harrryyd
diff --git a/‎.env.example‎
Lines changed: 12 additions & 0 deletions b/‎.env.example‎
Lines changed: 12 additions & 0 deletions
diff --git a/‎.github/workflows/ci.yml‎
Lines changed: 96 additions & 49 deletions b/‎.github/workflows/ci.yml‎
Lines changed: 96 additions & 49 deletions
diff --git a/‎.github/workflows/deploy-relay.yml‎
Lines changed: 80 additions & 0 deletions b/‎.github/workflows/deploy-relay.yml‎
Lines changed: 80 additions & 0 deletions
diff --git a/‎.github/workflows/mobile-eas-preview.yml‎
Lines changed: 78 additions & 0 deletions b/‎.github/workflows/mobile-eas-preview.yml‎
Lines changed: 78 additions & 0 deletions
@@ -0,0 +1,12 @@
+# Optional: T3 Cloud source builds
+# Leave these unset to disable optional T3 Cloud features in local source builds.
+# Release builds inject their public values at build time. Do not add server-side
+# secrets to this file.
+
+# Get these from the Clerk Dashboard under API keys, JWT templates, and OAuth applications.
+# T3CODE_CLERK_PUBLISHABLE_KEY=pk_test_...
+# T3CODE_CLERK_JWT_TEMPLATE=t3-relay
+# T3CODE_CLERK_CLI_OAUTH_CLIENT_ID=oauthapp_...
+
+# Get this from your relay deployment. `infra/relay` deploys update it automatically.
+# T3CODE_RELAY_URL=https://relay.example.com
@@ -7,72 +7,125 @@ on:
       - main
 
 jobs:
-  quality:
-    name: Format, Lint, Typecheck, Test, Browser Test, Build
+  check:
+    name: Check
     runs-on: blacksmith-8vcpu-ubuntu-2404
     timeout-minutes: 10
     steps:
       - name: Checkout
         uses: actions/checkout@v6
 
-      - name: Setup Bun
-        uses: oven-sh/setup-bun@v2
+      - name: Setup Vite+
+        uses: voidzero-dev/setup-vp@v1
         with:
-          bun-version-file: package.json
+          node-version-file: package.json
+          cache: true
+          run-install: true
+
+      - name: Ensure Electron runtime is installed
+        run: vp run --filter @t3tools/desktop ensure:electron
+
+      - name: Check
+        run: vp check
+
+      - name: Typecheck
+        run: vpr typecheck
+
+      - name: Build desktop pipeline
+        run: vp run build:desktop
 
-      - name: Setup Node
-        uses: actions/setup-node@v6
+      - name: Verify preload bundle output
+        run: |
+          test -f apps/desktop/dist-electron/preload.cjs
+          grep -nE "desktopBridge|getLocalEnvironmentBootstrap|PICK_FOLDER_CHANNEL|wsUrl" apps/desktop/dist-electron/preload.cjs
+
+  test:
+    name: Test
+    runs-on: blacksmith-8vcpu-ubuntu-2404
+    timeout-minutes: 10
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v6
+
+      - name: Setup Vite+
+        uses: voidzero-dev/setup-vp@v1
         with:
           node-version-file: package.json
+          cache: true
+          run-install: true
 
-      - name: Cache Bun and Turbo
-        uses: actions/cache@v5
+      - name: Ensure Electron runtime is installed
+        run: vp run --filter @t3tools/desktop ensure:electron
+
+      - name: Test
+        run: vp run test
+
+  test_browser:
+    name: Test Browser
+    runs-on: blacksmith-8vcpu-ubuntu-2404
+    timeout-minutes: 10
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v6
+
+      - name: Setup Vite+
+        uses: voidzero-dev/setup-vp@v1
         with:
-          path: |
-            ~/.bun/install/cache
-            .turbo
-          key: ${{ runner.os }}-bun-${{ hashFiles('bun.lock') }}-${{ hashFiles('turbo.json') }}
-          restore-keys: |
-            ${{ runner.os }}-bun-${{ hashFiles('bun.lock') }}-
+          node-version-file: package.json
+          cache: true
+          run-install: true
 
       - name: Cache Playwright browsers
         uses: actions/cache@v5
         with:
           path: ~/.cache/ms-playwright
-          key: ${{ runner.os }}-playwright-${{ hashFiles('bun.lock') }}
+          key: ${{ runner.os }}-playwright-${{ hashFiles('pnpm-lock.yaml') }}
           restore-keys: |
             ${{ runner.os }}-playwright-
 
-      - name: Install dependencies
-        run: bun install --frozen-lockfile
-
-      - name: Format
-        run: bun run fmt:check
-
-      - name: Lint
-        run: bun run lint
+      - name: Install browser test runtime
+        run: vp run --filter @t3tools/web test:browser:install
 
