Merge 4999d0195c into 0057852bfa

action.yml

@@ -1,47 +1,133 @@
-name: 'Cache'
+# -----------------------------------------------------------------------------
-description: 'Cache artifacts like dependencies and build outputs to improve workflow execution time'
+# |           🤖 THE ULTIMATE ALL-IN-ONE AUTONOMOUS CI SYSTEM 🤖           |
-author: 'GitHub'
+# |                  Designed for 100% Production Readiness                 |
-inputs:
+# -----------------------------------------------------------------------------
-  path:
+
-    description: 'A list of files, directories, and wildcard patterns to cache and restore'
+name: '🚀 Ultimate Autonomous CI'
-    required: true
+
-  key:
+# =============================================================================
-    description: 'An explicit key for restoring and saving the cache'
+# | 🧠 1. TRIGGERS (THE SENSES) - ส่วนรับรู้และสั่งการทำงาน                    |
-    required: true
+# =============================================================================
-  restore-keys:
+on:
-    description: 'An ordered multiline string listing the prefix-matched keys, that are used for restoring stale cache if no cache hit occurred for key. Note `cache-hit` returns false in this case.'
+  # ทริกเกอร์เชิงรุก (Proactive): ตรวจสอบและบำรุงรักษาระบบทุกวันตอนตี 2 UTC
-    required: false
+  schedule:
-  upload-chunk-size:
+    - cron: '0 2 * * *'
-    description: 'The chunk size used to split up large files during upload, in bytes'
+
-    required: false
+  # ทริกเกอร์เชิงรับ (Reactive): ทำงานทันทีเมื่อมีโค้ดใหม่เข้ามา
-  enableCrossOsArchive:
+  push:
-    description: 'An optional boolean when enabled, allows windows runners to save or restore caches that can be restored or saved respectively on other platforms'
+    branches:
-    default: 'false'
+      - 'main'
-    required: false
+      - 'develop'
-  fail-on-cache-miss:
+  
-    description: 'Fail the workflow if cache entry is not found'
+  # ทริกเกอร์ตรวจสอบคุณภาพ: ทำงานเมื่อมีการเปิด Pull Request
-    default: 'false'
+  pull_request:
-    required: false
+    branches:
-  lookup-only:
+      - 'main'
-    description: 'Check if a cache entry exists for the given input(s) (key, restore-keys) without downloading the cache'
+      - 'develop'
-    default: 'false'
+
-    required: false
+  # ทริกเกอร์ด้วยมือ: อนุญาตให้สั่งรันระบบได้เอง عندความต้องการ
-  save-always:
+  workflow_dispatch:
-    description: 'Run the post step to save the cache even if another step before fails'
+
-    default: 'false'
+# =============================================================================
-    required: false
+# | ⚙️ PERMISSIONS - การกำหนดสิทธิ์การเข้าถึง                             |
-    deprecationMessage: |
+# =============================================================================
-      save-always does not work as intended and will be removed in a future release.
+# ตั้งค่าสิทธิ์ให้ Workflow สามารถสร้าง PR และ Issue ได้ ซึ่งจำเป็นสำหรับระบบ Self-Healing
-      A separate `actions/cache/restore` step should be used instead.
+permissions:
-      See https://github.com/actions/cache/tree/main/save#always-save-cache for more details.
