[global] Gradle에서 Bazel로 빌드 시스템 전면 전환

.bazelproject

@@ -0,0 +1,14 @@
+directories:
+  bazel
+  datagsm-common
+  datagsm-ksp-processor
+  datagsm-oauth-authorization
+  datagsm-oauth-userinfo
+  datagsm-openapi
+  datagsm-shared
+  datagsm-web
+
+derive_targets_from_directories: true
+
+targets:
+  //...

.bazelrc

@@ -0,0 +1,15 @@
+# Bazel migration research config (research/bazel-migration branch).
+# Additive only — does not affect the Gradle build.
+
+common --enable_bzlmod
+
+# Runtime + bytecode target JDK 25 to match the production server (eclipse-temurin:25).
+# Bazel ships hermetic remote JDKs, so the host JDK is irrelevant. The KSP worker / build
+# tools also run on JDK 25, so datagsm-ksp-processor can target 25 bytecode safely.
+build --java_language_version=25
+build --java_runtime_version=remotejdk_25
+build --tool_java_language_version=25
+build --tool_java_runtime_version=remotejdk_25
+
+# Quieter, reproducible-ish local builds during research.
+test --test_output=errors

.github/copilot-instructions.md

@@ -27,10 +27,12 @@ DataGSM is a Spring Boot REST API service providing school information (students
 
 ## Commands
 
-- Build: `./gradlew build`
-- Test: `./gradlew test`
-- Format: `./gradlew ktlintFormat`
-- Run: `./gradlew :datagsm-{module}:bootRun`
+Build system is **Bazel** (bazelisk).
+
+- Build: `bazel build //...`
+- Test: `bazel test //...`
+- Format: `bazel run //bazel:ktlint -- -F` (check: `bazel run //bazel:ktlint`)
+- Run: `bazel run //datagsm-{module}:{name}`
 
 ## Coding Conventions
 

.github/workflows/datagsm-prod-cd.yaml

@@ -77,21 +77,21 @@ jobs:
         uses: actions/checkout@v6
         with:
           ref: ${{ inputs.branch || github.event.workflow_run.head_sha || 'master' }}
-      - name: Setup JDK 25
+      - name: Setup Bazel
+        uses: bazel-contrib/setup-bazel@0.19.0
+        with:
+          bazelisk-cache: true
+          disk-cache: true
+          repository-cache: true
+      - name: Setup JDK for mvn deploy
         uses: actions/setup-java@v5
         with:
-          java-version: '25'
           distribution: 'temurin'
-      - name: Setup Gradle
-        uses: gradle/actions/setup-gradle@v5
-        with:
-          cache-read-only: false
-          cache-cleanup: always
+          java-version: '17'
       - name: Publish JVM artifact to GitHub Packages
-        run: >
-          ./gradlew :datagsm-common:kspKotlin
-          :datagsm-shared:publishJvmPublicationToGitHubPackagesRepository
-          -PSHARED_VERSION=${{ needs.generate-version.outputs.version }}
+        # --//bazel:kt_jvm_target=17 emits JVM 17 bytecode (SDK consumer floor), not the
+        # default JVM 25 the service modules use.
+        run: bazel run //datagsm-shared:publish --//bazel:kt_jvm_target=17 -- ${{ needs.generate-version.outputs.version }}
         env:
           GITHUB_ACTOR: ${{ github.actor }}
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
@@ -105,28 +105,28 @@ jobs:
         uses: actions/checkout@v6
         with:
           ref: ${{ inputs.branch || github.event.workflow_run.head_sha || 'master' }}
-      - name: Setup JDK 25
-        uses: actions/setup-java@v5
+      - name: Setup Bazel
+        uses: bazel-contrib/setup-bazel@0.19.0
         with:
-          java-version: '25'
-          distribution: 'temurin'
-      - name: Setup Gradle
-        uses: gradle/actions/setup-gradle@v5
-        with:
-          cache-read-only: false
-          cache-cleanup: always
+          bazelisk-cache: true
+          disk-cache: true
+          repository-cache: true
       - name: Setup Node
         uses: actions/setup-node@v5
         with:
           node-version: '24'
           registry-url: 'https://registry.npmjs.org'
       - name: Assemble type-only npm package
-        run: >
-          ./gradlew :datagsm-shared:assembleTsPackage
-          -PSHARED_VERSION=${{ needs.generate-version.outputs.version }}
+        run: |
+          bazel build //datagsm-shared:ts_package
+          mkdir -p npm-pkg && cp bazel-bin/datagsm-shared/npm/index.d.ts bazel-bin/datagsm-shared/npm/package.json npm-pkg/
+          # npm requires semver; CI passes "<yyyyMMdd>-<run>" → normalize to "<yyyyMMdd>.0.0-<run>".
+          RAW="${{ needs.generate-version.outputs.version }}"
+          NPM_VERSION=$(echo "$RAW" | sed -E 's/^([0-9]+)-([0-9]+)$/\1.0.0-\2/')
+          cd npm-pkg && npm version "$NPM_VERSION" --no-git-tag-version --allow-same-version
       - name: Publish to npmjs.com
         run: npm publish --access public
-        working-directory: datagsm-shared/build/npm-ts
+        working-directory: npm-pkg
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
 
