Live graph support

[nithyatsu]

This pull request introduces live deployment progress reporting for Radius application deploys and adds a new artifact uploader utility. The main changes include a new polling mechanism to track deployment state in real time, a TypeScript-based uploader for workflow artifacts, and comprehensive tests for these new components. Additionally, the documentation and artifact publication logic have been updated to reflect these enhancements.

Live deployment progress reporting:

• Added a polling mechanism in progress.sh that tracks resource state during an application deploy, periodically publishing snapshots as workflow artifacts named with the environment, application, run ID, and slot. These artifacts are rotated and retained for one day, enabling real-time updates in the deployment UI. [1] [2]
• Updated the documentation in .github/extension/README.md to describe the live progress polling, artifact naming, retention, and the new behavior for resource status reporting and environment variable redaction.

Artifact uploader utility:

• Introduced a new TypeScript uploader in artifact-uploader/src/upload.ts that uploads deployment progress files as workflow artifacts, with support for replacing existing artifacts in a slot. This uploader is invoked by the polling script and is tested with a dedicated test suite. [1] [2]
• Added a package.json and tsconfig.json for the uploader, specifying dependencies, build, and test scripts. [1] [2]

Testing and integration:

• Added a shell test script progress_test.sh to validate the polling, artifact upload, slot rotation, and error handling logic in various scenarios.
• Updated publish-deploy-status/action.yml to source the new progress.sh script, integrating live progress reporting into the deploy workflow.

Summary

Reason for change

Fixes #

How to test

File change summary

File	Summary of change

[github-actions]

Functional Tests - corerp-cloud

32 tests  ±0   31 ✅ ±0   20m 6s ⏱️ -51s
 2 suites ±0    1 💤 ±0 
 1 files   ±0    0 ❌ ±0 

Results for commit a4d4122. ± Comparison against base commit ca7b5a3.

♻️ This comment has been updated with latest results.

[Copilot]

Pull request overview

This pull request adds live deployment progress reporting for Radius application deploys by polling resource state during rad deploy and publishing sequenced deploy-progress.json snapshots as workflow artifacts. It also adds a defense-in-depth graph sanitization layer to ensure Radius.Core preview graphs omit container environment-variable maps before any serialization or artifact publication.

Changes:

• Add a Go sanitization helper that deep-clones graph properties and omits properties.containers[*].env for Radius.Compute/containers, wired into both runtime and modeled Radius.Core preview graph producers with tests.
• Introduce deploy-progress/progress.sh and integrate it into run-rad-commands and publish-deploy-status to support live polling, slot rotation, and terminal sequence handoff (plus action-level shell tests).
• Add a bundled TypeScript artifact uploader (via @actions/artifact) with unit tests and a new make test-deploy-progress target.

Reviewed changes

Copilot reviewed 20 out of 24 changed files in this pull request and generated 2 comments.