+  contents: write
-outputs:
+  pull-requests: write
-  cache-hit:
+  issues: write
-    description: 'A boolean value to indicate an exact match was found for the primary key'
+
-runs:
+# =============================================================================
-  using: 'node20'
+# |                            JOBS - กระบวนการทำงาน                          |
-  main: 'dist/restore/index.js'
+# =============================================================================
-  post: 'dist/save/index.js'
+jobs:
-  post-if: "success()"
+  # ---------------------------------------------------------------------------
-branding:
+  # | JOB 1: AUTONOMOUS MAINTENANCE & VALIDATION                              |
-  icon: 'archive'
+  # ---------------------------------------------------------------------------
-  color: 'gray-dark'
+  autonomous_system:
+    name: '🛡️ Autonomous Maintain & Validate'
+    runs-on: ubuntu-latest
+
+    steps:
+      # --- Setup Phase ---
+      - name: '1.1. System Checkout'
+        uses: actions/checkout@v4
+        with:
+          # ดึงข้อมูล commit ทั้งหมดเพื่อให้สามารถเปรียบเทียบการเปลี่ยนแปลงได้
+          fetch-depth: 0 
+
+      - name: '1.2. Environment Setup (Node.js + Cache)'
+        uses: actions/setup-node@v4
+        with:
+          node-version: '20.x'
+          # เปิดใช้งาน Cache สำหรับ npm โดยอัตโนมัติตาม Best Practice
+          cache: 'npm'
+
+      - name: '1.3. Dependency Synchronization'
+        run: npm ci
+
+      # --- Self-Healing Phase ---
+      - name: '2.1. Heal: Auto-Patch Vulnerabilities & Format Code'
+        id: auto_heal_step
+        run: |
+          echo "Changes detected before healing: $(git status --porcelain=v1 2>/dev/null | wc -l)"
+          
+          # ซ่อมแซมช่องโหว่ความปลอดภัยระดับต่ำถึงกลางโดยอัตโนมัติ
+          npm audit fix --audit-level=moderate
+          
+          # จัดระเบียบโค้ดทั้งหมดให้เป็นมาตรฐานเดียวกัน
+          npx prettier --write .
+          
+          echo "Changes detected after healing: $(git status --porcelain=v1 2>/dev/null | wc -l)"
+          
+          # ตรวจสอบว่ามีการเปลี่ยนแปลงไฟล์หรือไม่ และส่งผลลัพธ์ออกไป
+          if [[ -n $(git status --porcelain) ]]; then
+            echo "changes_detected=true" >> $GITHUB_OUTPUT
+          else
+            echo "changes_detected=false" >> $GITHUB_OUTPUT
+          fi
+          
+      - name: '2.2. Remediate: Create Pull Request with Applied Fixes'
+        if: steps.auto_heal_step.outputs.changes_detected == 'true'
+        uses: peter-evans/create-pull-request@v6
+        with:
+          token: ${{ secrets.GITHUB_TOKEN }}
+          commit-message: 'fix(auto): Apply automated security patches and formatting'
+          title: '🤖 CI [Auto-Heal]: Security & Style Fixes'
+          body: |
+            This Pull Request was automatically generated by the **Ultimate Autonomous CI** workflow.
+            
+            It contains the following automated fixes to maintain project health and security:
+            - **Security Patches**: Applied via `npm audit fix`.
+            - **Code Formatting**: Standardized using `prettier`.
+            
+            This is a routine maintenance action. Please review and merge.
+          branch: 'ci/auto-fixes'
+          delete-branch: true
+          labels: 'automated-pr, maintenance'
+          assignees: '${{ github.actor }}'
+
+      # --- Validation Phase ---
+      - name: '3.1. Validate: Build Project'
+        run: npm run build --if-present
+
+      - name: '3.2. Validate: Run All Tests'
+        run: npm test
+
+      # --- Failure Response Phase ---
+      - name: '4.1. Report: Auto-Create Issue on Critical Failure'
+        if: failure() && github.event_name != 'pull_request'
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          gh issue create \
+            --title "🚨 CRITICAL FAILURE in CI on branch '${{ github.ref_name }}' [${{ github.sha }}]" \
+            --body "The **Ultimate Autonomous CI** workflow failed and could not self-heal.
+            - **Triggered by:** ${{ github.event_name }} by @${{ github.actor }}
+            - **Branch:** `${{ github.ref_name }}`
+            - **Commit:** `${{ github.sha }}`
+            - **Workflow Log:** [Click here to view logs](${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }})
+            
+            ### **Manual intervention is urgently required.**" \
+            --label "bug,critical,ci-failure" \
+            --assignee "${{ github.actor }}"