eve-pipelines-workflows

Eve Pipelines and Workflows

Use these patterns to automate build and deploy actions and invoke workflow jobs.

Pipelines (v2 steps)

• Define pipelines under pipelines in .eve/manifest.yaml.
• Steps can be action, script, or agent.
• Use depends_on to control ordering.
• Built-in actions include build, release, deploy, run, job, create-pr.
• Run manually:
  • eve pipeline list
  • eve pipeline show <project> <name>
  • eve pipeline run <name> --ref <sha> --env <env> --repo-dir ./my-app
• Trigger blocks exist in the manifest; GitHub and Slack webhooks can create pipeline runs.

Built-in Actions

build action

Build actions create BuildSpec and BuildRun records that are tracked and observable:

• Creates BuildSpec (defines what to build) and BuildRun (execution record) in the database
• Outputs include build_id and image_digests map (service name to SHA256 digest)
• These outputs automatically flow to dependent steps (release uses build_id)
• Inspect builds independently: eve build show, eve build diagnose, eve build runs, eve build logs

Agent steps

Use agent steps when a pipeline stage should run an AI agent job:

pipelines:
  remediation:
    steps:
      - name: analyze
        agent:
          prompt: 

Canonical pipeline flow

Every deploy pipeline should follow this pattern:

Promotion workflow

Build once in test, then promote the same build artifacts to staging/production:

• The build step creates a BuildRun with artifacts (image digests)
• Releases carry the build_id forward, ensuring identical images across environments
• This pattern guarantees you deploy exactly what you tested

Track pipeline execution:

Pipeline Logs & Streaming

Monitor pipeline runs in real time:

Failed steps include failure hints and link to build diagnostics when applicable.

Environment Deploy as Pipeline Alias

When an environment has a pipeline configured in the manifest, eve env deploy <env> --ref <sha> automatically triggers that pipeline instead of doing a direct deploy.

Basic usage

Promotion flow example

Key behaviors

• If environments.<env>.pipeline is set, eve env deploy <env> triggers that pipeline
• Use --direct flag to bypass the pipeline and perform a direct deploy
• Use --inputs '{"key":"value"}' to pass inputs to the pipeline run
• Default inputs can be configured via environments.<env>.pipeline_inputs in the manifest
• The --ref flag specifies which git SHA to deploy (40-character SHA or ref resolved via --repo-dir)
• Environment variables and secrets are interpolated as usual

This pattern enables promotion workflows where you build once in a lower environment and promote the same artifact through higher environments.

Workflows

• Define workflows under workflows in the manifest.
• db_access is honored when present (read_only, read_write).
• Invocation resource_refs are available to every workflow step by default, including dependent steps. Use workflow-level resource_refs to set a default policy and step-level resource_refs to override it:
  • inherit / all: pass all invocation refs.
  • none: pass no refs.
  • [brief, design-system]: pass only matching ref name, label, mount_path, uri, or metadata.name.
• Invoke manually:
  • eve workflow list
  • eve workflow show <project> <name>
  • eve workflow run <project> <name> --input '{"k":"v"}' (fire-and-forget)
  • eve workflow invoke <project> <name> --input '{"k":"v"}' (wait for result)
  • eve workflow logs <job-id>
• Invocation creates a job; track it with normal job commands.

Workflow Hints

Control gating, timeouts, and harness preferences via hints:

Conditional Steps

Skip a downstream step based on an upstream's outcome. Conditions reference named upstream steps and resolve at dispatch time:

Conditions support == and != against upstream step status. Referenced steps must appear in depends_on — validation rejects ghost references and bad condition syntax at manifest sync.

Step-Level Harness Overrides

Pin or override harness per step (workflow steps and pipeline steps share the same shape):

Step-level values take precedence over agent-resolved defaults. harness_profile may carry a template like ${inputs.model} for caller-driven selection.

Workflow env_overrides

Set env at three layers — workflow, step, invocation — and the runtime merges them in that order (later wins). Reference secrets with ${secret.KEY}; the resolver redacts them in logs.

Callers add a third layer at invoke time:

Pipeline env propagates down to the run's env_name so steps see the right scope without re-declaring it.

Per-Job Harness Override (Ad-Hoc Jobs)

When firing an ad-hoc job (outside a workflow), override the harness on the create call:

The override flows end-to-end through dispatch and claim, taking precedence over agent-resolved values.

Slack Notifications, Retry, and File Refs

• Workflow hints.slack posts step start/complete/fail to a configured channel.
• Retry the failed/upstream-failed tail of a previous invocation:
  • eve workflow retry <root-job-id> --failed
  • eve workflow retry <root-job-id> --from <step>
• Workflow steps accept file references (resource_refs entries that point at a path) — they materialize into the step's workspace alongside other refs.