      - name: List jobs from archived test-matrix
+        run: |
+          act -l -W .gitea/workflows-archived/test-matrix.yml \
+            -P ubuntu-latest=stellaops-ci:local \
+            --env-file devops/ci-local/.env.local.template
+
+      - name: Dry-run archived test-matrix
+        run: |
+          act -W .gitea/workflows-archived/test-matrix.yml -n \
+            -P ubuntu-latest=stellaops-ci:local \
+            --env-file devops/ci-local/.env.local.template \
+            -e devops/ci-local/events/push.json
+
+      - name: Dry-run user-specified workflow
+        if: ${{ github.event.inputs.workflow != '' }}
+        run: |
+          WORKFLOW="${{ github.event.inputs.workflow }}"
+          ARCHIVE_PATH=".gitea/workflows-archived/${WORKFLOW}"
+
+          if [ ! -f "$ARCHIVE_PATH" ]; then
+            echo "::error::Workflow not found: $ARCHIVE_PATH"
+            exit 1
+          fi
+
+          ACT_ARGS="-W $ARCHIVE_PATH -P ubuntu-latest=stellaops-ci:local --env-file devops/ci-local/.env.local.template -e devops/ci-local/events/push.json"
+
+          if [ "${{ github.event.inputs.dry_run }}" = "true" ]; then
+            ACT_ARGS="$ACT_ARGS -n"
+          fi
+
+          echo "Running: act $ACT_ARGS"
+          act $ACT_ARGS