feat: impl KIE

.github/workflows/auto-approve-trusted-pr-workflows.yml

@@ -15,7 +15,7 @@ permissions:
 
 jobs:
   auto-approve-workflows:
-    if: github.repository == 'tensorzero/tensorzero'
+    if: github.repository == 'RouterBase/tensorzero'
     runs-on: ubuntu-latest
     steps:
       - name: Auto-approve workflow runs for trusted external PRs

.github/workflows/batch-completion-cron.yml

@@ -17,7 +17,7 @@ permissions:
 
 jobs:
   openai-batch:
-    if: github.repository == 'tensorzero/tensorzero'
+    if: github.repository == 'RouterBase/tensorzero'
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
@@ -93,7 +93,7 @@ jobs:
           rm -rf batch_inputs/
 
   google-vertex-batch:
-    if: github.repository == 'tensorzero/tensorzero'
+    if: github.repository == 'RouterBase/tensorzero'
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
@@ -181,7 +181,7 @@ jobs:
           rm -f /tmp/gcp-key.json
 
   anthropic-batch:
-    if: github.repository == 'tensorzero/tensorzero'
+    if: github.repository == 'RouterBase/tensorzero'
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
@@ -235,7 +235,7 @@ jobs:
           "
 
   log-completion:
-    if: github.repository == 'tensorzero/tensorzero'
+    if: github.repository == 'RouterBase/tensorzero'
     needs: [openai-batch, google-vertex-batch, anthropic-batch]
     runs-on: ubuntu-latest
     steps:

.github/workflows/build-gateway-container.yml

@@ -6,21 +6,17 @@ on:
 jobs:
   build-gateway-container:
     runs-on: ubuntu-latest
-    if: github.repository == 'tensorzero/tensorzero'
+    if: github.repository == 'RouterBase/tensorzero'
     permissions:
-      # Permission to checkout the repository
       contents: read
-      # Permission to fetch GitHub OIDC token authentication
       id-token: write
+      packages: write
 
     steps:
-      # TODO - investigate why using the Namespace checkout action causes
-      # 'tensorzero_core::built_info::GIT_COMMIT_HASH_SHORT' to be `None`
       - name: Check out the repo
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
-
-      # We allow the namespace builder setup to fail on Dependabot PRs and PRs from forks
-      # (where the oidc token is not available)
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
 
       - name: Install Namespace CLI
         uses: namespacelabs/nscloud-setup@d1c625762f7c926a54bd39252efff0705fd11c64
@@ -32,26 +28,14 @@ jobs:
           wait-for-builder: true
         continue-on-error: ${{ github.event.pull_request.head.repo.full_name != github.repository || github.actor == 'dependabot[bot]' }}
 
-      - name: Build `gateway` container
-        run: |
-          docker buildx build --build-arg BUILDKIT_CONTEXT_KEEP_GIT_DIR=1 --build-arg PROFILE=dev -f gateway/Dockerfile . -t tensorzero/gateway:sha-${{ github.sha }} -t nscr.io/igvf4asmf8kri/gateway:sha-${{ github.sha }}
-
-      - name: Save `gateway` container
-        run: docker save tensorzero/gateway:sha-${{ github.sha }} > gateway-container.tar
-
-      - name: Upload `gateway` container as an artifact to Github
-        uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4
-        with:
-          name: build-gateway-container
-          path: gateway-container.tar
-          retention-days: 1
-          if-no-files-found: error
-          overwrite: false
-
-      - name: Login to Namespace registry
-        run: nsc docker login
-        continue-on-error: ${{ github.event.pull_request.head.repo.full_name != github.repository || github.actor == 'dependabot[bot]' }}
+      - name: Log in to GitHub Container Registry
+        run: echo "${{ secrets.GITHUB_TOKEN }}" | docker login ghcr.io -u ${{ github.actor }} --password-stdin
 