-      - name: Typecheck
-        run: bun run typecheck
+      - name: Browser test / Chat view
+        working-directory: apps/web
+        run: vp test run --mode browser --browser=chromium src/components/ChatView.browser.tsx
 
-      - name: Test
-        run: bun run test
+      - name: Browser test / Chat markdown
+        working-directory: apps/web
+        run: vp test run --mode browser --browser=chromium src/components/ChatMarkdown.browser.tsx
 
-      - name: Install browser test runtime
+      - name: Browser test / Components
+        working-directory: apps/web
         run: |
-          cd apps/web
-          bunx playwright install --with-deps chromium
+          vp test run --mode browser --browser=chromium \
+            src/components/GitActionsControl.browser.tsx \
+            src/components/KeybindingsToast.browser.tsx \
+            src/components/ThreadTerminalDrawer.browser.tsx \
+            src/components/chat/MessagesTimeline.browser.tsx \
+            src/components/chat/ProviderModelPicker.browser.tsx \
+            src/components/chat/CompactComposerControlsMenu.browser.tsx \
+            src/components/settings/SettingsPanels.browser.tsx
+
+  mobile_native_static_analysis:
+    name: Mobile Native Static Analysis
+    runs-on: blacksmith-12vcpu-macos-26
+    timeout-minutes: 10
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v6
 
-      - name: Browser test
-        run: bun run --cwd apps/web test:browser
+      - name: Setup Vite+
+        uses: voidzero-dev/setup-vp@v1
+        with:
+          node-version-file: package.json
+          cache: true
+          run-install: true
 
-      - name: Build desktop pipeline
-        run: bun run build:desktop
+      - name: Install mobile native static analysis tools
+        run: brew bundle install --file apps/mobile/Brewfile
 
-      - name: Verify preload bundle output
-        run: |
-          test -f apps/desktop/dist-electron/preload.cjs
-          grep -nE "desktopBridge|getLocalEnvironmentBootstrap|PICK_FOLDER_CHANNEL|wsUrl" apps/desktop/dist-electron/preload.cjs
+      - name: Lint mobile native sources
+        run: vp run lint:mobile
 
   release_smoke:
     name: Release Smoke
@@ -82,18 +135,12 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v6
 
-      - name: Setup Bun
-        uses: oven-sh/setup-bun@v2
-        with:
-          bun-version-file: package.json
-
-      - name: Setup Node
-        uses: actions/setup-node@v6
+      - name: Setup Vite+
+        uses: voidzero-dev/setup-vp@v1
         with:
           node-version-file: package.json
-
-      - name: Install dependencies
-        run: bun install --frozen-lockfile
+          cache: true
+          run-install: true
 
