policyengine-api-v2-alpha/.github/workflows/db-reset.yml at 0891456c5edae03bcf695b1395c5f5fbe4663f62 · PolicyEngine/policyengine-api-v2-alpha · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
name: Reset production database

on:
  workflow_dispatch:
    inputs:
      mode:
        description: "Seeding mode"
        required: true
        default: "lite"
        type: choice
        options:
          - lite
          - full
      confirm:
        description: "Type 'reset-prod' to confirm"
        required: true
        type: string
  pull_request:
    paths:
      - ".github/workflows/db-reset.yml"

jobs:
  # Validation job - runs on PR to test connectivity (no environment = no approval needed)
  validate:
    name: Validate database connectivity
    runs-on: ubuntu-latest
    if: github.event_name == 'pull_request'

    steps:
      - name: Checkout code
        uses: actions/checkout@v4

      - name: Install uv
        uses: astral-sh/setup-uv@v5

      - name: Setup Python
        run: uv python install 3.13

      - name: Sync dependencies
        run: uv sync

      - name: Test database connectivity
        env:
          SUPABASE_DB_URL: ${{ secrets.SUPABASE_POOLER_URL }}
        run: |
          echo "Testing database connectivity..."
          uv run python -c "
          from policyengine_api.config.settings import settings
          from sqlmodel import create_engine, text
          engine = create_engine(settings.database_url, echo=False)
          with engine.connect() as conn:
              result = conn.execute(text('SELECT 1'))
              print('✅ Database connection successful')
          "

  # Reset job - only runs on manual trigger with confirmation
  reset-db:
    name: Reset and reseed database
    runs-on: ubuntu-latest
    if: github.event_name == 'workflow_dispatch'
    environment: production

    steps:
      - name: Verify confirmation
        if: ${{ github.event.inputs.confirm != 'reset-prod' }}
        run: |
          echo "❌ Confirmation failed. You must type 'reset-prod' to proceed."
          exit 1

      - name: Checkout code
        uses: actions/checkout@v4

      - name: Install uv
        uses: astral-sh/setup-uv@v5

      - name: Setup Python
        run: uv python install 3.13

      - name: Sync dependencies
        run: uv sync

      - name: Reset database (init)
        env:
          SUPABASE_DB_URL: ${{ secrets.SUPABASE_POOLER_URL }}
          SUPABASE_URL: ${{ secrets.SUPABASE_URL }}
          SUPABASE_KEY: ${{ secrets.SUPABASE_KEY }}
          SUPABASE_SECRET_KEY: ${{ secrets.SUPABASE_SECRET_KEY }}
          LOGFIRE_TOKEN: ${{ secrets.LOGFIRE_TOKEN }}
          LOGFIRE_ENVIRONMENT: prod
        run: |
          echo "Resetting database tables..."
          echo "yes" | uv run python scripts/init.py --reset

      - name: Seed database (lite)
        if: ${{ github.event.inputs.mode == 'lite' }}
        env:
          SUPABASE_DB_URL: ${{ secrets.SUPABASE_POOLER_URL }}
          SUPABASE_URL: ${{ secrets.SUPABASE_URL }}
          SUPABASE_KEY: ${{ secrets.SUPABASE_KEY }}
          SUPABASE_SECRET_KEY: ${{ secrets.SUPABASE_SECRET_KEY }}
          STORAGE_BUCKET: ${{ vars.STORAGE_BUCKET }}
          LOGFIRE_TOKEN: ${{ secrets.LOGFIRE_TOKEN }}
          LOGFIRE_ENVIRONMENT: prod
          HUGGING_FACE_TOKEN: ${{ secrets.HUGGING_FACE_TOKEN }}
        run: |
          echo "Seeding database (lite mode - fewer params, includes datasets)..."
          uv run python scripts/seed.py --lite

      - name: Seed database (full)
        if: ${{ github.event.inputs.mode == 'full' }}
        env:
          SUPABASE_DB_URL: ${{ secrets.SUPABASE_POOLER_URL }}
          SUPABASE_URL: ${{ secrets.SUPABASE_URL }}
          SUPABASE_KEY: ${{ secrets.SUPABASE_KEY }}
          SUPABASE_SECRET_KEY: ${{ secrets.SUPABASE_SECRET_KEY }}
          HUGGING_FACE_TOKEN: ${{ secrets.HUGGING_FACE_TOKEN }}
          STORAGE_BUCKET: ${{ vars.STORAGE_BUCKET }}
          LOGFIRE_TOKEN: ${{ secrets.LOGFIRE_TOKEN }}
          LOGFIRE_ENVIRONMENT: prod
        run: |
          echo "Seeding database (full mode - includes datasets)..."
          uv run python scripts/seed.py

      - name: Summary
        run: |
          echo "✅ Database reset complete!"
          echo "Mode: ${{ github.event.inputs.mode }}"
          echo "Triggered by: ${{ github.actor }}"