CI/CD Pipeline

test (Job 1)                      deploy (Job 2)
  ├── Install dependencies          ├── Install dependencies
  ├── Validate customer files       ├── Check required secrets
  ├── Setup test database           ├── Pull Vercel environment
  ├── Generate Prisma client        ├── Build with Vercel CLI
  ├── Type checking                 ├── Deploy to production
  ├── Linting                       ├── Comment on commit
  ├── Unit tests                    └── Create deployment status
  ├── Build application
  └── E2E smoke tests

test:
    name: Run Tests
    runs-on: ubuntu-latest

    services:
      postgres:
        image: pgvector/pgvector:pg15
        env:
          POSTGRES_USER: postgres
          POSTGRES_PASSWORD: postgres
          POSTGRES_DB: testdb
        options: >-
          --health-cmd pg_isready
          --health-interval 10s
          --health-timeout 5s
          --health-retries 5
        ports:
          - 5432:5432

    steps:
      - uses: actions/checkout@v4

      - uses: pnpm/action-setup@v3
        with:
          version: 10.15.1

- name: Validate customer .env.test is up-to-date
        run: |
          echo "Validating customer .env.test generation..."

          # Check if generated file exists
          if [ ! -f "apps/boilerplate/.env.test" ]; then
            echo "❌ Error: apps/boilerplate/.env.test does not exist"
            echo "This file should be generated and committed to git"
            echo "Run: cd apps/boilerplate && pnpm generate:env-test"
            exit 1
          fi

          # Compare files (must be identical - no transformations)
          if ! diff -q .env.test apps/boilerplate/.env.test > /dev/null 2>&1; then
            echo "❌ Error: apps/boilerplate/.env.test is outdated"
            echo ""
            echo "The root .env.test was updated but the generated customer version wasn't."
            echo "Please run: cd apps/boilerplate && pnpm generate:env-test"
            echo "Then commit the updated apps/boilerplate/.env.test"
            echo ""
            echo "Differences:"
            diff .env.test apps/boilerplate/.env.test || true
            exit 1
          fi

          echo "✅ Customer .env.test is up-to-date"

deploy:
    name: Deploy to Vercel
    needs: test
    runs-on: ubuntu-latest

    steps:
      - uses: actions/checkout@v4

      - name: Check Required Secrets
        run: |
          echo "Checking for required secrets..."

          if [ -z "${{ secrets.VERCEL_TOKEN }}" ]; then
            echo "❌ Error: VERCEL_TOKEN secret is not set"
            echo "Please add VERCEL_TOKEN to your GitHub repository secrets"
            echo "See docs/DEPLOYMENT_SETUP.md for instructions"
            exit 1
          fi

          if [ -z "${{ secrets.VERCEL_ORG_ID }}" ]; then
            echo "❌ Error: VERCEL_ORG_ID secret is not set"
            echo "Please add VERCEL_ORG_ID to your GitHub repository secrets"
            echo "Required value: team_Bgh9zp308TcrlrYLqGmuGLHN"
            exit 1
          fi

          if [ -z "${{ secrets.VERCEL_PROJECT_ID }}" ]; then
            echo "❌ Error: VERCEL_PROJECT_ID secret is not set"
            echo "Please add VERCEL_PROJECT_ID to your GitHub repository secrets"
            echo "Required value: prj_jf8vKRszL6Xt7IF8EwqxzfnwRXsl"
            exit 1
          fi

          echo "✅ All required secrets are configured"

      - uses: pnpm/action-setup@v3
        with:
          version: 10.15.1

      - uses: actions/setup-node@v4
        with:
          node-version: '20'
          cache: 'pnpm'

      - name: Install dependencies
        run: pnpm install --frozen-lockfile

      - name: Install Vercel CLI
        run: pnpm add -g vercel@latest

      - name: Pull Vercel Environment Information
        run: |
          echo "Pulling Vercel environment configuration..."
          vercel pull --yes --environment=production --token=${{ secrets.VERCEL_TOKEN }}
          echo "✅ Successfully pulled Vercel configuration"

      - name: Build Project Artifacts
        run: |
          echo "Building boilerplate app for production..."
          vercel build --prod --token=${{ secrets.VERCEL_TOKEN }}
          echo "✅ Build completed successfully"

      - name: Deploy to Vercel
        id: deploy
        run: |
          echo "Deploying to Vercel production..."
          # --archive=tgz compresses files before upload to avoid rate limits (>5000 files)
          DEPLOYMENT_URL=$(vercel deploy --prebuilt --prod --archive=tgz --token=${{ secrets.VERCEL_TOKEN }})
          echo "deployment-url=$DEPLOYMENT_URL" >> $GITHUB_OUTPUT
          echo "✅ Successfully deployed to: $DEPLOYMENT_URL"

test (Single Job)
  ├── Install dependencies
  ├── Setup PostgreSQL + pgvector
  ├── Generate Prisma client
  ├── Push database schema
  ├── Type checking
  ├── Linting
  ├── Unit tests
  ├── Validate customer files
  ├── E2E smoke tests
  └── Upload test artifacts

- name: Upload test results
        uses: actions/upload-artifact@v4
        if: always()
        with:
          name: test-results
          path: |
            coverage/
            playwright-report/
          retention-days: 30

name: Full E2E Test Suite

on:
  # Run daily at 2:00 AM UTC
  schedule:
    - cron: '0 2 * * *'
  # Allow manual trigger
  workflow_dispatch:

- name: Create issue on failure
        if: failure()
        uses: actions/github-script@v7
        with:
          script: |
            const title = '🔴 Full E2E Test Suite Failed';
            const body = `
            The scheduled full E2E test suite has failed.

            **Workflow Run:** ${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}
            **Triggered by:** ${{ github.event_name }}
            **Branch:** ${{ github.ref_name }}
            **Commit:** ${{ github.sha }}

            Please review the test results and fix the failing tests.

            [View Playwright Report](${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }})
            `;

            // Check if there's already an open issue
            const issues = await github.rest.issues.listForRepo({
              owner: context.repo.owner,
              repo: context.repo.repo,
              state: 'open',
              labels: 'e2e-test-failure'
            });

            if (issues.data.length === 0) {
              await github.rest.issues.create({
                owner: context.repo.owner,
                repo: context.repo.repo,
                title: title,
                body: body,
                labels: ['e2e-test-failure', 'automated']
              });
            }

env:
  TURBO_TOKEN: ${{ secrets.TURBO_TOKEN }}
  TURBO_TEAM: ${{ secrets.TURBO_TEAM }}

- name: Run Lighthouse CI
  uses: treosh/lighthouse-ci-action@v11
  with:
    urls: |
      ${{ steps.deploy.outputs.deployment-url }}
    budgetPath: ./lighthouse-budget.json
    uploadArtifacts: true

- name: Run database migrations
  run: pnpm --filter=@nextsaas/boilerplate prisma migrate deploy
  env:
    DATABASE_URL: ${{ secrets.DATABASE_URL }}

- name: Notify Slack
  if: success()
  uses: slackapi/slack-github-action@v1
  with:
    payload: |
      {"text": "Deployed to production: ${{ steps.deploy.outputs.deployment-url }}"}
  env:
    SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK_URL }}

# In your workflow, add before install:
- name: Clear Turborepo cache
  run: pnpm turbo run build --force