@@ -142,17 +142,12 @@ jobs:
         with:
           ref: ${{ inputs.branch || github.event.workflow_run.head_sha || 'master' }}
 
-      - name: Setup JDK 25
-        uses: actions/setup-java@v5
-        with:
-          java-version: '25'
-          distribution: 'temurin'
-
-      - name: Setup Gradle
-        uses: gradle/actions/setup-gradle@v5
+      - name: Setup Bazel
+        uses: bazel-contrib/setup-bazel@0.19.0
         with:
-          cache-read-only: false
-          cache-cleanup: always
+          bazelisk-cache: true
+          disk-cache: true
+          repository-cache: true
 
       - name: Make YML Files
         run: |
@@ -174,8 +169,13 @@ jobs:
           echo "${{ secrets.PROD_OAUTH_USERINFO_APPLICATION_YAML }}" > ./datagsm-oauth-userinfo/src/main/resources/application-prod.yml
         shell: bash
 
-      - name: Build with Gradle
-        run: ./gradlew assemble
+      - name: Build with Bazel
+        run: >
+          bazel build
+          //datagsm-oauth-authorization:oauth-authorization_deploy_tar
+          //datagsm-openapi:openapi_deploy_tar
+          //datagsm-web:web_deploy_tar
+          //datagsm-oauth-userinfo:oauth-userinfo_deploy_tar
 
       - name: Configure AWS Credentials
         uses: aws-actions/configure-aws-credentials@v6
@@ -187,15 +187,10 @@ jobs:
       - name: Make ZIP File
         run: |
           mkdir -p deploy-package
-          mkdir -p deploy-package/datagsm-oauth-authorization/build/libs
-          mkdir -p deploy-package/datagsm-openapi/build/libs
-          mkdir -p deploy-package/datagsm-web/build/libs
-          mkdir -p deploy-package/datagsm-oauth-userinfo/build/libs
-
-          cp datagsm-oauth-authorization/build/libs/*.jar deploy-package/datagsm-oauth-authorization/build/libs/
-          cp datagsm-openapi/build/libs/*.jar deploy-package/datagsm-openapi/build/libs/
-          cp datagsm-web/build/libs/*.jar deploy-package/datagsm-web/build/libs/
-          cp datagsm-oauth-userinfo/build/libs/*.jar deploy-package/datagsm-oauth-userinfo/build/libs/
+          for m in datagsm-oauth-authorization datagsm-openapi datagsm-web datagsm-oauth-userinfo; do
+            mkdir -p "deploy-package/$m"
+            tar xf "bazel-bin/$m/${m#datagsm-}_deploy_tar.tar" -C "deploy-package/$m"
+          done
 
           cp datagsm-oauth-authorization/prod.dockerfile deploy-package/datagsm-oauth-authorization/
           cp datagsm-openapi/prod.dockerfile deploy-package/datagsm-openapi/

.github/workflows/datagsm-prod-ci.yaml

@@ -93,31 +93,29 @@ jobs:
       - name: Checkout Code
         uses: actions/checkout@v6
 
-      - name: Setup JDK 25
-        uses: actions/setup-java@v5
+      - name: Setup Bazel
+        uses: bazel-contrib/setup-bazel@0.19.0
         with:
-          java-version: '25'
-          distribution: 'temurin'
+          bazelisk-cache: true
+          disk-cache: true
+          repository-cache: true
 
-      - name: Setup Gradle
-        uses: gradle/actions/setup-gradle@v5
-        with:
-          cache-read-only: false
-          cache-cleanup: always
+      - name: Build and Test with Bazel
+        run: bazel test //...
 
-      - name: Test with Gradle
-        run: ./gradlew build --parallel --build-cache
+      - name: Lint with ktlint
+        run: bazel run //bazel:ktlint
 
       - name: Assemble type-only npm package
-        run: ./gradlew :datagsm-shared:assembleTsPackage --build-cache
+        run: bazel build //datagsm-shared:ts_package
 
       - name: Setup Node
         uses: actions/setup-node@v5
         with:
           node-version: '24'
 
       - name: Type-check generated index.d.ts
-        run: npx -y -p typescript@5 tsc --strict --noEmit datagsm-shared/build/npm-ts/index.d.ts
+        run: npx -y -p typescript@5 tsc --strict --noEmit bazel-bin/datagsm-shared/npm/index.d.ts
 
   notify:
     runs-on: ubuntu-latest

.github/workflows/datagsm-stage-cd.yaml

@@ -32,17 +32,12 @@ jobs:
         with:
           ref: ${{ inputs.branch || github.event.workflow_run.head_branch || 'develop' }}
 