Show a summary per file

File	Description
specs/005-live-deploy-graph/spec.md	Feature specification for live deploy graph progress, sequencing, artifact naming, and env sanitization requirements.
specs/005-live-deploy-graph/plan.md	Implementation plan spanning CLI/graph safety, action-side polling, uploader, and test strategy.
pkg/graph/sanitization/properties.go	New helper to deep-clone properties and omit container env maps.
pkg/graph/sanitization/properties_test.go	Unit tests validating env omission and non-mutation of inputs.
pkg/corerp/frontend/controller/applications/v20250801preview/graph_util.go	Apply sanitization to runtime Radius.Core preview graph projection.
pkg/corerp/frontend/controller/applications/v20250801preview/graph_util_test.go	Test ensuring runtime graph output omits container env maps.
pkg/cli/graph/modeled.go	Apply sanitization to modeled Radius.Core preview graph output.
pkg/cli/graph/modeled_test.go	Test ensuring modeled graph output omits container env maps.
build/test.mk	Add test-deploy-progress and include it in make test.
.github/extension/README.md	Document live polling behavior, artifact ring naming/retention, sequence handoff, and env omission guarantee.
.github/extension/actions/run-rad-commands/deploy-parameters_test.sh	Assert action wiring sources progress helper and wraps deploy paths with start/stop/cleanup.
.github/extension/actions/run-rad-commands/action.yml	Source progress helper, configure uploader path, and wrap app deploy with live polling start/stop and EXIT cleanup.
.github/extension/actions/publish-deploy-status/publish-deploy-status_test.sh	Extend tests to enforce --preview resource listing, sequence handoff, and env omission in deploy-graph.json.
.github/extension/actions/publish-deploy-status/action.yml	Use shared helpers, switch status source to rad resource list --preview, add sanitized warning on failures, and set terminal sequence.
.github/extension/actions/deploy-progress/progress.sh	New polling/normalization/uploader orchestration for live progress artifacts and sequence checkpointing.
.github/extension/actions/deploy-progress/progress_test.sh	Shell test validating slot rotation, checkpoint behavior, and artifact name sanitization.
.github/extension/actions/deploy-progress/artifact-uploader/tsconfig.json	TS config for the uploader.
.github/extension/actions/deploy-progress/artifact-uploader/src/upload.ts	Upload implementation using @actions/artifact with optional slot deletion.
.github/extension/actions/deploy-progress/artifact-uploader/src/upload_test.ts	Unit tests for uploader behavior (slot replacement and deletion failures).
.github/extension/actions/deploy-progress/artifact-uploader/pnpm-lock.yaml	Locked dependencies for the uploader.
.github/extension/actions/deploy-progress/artifact-uploader/package.json	Scripts to test and bundle the uploader with ncc and license output.
.github/extension/actions/deploy-progress/artifact-uploader/dist/package.json	Mark bundled output as ESM (type: module).

Files not reviewed (1)

• .github/extension/actions/deploy-progress/artifact-uploader/pnpm-lock.yaml: Generated file

---

💡 Configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

[sk593]

Three findings remain relevant on the latest head.

[brooke-hamilton]

🚀

[codecov]

Codecov Report

❌ Patch coverage is 85.71429% with 5 lines in your changes missing coverage. Please review.
✅ Project coverage is 54.46%. Comparing base (b4ebe2f) to head (43f46a7).

Files with missing lines	Patch %	Lines
pkg/graph/sanitization/properties.go	83.87%	5 Missing ⚠️

Additional details and impacted files

@@            Coverage Diff             @@
##             main   #12727      +/-   ##
==========================================
+ Coverage   54.45%   54.46%   +0.01%     
==========================================
  Files         770      771       +1     
  Lines       51415    51446      +31     
==========================================
+ Hits        27998    28022      +24     
- Misses      20794    20799       +5     
- Partials     2623     2625       +2     

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[radius-functional-tests]

Radius functional test overview

🔍 Go to test action run

Click here to see the test run details

Name	Value
Repository	nithyatsu/radius
Commit ref	43f46a7
Unique ID	funcda80f6a0c2
Image tag	pr-funcda80f6a0c2

• Dapr: 1.14.4
• Azure KeyVault CSI driver: 1.4.2
• Azure Workload identity webhook: 1.3.0
• Bicep recipe location ghcr.io/radius-project/dev/test/testrecipes/test-bicep-recipes/<name>:pr-funcda80f6a0c2
• Terraform recipe location http://tf-module-server.radius-test-tf-module-server.svc.cluster.local/<name>.zip (in cluster)
• applications-rp test image location: ghcr.io/radius-project/dev/applications-rp:pr-funcda80f6a0c2
• dynamic-rp test image location: ghcr.io/radius-project/dev/dynamic-rp:pr-funcda80f6a0c2
• controller test image location: ghcr.io/radius-project/dev/controller:pr-funcda80f6a0c2
• ucp test image location: ghcr.io/radius-project/dev/ucpd:pr-funcda80f6a0c2
• deployment-engine test image location: ghcr.io/radius-project/deployment-engine:latest

Test Status

⌛ Building Radius and pushing container images for functional tests...
✅ Container images build succeeded
⌛ Publishing Bicep Recipes for functional tests...
✅ Recipe publishing succeeded
⌛ Starting corerp-cloud functional tests...
⌛ Starting ucp-cloud functional tests...
✅ ucp-cloud functional tests succeeded
✅ corerp-cloud functional tests succeeded