Reactive-Resume/.github/workflows/vercel.yml

name: Vercel compatibility

on:
  pull_request:
  push:
    branches: [main]
  workflow_dispatch:

permissions:
  contents: read

env:
  FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true

jobs:
  artifact:
    runs-on: ${{ vars.USE_BLACKSMITH == 'true' && 'blacksmith-32vcpu-ubuntu-2404' || 'ubuntu-latest' }}
    timeout-minutes: 20
    services:
      postgres:
        image: postgres:17-alpine
        env:
          POSTGRES_PASSWORD: postgres
        ports: [5432:5432]
        options: >-
          --health-cmd "pg_isready -U postgres"
          --health-interval 5s --health-timeout 5s --health-retries 10
    env:
      APP_URL: http://localhost:3000
      DATABASE_URL: postgresql://postgres:postgres@localhost:5432/postgres
      AUTH_SECRET: isolated-ci-auth-secret-32-characters
      ENCRYPTION_SECRET: isolated-ci-encryption-secret-32-characters
      REDIS_URL: redis://localhost:6379
      STORAGE_BACKEND: blob
      BLOB_READ_WRITE_TOKEN: vercel_blob_rw_ci_fake_build_only
      VERCEL: "1"
      VERCEL_ENV: production
    steps:
      - if: ${{ vars.USE_BLACKSMITH != 'true' }}
        uses: actions/checkout@v6
        with:
          persist-credentials: false
      - if: ${{ vars.USE_BLACKSMITH == 'true' }}
        uses: useblacksmith/checkout@v1
        with:
          persist-credentials: false
      - uses: pnpm/action-setup@v6
      - uses: actions/setup-node@v6
        with:
          node-version-file: .nvmrc
          cache: pnpm
      - name: Cache Turbo artifacts
        uses: actions/cache@v5
        with:
          path: .turbo/cache
          key: ${{ runner.os }}-${{ runner.arch }}-turbo-${{ github.workflow }}-${{ hashFiles('pnpm-lock.yaml', '.nvmrc') }}-${{ github.sha }}
          restore-keys: |
            ${{ runner.os }}-${{ runner.arch }}-turbo-${{ github.workflow }}-${{ hashFiles('pnpm-lock.yaml', '.nvmrc') }}-

      - run: pnpm install --frozen-lockfile
      # Local project settings avoid authentication and API calls. Forks receive no cloud credentials.
      - name: Build Vercel artifact against isolated PostgreSQL
        run: |
          mkdir -p .vercel
          node --input-type=module - <<'JS'
          import { writeFileSync } from 'node:fs';
          writeFileSync('.vercel/project.json', JSON.stringify({
            projectId: 'prj_ci', orgId: 'team_ci', projectName: 'reactive-resume-ci',
            settings: { framework: 'services', nodeVersion: '24.x', createdAt: 0 }
          }));
          JS
          pnpm dlx --allow-build=esbuild vercel@61.0.0 build --prod --yes --global-config "$RUNNER_TEMP/vercel-offline"
      # Runs the backend Function from a copy outside the checkout, so a dependency the build left out fails here.
      - name: Check backend Function loading and budget
        run: |
          node --no-experimental-require-module --input-type=module - <<'JS'
          import assert from 'node:assert/strict';
          import { cpSync, lstatSync, mkdirSync, readFileSync, readlinkSync, symlinkSync } from 'node:fs';
          import { dirname, join } from 'node:path';
          const func = '.vercel/output/services/backend/functions/index.func';
          const config = JSON.parse(readFileSync(`${func}/.vc-config.json`));
          assert.equal(config.runtime, 'nodejs24.x');
          assert.equal(config.maxDuration, 300);
          assert.equal(config.handler, 'apps/server/vercel.mjs');
          const root = join(process.env.RUNNER_TEMP, 'backend-function');
          cpSync(func, root, { recursive: true, verbatimSymlinks: true });
          for (const [path, source] of Object.entries(config.filePathMap ?? {})) {
            mkdirSync(dirname(join(root, path)), { recursive: true });
            if (lstatSync(source).isSymbolicLink()) symlinkSync(readlinkSync(source), join(root, path));
            else cpSync(source, join(root, path));
          }
          const { default: app } = await import(join(root, config.handler));
          const stage = await app.fetch(new Request('http://localhost:3000/api/storage/stage', { method: 'POST', body: '{}' }));
          assert.equal(stage.status, 401);
          const home = await app.fetch(new Request('http://localhost:3000/'));
          assert.equal(home.status, 200);
          assert.match(await home.text(), /application\/ld\+json/);
          process.exit(0);
          JS

  live-smoke:
    if: github.event_name == 'workflow_dispatch'
    runs-on: ${{ vars.USE_BLACKSMITH == 'true' && 'blacksmith-2vcpu-ubuntu-2404' || 'ubuntu-latest' }}
    environment: vercel-smoke
    timeout-minutes: 10
    steps:
      - if: ${{ vars.USE_BLACKSMITH != 'true' }}
        uses: actions/checkout@v6
        with:
          persist-credentials: false
      - if: ${{ vars.USE_BLACKSMITH == 'true' }}
        uses: useblacksmith/checkout@v1
        with:
          persist-credentials: false
      - uses: actions/setup-node@v6
        with:
          node-version-file: .nvmrc
      - name: Smoke-test dedicated deployment
        env:
          SMOKE_URL: ${{ vars.VERCEL_SMOKE_URL }}
          SMOKE_AI_BASE_URL: ${{ vars.VERCEL_SMOKE_AI_BASE_URL }}
          SMOKE_AI_API_KEY: ${{ secrets.VERCEL_SMOKE_AI_API_KEY }}
        run: node tooling/deployment/smoke.mjs