-      - name: Setup JDK 25
-        uses: actions/setup-java@v5
+      - name: Setup Bazel
+        uses: bazel-contrib/setup-bazel@0.19.0
         with:
-          java-version: '25'
-          distribution: 'temurin'
-
-      - name: Setup Gradle
-        uses: gradle/actions/setup-gradle@v5
-        with:
-          cache-read-only: false
-          cache-cleanup: always
+          bazelisk-cache: true
+          disk-cache: true
+          repository-cache: true
 
       - name: Make YML Files
         run: |
@@ -64,8 +59,13 @@ jobs:
           echo "${{ secrets.STAGE_OAUTH_USERINFO_APPLICATION_YAML }}" > ./datagsm-oauth-userinfo/src/main/resources/application-stage.yml
         shell: bash
 
-      - name: Build with Gradle
-        run: ./gradlew assemble
+      - name: Build with Bazel
+        run: >
+          bazel build
+          //datagsm-oauth-authorization:oauth-authorization_deploy_tar
+          //datagsm-openapi:openapi_deploy_tar
+          //datagsm-web:web_deploy_tar
+          //datagsm-oauth-userinfo:oauth-userinfo_deploy_tar
 
       - name: Configure AWS Credentials
         uses: aws-actions/configure-aws-credentials@v6
@@ -77,15 +77,10 @@ jobs:
       - name: Make ZIP File
         run: |
           mkdir -p deploy-package
-          mkdir -p deploy-package/datagsm-oauth-authorization/build/libs
-          mkdir -p deploy-package/datagsm-openapi/build/libs
-          mkdir -p deploy-package/datagsm-web/build/libs
-          mkdir -p deploy-package/datagsm-oauth-userinfo/build/libs
-
-          cp datagsm-oauth-authorization/build/libs/*.jar deploy-package/datagsm-oauth-authorization/build/libs/
-          cp datagsm-openapi/build/libs/*.jar deploy-package/datagsm-openapi/build/libs/
-          cp datagsm-web/build/libs/*.jar deploy-package/datagsm-web/build/libs/
-          cp datagsm-oauth-userinfo/build/libs/*.jar deploy-package/datagsm-oauth-userinfo/build/libs/
+          for m in datagsm-oauth-authorization datagsm-openapi datagsm-web datagsm-oauth-userinfo; do
+            mkdir -p "deploy-package/$m"
+            tar xf "bazel-bin/$m/${m#datagsm-}_deploy_tar.tar" -C "deploy-package/$m"
+          done
 
           cp datagsm-oauth-authorization/stage.dockerfile deploy-package/datagsm-oauth-authorization/
           cp datagsm-openapi/stage.dockerfile deploy-package/datagsm-openapi/

.github/workflows/datagsm-stage-ci.yaml

@@ -91,31 +91,29 @@ jobs:
       - name: Checkout Code
         uses: actions/checkout@v6
 
-      - name: Setup JDK 25
-        uses: actions/setup-java@v5
+      - name: Setup Bazel
+        uses: bazel-contrib/setup-bazel@0.19.0
         with:
-          java-version: '25'
-          distribution: 'temurin'
+          bazelisk-cache: true
+          disk-cache: true
+          repository-cache: true
 
-      - name: Setup Gradle
-        uses: gradle/actions/setup-gradle@v5
-        with:
-          cache-read-only: false
-          cache-cleanup: always
+      - name: Build and Test with Bazel
+        run: bazel test //...
 
-      - name: Test with Gradle
-        run: ./gradlew build --parallel --build-cache
+      - name: Lint with ktlint
+        run: bazel run //bazel:ktlint
 
       - name: Assemble type-only npm package
-        run: ./gradlew :datagsm-shared:assembleTsPackage --build-cache
+        run: bazel build //datagsm-shared:ts_package
 
       - name: Setup Node
         uses: actions/setup-node@v5
         with:
           node-version: '24'
 
       - name: Type-check generated index.d.ts
-        run: npx -y -p typescript@5 tsc --strict --noEmit datagsm-shared/build/npm-ts/index.d.ts
+        run: npx -y -p typescript@5 tsc --strict --noEmit bazel-bin/datagsm-shared/npm/index.d.ts
 
   notify:
     runs-on: ubuntu-latest

.gitignore

@@ -21,6 +21,8 @@ bin/
 .idea/*
 !.idea/externalDependencies.xml
 !.idea/icon.svg
+!.idea/runConfigurations
+!.idea/runConfigurations/*
 *.iws
 *.iml
 *.ipr
@@ -51,3 +53,8 @@ out/
 PR_BODY.md
 .pr-tmp/
 /.claude/command.log
+
+### Bazel ###
+# Convenience symlinks into the build cache (bazel-bin, bazel-out, bazel-testlogs,
+# bazel-<workspace>). MODULE.bazel.lock IS committed for reproducible resolution.
+/bazel-*