       - name: Exercise release-only workflow steps
         run: node scripts/release-smoke.ts
@@ -0,0 +1,80 @@
+name: Deploy T3 Cloud relay
+
+on:
+  push:
+    branches:
+      - main
+
+permissions:
+  contents: read
+  id-token: none
+  statuses: write
+
+concurrency:
+  group: relay-production
+  cancel-in-progress: false
+
+jobs:
+  deploy_relay:
+    name: Deploy production relay
+    runs-on: blacksmith-8vcpu-ubuntu-2404
+    timeout-minutes: 15
+    environment:
+      name: production
+    env:
+      CLOUDFLARE_ACCOUNT_ID: ${{ vars.CLOUDFLARE_ACCOUNT_ID }}
+      PLANETSCALE_ORGANIZATION: ${{ vars.PLANETSCALE_ORGANIZATION }}
+      AXIOM_ORG_ID: ${{ vars.AXIOM_ORG_ID }}
+      RELAY_DOMAIN: ${{ vars.RELAY_DOMAIN }}
+      RELAY_API_ZONE_NAME: ${{ vars.RELAY_API_ZONE_NAME }}
+      RELAY_TUNNEL_ZONE_NAME: ${{ vars.RELAY_TUNNEL_ZONE_NAME }}
+      CLERK_PUBLISHABLE_KEY: ${{ vars.CLERK_PUBLISHABLE_KEY }}
+      CLERK_JWT_AUDIENCE: ${{ vars.CLERK_JWT_AUDIENCE }}
+      APNS_ENVIRONMENT: ${{ vars.APNS_ENVIRONMENT }}
+      APNS_TEAM_ID: ${{ vars.APNS_TEAM_ID }}
+      APNS_KEY_ID: ${{ vars.APNS_KEY_ID }}
+      APNS_BUNDLE_ID: ${{ vars.APNS_BUNDLE_ID }}
+      ALCHEMY_TELEMETRY_DISABLED: "1"
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v6
+
+      - name: Setup Vite+
+        uses: voidzero-dev/setup-vp@v1
+        with:
+          node-version-file: package.json
+          cache: true
+          run-install: true
+
+      - name: Deploy production relay stage
+        id: deploy
+        run: vp run --filter t3code-relay deploy --stage prod --yes --github-output
+        env:
+          CLOUDFLARE_API_TOKEN: ${{ secrets.CLOUDFLARE_API_TOKEN }}
+          PLANETSCALE_API_TOKEN_ID: ${{ secrets.PLANETSCALE_API_TOKEN_ID }}
+          PLANETSCALE_API_TOKEN: ${{ secrets.PLANETSCALE_API_TOKEN }}
+          AXIOM_TOKEN: ${{ secrets.AXIOM_TOKEN }}
+          CLERK_SECRET_KEY: ${{ secrets.CLERK_SECRET_KEY }}
+          APNS_PRIVATE_KEY: ${{ secrets.APNS_PRIVATE_KEY }}
+
+      - name: Publish relay deploy commit status
+        uses: actions/github-script@v8
+        with:
+          script: |
+            const result = "${{ steps.deploy.outputs.result }}";
+            const changed = "${{ steps.deploy.outputs.changed }}" === "true";
+            const description = changed
+              ? "Relay production deploy applied infrastructure changes."
+              : result === "noop"
+                ? "Relay production deploy was a no-op."
+                : `Relay production deploy completed with result: ${result}.`;
+
+            await github.rest.repos.createCommitStatus({
+              owner: context.repo.owner,
+              repo: context.repo.repo,
+              sha: context.sha,
+              state: "success",
+              context: "Relay deploy / production",
+              description,
+              target_url: `${context.serverUrl}/${context.repo.owner}/${context.repo.repo}/actions/runs/${context.runId}`,
+            });
@@ -0,0 +1,78 @@
+name: Mobile EAS Preview
+
+on:
+  pull_request:
+
+jobs:
+  preview:
+    name: EAS Preview
+    runs-on: blacksmith-8vcpu-ubuntu-2404
+    permissions:
+      contents: read
+      pull-requests: write
+    env:
+      APP_VARIANT: preview
+      NODE_OPTIONS: --max-old-space-size=8192
+      MOBILE_VERSION_POLICY: fingerprint
+    steps:
+      - id: expo-token
+        name: Check for EXPO_TOKEN
+        env:
+          EXPO_TOKEN: ${{ secrets.EXPO_TOKEN }}
+        run: |
+          if [ -n "$EXPO_TOKEN" ]; then
+            echo "present=true" >> "$GITHUB_OUTPUT"
+          else
+            echo "present=false" >> "$GITHUB_OUTPUT"
+            echo "EXPO_TOKEN is not available; skipping EAS preview."
+          fi
+
+      - name: Checkout
+        if: steps.expo-token.outputs.present == 'true'
+        uses: actions/checkout@v6
+        with:
+          fetch-depth: 0
+
+      - name: Setup Vite+
+        if: steps.expo-token.outputs.present == 'true'
+        uses: voidzero-dev/setup-vp@v1
+        with:
+          node-version-file: package.json
+          cache: true
+          run-install: true
+
+      - name: Expose pnpm
+        if: steps.expo-token.outputs.present == 'true'
+        run: |
+          pnpm_version="$(node --print "require('./package.json').packageManager.split('@').pop()")"
+          vp_pnpm_bin="$HOME/.vite-plus/package_manager/pnpm/$pnpm_version/pnpm/bin"
+          echo "$vp_pnpm_bin" >> "$GITHUB_PATH"
+          "$vp_pnpm_bin/pnpm" --version
+
+      - name: Setup EAS
+        if: steps.expo-token.outputs.present == 'true'
+        uses: expo/expo-github-action@v8
+        with:
+          eas-version: latest
+          token: ${{ secrets.EXPO_TOKEN }}
+          packager: pnpm
+
+      - name: Pull preview environment variables
+        if: steps.expo-token.outputs.present == 'true'
+        working-directory: apps/mobile
+        env:
+          EXPO_TOKEN: ${{ secrets.EXPO_TOKEN }}
+        run: eas env:pull preview --non-interactive
+
+      - name: Deploy with fingerprint check
+        if: steps.expo-token.outputs.present == 'true'
+        uses: expo/expo-github-action/continuous-deploy-fingerprint@main
+        env:
+          EXPO_TOKEN: ${{ secrets.EXPO_TOKEN }}
+        with:
+          profile: preview:dev
+          branch: pr-${{ github.event.pull_request.number }}
+          platform: all
+          environment: preview
+          working-directory: apps/mobile
+          github-token: ${{ secrets.GITHUB_TOKEN }}