adding validation protection

Author: RoxyFarhad

.github/workflows/build-and-push-tutorial-agent.yml

@@ -195,7 +195,74 @@ jobs:
           if [ "$SHOULD_PUSH" = "true" ]; then
             agentex agents build $BUILD_ARGS --push
             echo "✅ Successfully built and pushed: ${REGISTRY}/${REPOSITORY_NAME}:${VERSION_TAG}"
+            # Set full image name for validation step
+            echo "FULL_IMAGE=${REGISTRY}/${REPOSITORY_NAME}:${VERSION_TAG}" >> $GITHUB_ENV
           else
             agentex agents build $BUILD_ARGS
             echo "✅ Build validation successful for: ${{ matrix.agent_path }}"
+            # Set full image name for validation step (local build)
+            echo "FULL_IMAGE=${REGISTRY}/${REPOSITORY_NAME}:${VERSION_TAG}" >> $GITHUB_ENV
           fi
+
+      - name: Validate agent image
+        run: |
+          set -e
+
+          FULL_IMAGE="${{ env.FULL_IMAGE }}"
+          AGENT_PATH="${{ matrix.agent_path }}"
+
+          echo "🔍 Validating agent image: $FULL_IMAGE"
+
+          # 1. Validate ACP entry point exists and is importable
+          echo "📦 Checking ACP entry point..."
+          docker run --rm "$FULL_IMAGE" python -c "from project.acp import acp; print('✅ ACP entry point validated')"
+
+          # 2. Check if tests/test_agent.py exists and run it
+          echo "🧪 Checking for tests/test_agent.py..."
+          if docker run --rm "$FULL_IMAGE" test -f /app/tests/test_agent.py; then
+            echo "Found tests/test_agent.py - running tests..."
+            docker run --rm "$FULL_IMAGE" python -m pytest /app/tests/test_agent.py -v --tb=short
+            echo "✅ Agent tests passed"
+          else
+            echo "⚠️ No tests/test_agent.py found at /app/tests/test_agent.py - skipping test validation"
+            echo "   Consider adding tests/test_agent.py to validate agent functionality"
+          fi
+
+          # 3. Health check - start container and verify /api endpoint responds
+          echo "🏥 Running health check..."
+          CONTAINER_NAME="validate-agent-$$"
+
+          # Start container in background
+          docker run -d --name "$CONTAINER_NAME" -p 8000:8000 "$FULL_IMAGE"
+
+          # Wait for container to be ready (max 30 seconds)
+          echo "Waiting for agent to start..."
+          MAX_ATTEMPTS=30
+          ATTEMPT=0
+          HEALTH_OK=false
+
+          while [ $ATTEMPT -lt $MAX_ATTEMPTS ]; do
+            ATTEMPT=$((ATTEMPT + 1))
+            if curl -sf http://localhost:8000/api > /dev/null 2>&1; then
+              HEALTH_OK=true
+              break
+            fi
+            sleep 1
+          done
+
+          # Capture logs before cleanup
+          echo "📋 Container logs:"
+          docker logs "$CONTAINER_NAME" || true
+
+          # Cleanup container
+          docker stop "$CONTAINER_NAME" > /dev/null 2>&1 || true
+          docker rm "$CONTAINER_NAME" > /dev/null 2>&1 || true
+
+          if [ "$HEALTH_OK" = true ]; then
+            echo "✅ Health check passed - agent responds on /api"
+          else
+            echo "❌ Health check failed - agent did not respond on /api within 30 seconds"
+            exit 1
+          fi
+
+          echo "✅ All validations passed for: $FULL_IMAGE"