-      - name: Push `gateway` container to Namespace registry
-        run: docker push nscr.io/igvf4asmf8kri/gateway:sha-${{ github.sha }}
-        continue-on-error: ${{ github.event.pull_request.head.repo.full_name != github.repository || github.actor == 'dependabot[bot]' }}
+      - name: Build and push `gateway` container to GHCR
+        run: |
+          docker buildx build --push \
+            --build-arg BUILDKIT_CONTEXT_KEEP_GIT_DIR=1 \
+            --build-arg PROFILE=dev \
+            -f gateway/Dockerfile . \
+            -t ghcr.io/${{ github.repository }}/gateway:sha-${{ github.sha }} \
+            -t ghcr.io/${{ github.repository }}/gateway:latest

.github/workflows/build-gateway-e2e-container.yml

@@ -16,7 +16,7 @@ env:
 jobs:
   build-gateway-container:
     runs-on: ubuntu-latest
-    if: github.repository == 'tensorzero/tensorzero'
+    if: github.repository == 'RouterBase/tensorzero'
     permissions:
       # Permission to checkout the repository
       contents: read

.github/workflows/build-mock-provider-api-container.yml

@@ -6,7 +6,7 @@ on:
 jobs:
   build-mock-provider-api-container:
     runs-on: ubuntu-latest
-    if: github.repository == 'tensorzero/tensorzero'
+    if: github.repository == 'RouterBase/tensorzero'
     permissions:
       # Permission to checkout the repository
       contents: read

.github/workflows/build-ui-container.yml

@@ -6,12 +6,14 @@ on:
 jobs:
   build-ui-container:
     runs-on: ubuntu-latest
-    if: github.repository == 'tensorzero/tensorzero'
+    if: github.repository == 'RouterBase/tensorzero'
     permissions:
       # Permission to checkout the repository
       contents: read
       # Permission to fetch GitHub OIDC token authentication
       id-token: write
+      # Permission to write to packages (for GHCR push)
+      packages: write
 
     steps:
       # TODO - investigate why using the Namespace checkout action causes
@@ -32,18 +34,9 @@ jobs:
           wait-for-builder: true
         continue-on-error: ${{ github.event.pull_request.head.repo.full_name != github.repository || github.actor == 'dependabot[bot]' }}
 
-      - name: Build `ui` container
-        run: |
-          docker buildx build --build-arg DEBUG_BUILD=1 --build-arg BUILDKIT_CONTEXT_KEEP_GIT_DIR=1 -f ui/Dockerfile . -t tensorzero/ui:sha-${{ github.sha }}
-
-      - name: Save `ui` container
-        run: docker save tensorzero/ui:sha-${{ github.sha }} > ui-container.tar
+      - name: Log in to GitHub Container Registry
+        run: echo "${{ secrets.GITHUB_TOKEN }}" | docker login ghcr.io -u ${{ github.actor }} --password-stdin
 
-      - name: Upload `ui` container as an artifact
-        uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4
-        with:
-          name: build-ui-container
-          path: ui-container.tar
-          retention-days: 1
-          if-no-files-found: error
-          overwrite: false
+      - name: Build and push `ui` container to GHCR
+        run: |
+          docker buildx build --push --build-arg DEBUG_BUILD=1 --build-arg BUILDKIT_CONTEXT_KEEP_GIT_DIR=1 -f ui/Dockerfile . -t ghcr.io/routerbase/tensorzero/ui:sha-${{ github.sha }}

.github/workflows/buildkite-merge-queue.yml

@@ -10,7 +10,7 @@ permissions: {}
 jobs:
   merge-queue-tests:
     runs-on: ubuntu-latest
-    if: github.repository == 'tensorzero/tensorzero'
+    if: github.repository == 'RouterBase/tensorzero'
     steps:
       - name: Trigger a Buildkite Build on Push using v2.0.0
         uses: buildkite/trigger-pipeline-action@v2.0.0

