ddtcorex/dsh-maestro-ci

Reusable GitHub Actions workflows for the Maestro suite. Callers live in each repo as a thin .github/workflows/ci.yml; fix or extend pipelines here once and every repo picks it up on its next run.

Workflows

node-plugin.yml

CI for every Node plugin package (packages/dsh-maestro-*, maestro-skills, dsh-maestro-meta). Steps: frozen-lockfile install → build → optional client bundle → test → flat-lib/index.js contract → publish dry-run.

Inputs (all optional): node-version (22), pnpm-version (11), run-build (true), run-client-build (false), require-lib-index (true).

Caller template:

name: CI
on:
  push:
    branches: [master]
  pull_request:

concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

permissions:
  contents: read

jobs:
  verify:
    uses: ddtcorex/dsh-maestro-ci/.github/workflows/node-plugin.yml@85d17f85a15c9a5e0a39638eb72925a095625d0e

Special cases:

• Patch-only bundle (dsh-maestro-meta, no lib): pass run-build: false and require-lib-index: false.
• Client bundle (dsh-maestro-mobile, dsh-maestro-config): pass run-client-build: true.

Versioning

Callers pin a full commit SHA of main (see caller template above). After merging a workflow change here, bump the SHA in every caller repo so the change is reviewed per-repo. Use gh api repos/ddtcorex/dsh-maestro-ci/commits/main --jq .sha to get the current SHA. Never pin @main — SHA pinning ensures reproducible, reviewable pipelines per checklist §5.