.github/workflows/buildkite-test-suite.yml

@@ -13,7 +13,7 @@ permissions:
 
 jobs:
   unit-tests:
-    if: github.repository == 'tensorzero/tensorzero' && (github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository)
+    if: github.repository == 'RouterBase/tensorzero' && (github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository)
     runs-on: ubuntu-latest
     steps:
       - name: Trigger a Buildkite Build on Push using v2.0.0

.github/workflows/caching-hack.yml

@@ -18,11 +18,11 @@ permissions:
 
 jobs:
   check-python-client-build:
-    if: github.repository == 'tensorzero/tensorzero'
+    if: github.repository == 'RouterBase/tensorzero'
     uses: ./.github/workflows/python-client-build.yml
 
   build-gateway:
-    if: github.repository == 'tensorzero/tensorzero'
+    if: github.repository == 'RouterBase/tensorzero'
     strategy:
       matrix:
         runner:

.github/workflows/cancel-merge-queue-on-job-failure.yml

@@ -13,7 +13,7 @@ jobs:
   check-and-cancel:
     name: Check merge queue workflows and cancel on failure
     runs-on: ubuntu-latest
-    if: github.repository == 'tensorzero/tensorzero'
+    if: github.repository == 'RouterBase/tensorzero'
     steps:
       - name: Check running workflows on merge queue branches
         run: |

.github/workflows/cancel-on-status-failure.yml

@@ -15,7 +15,7 @@ jobs:
     name: Cancel General Checks on Failure
     runs-on: ubuntu-latest
     if: |
-      github.repository == 'tensorzero/tensorzero' && (
+      github.repository == 'RouterBase/tensorzero' && (
         (github.event_name == 'status' && (github.event.state == 'failure' || github.event.state == 'error'))
       )
     steps:

.github/workflows/cancel-stale-merge-queue.yml

@@ -12,7 +12,7 @@ jobs:
   cancel-workflows:
     name: Cancel Workflow Runs
     runs-on: ubuntu-latest
-    if: github.repository == 'tensorzero/tensorzero' && github.event.reason != 'merged'
+    if: github.repository == 'RouterBase/tensorzero' && github.event.reason != 'merged'
     steps:
       - name: Get Merge Queue Commit SHA
         id: get-sha

.github/workflows/cla.yml

@@ -14,7 +14,7 @@ permissions:
 
 jobs:
   CLAAssistant:
-    if: github.repository == 'tensorzero/tensorzero'
+    if: github.repository == 'RouterBase/tensorzero'
     runs-on: ubuntu-latest
     steps:
       - name: "CLA Assistant"

.github/workflows/dispatch-autopilot-e2e.yml

@@ -11,7 +11,7 @@ on:
 jobs:
   dispatch-autopilot:
     runs-on: ubuntu-latest
-    if: github.repository == 'tensorzero/tensorzero'
+    if: github.repository == 'RouterBase/tensorzero'
     permissions:
       contents: read
     steps:

.github/workflows/docker-hub-publish.yml

@@ -26,7 +26,7 @@ jobs:
   build:
     name: Build and push Docker image to Docker Hub
     runs-on: ${{ matrix.platform.runner }}
-    if: github.repository == 'tensorzero/tensorzero'
+    if: github.repository == 'RouterBase/tensorzero'
     strategy:
       matrix:
         platform:
@@ -115,7 +115,7 @@ jobs:
   merge:
     permissions:
       actions: read
-    if: github.repository == 'tensorzero/tensorzero'
+    if: github.repository == 'RouterBase/tensorzero'
     strategy:
       matrix:
         container:

.github/workflows/dummy.yml

@@ -10,6 +10,6 @@ jobs:
   # See 'ci/README.md' at the repository root for more details.
   merge-checks-buildkite:
     runs-on: ubuntu-latest
-    if: github.repository == 'tensorzero/tensorzero'
+    if: github.repository == 'RouterBase/tensorzero'
     steps:
       - run: echo "This is a dummy job to satisfy branch protection checks"