Merge branch 'dev' into vercel-integration

.github/workflows/check-prisma-migrations.yaml

@@ -0,0 +1,41 @@
+name: Ensure Prisma migrations are in sync with the schema
+
+on:
+  push:
+    branches:
+      - dev
+      - main
+  pull_request:
+    branches:
+      - dev
+      - main
+
+jobs:
+  check_prisma_migrations:
+    runs-on: ubuntu-latest
+
+    strategy:
+      matrix:
+        node-version: [22.x]
+
+    steps:
+      - uses: actions/checkout@v3
+
+      - name: Setup Node.js ${{ matrix.node-version }}
+        uses: actions/setup-node@v3
+        with:
+          node-version: ${{ matrix.node-version }}
+
+      - name: Setup pnpm
+        uses: pnpm/action-setup@v3
+        with:
+            version: 9.1.2
+
+      - name: Install dependencies
+        run: pnpm install --frozen-lockfile
+
+      - name: Start Postgres shadow DB
+        run: docker run -d --name postgres-prisma-diff-shadow -e POSTGRES_USER=postgres -e POSTGRES_PASSWORD=PLACEHOLDER-PASSWORD--dfaBC1hm1v -e POSTGRES_DB=postgres -p 5432:5432 postgres:latest
+
+      - name: Check for differences in Prisma schema and migrations
+        run: pnpm run prisma migrate diff --from-migrations ./prisma/migrations --to-schema-datamodel ./prisma/schema.prisma --shadow-database-url postgres://postgres:PLACEHOLDER-PASSWORD--dfaBC1hm1v@localhost:5432/postgres --exit-code

.github/workflows/docker-build.yaml

@@ -5,15 +5,14 @@ on:
     branches:
       - main
       - dev
-      - docker-build
     tags:
       - "*.*.*"
   pull_request:
 
 jobs:
   build-server:
     name: Docker Build and Push Server
-    runs-on: ubuntu-latest
+    runs-on: ubicloud-standard-8
     steps:
       - name: Checkout
         uses: actions/checkout@v4

.github/workflows/docker-test.yaml

@@ -0,0 +1,43 @@
+name: Docker Test
+
+on:
+  push:
+    branches:
+      - dev
+      - main
+  pull_request:
+    branches:
+      - dev
+      - main
+
+jobs:
+  docker:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v3
+
+      - name: Setup postgres
+        run: |
+          docker run -d --name db -e POSTGRES_USER=postgres -e POSTGRES_PASSWORD=password -e POSTGRES_DB=stackframe -p 5432:5432 postgres:latest
+          sleep 5
+          docker logs db
+
+      - name: Build Docker image
+        run: docker build -f docker/server/Dockerfile -t server .
+
+      - name: Run Docker container and check logs
+        run: |
+          docker run --add-host=host.docker.internal:host-gateway --env-file docker/server/.env.example -p 8101:8101 -p 8102:8102 -d --name stackframe-server server
+          sleep 10
+          docker logs stackframe-server
+
+      - name: Check server health
+        run: |
+          echo "Attempting to connect to server..."
+          curl -v http://localhost:8101
+          response_code=$(curl -s -o /dev/null -w "%{http_code}" http://localhost:8101)
+          echo "Response code: $response_code"
+          if [ $response_code -ne 200 ]; then
+            echo "Server health check failed with status code: $response_code"
+            exit 1
+          fi

.github/workflows/e2e-api-tests.yaml

@@ -12,14 +12,14 @@ on:
 
 jobs:
   build:
-    runs-on: ubuntu-latest
+    runs-on: ubicloud-standard-16
     env:
       NODE_ENV: test
       STACK_ENABLE_HARDCODED_PASSKEY_CHALLENGE_FOR_TESTING: yes
 
     strategy:
       matrix:
-        node-version: [20.x, 22.x]
+        node-version: [20.x]
 
     steps:
       - uses: actions/checkout@v3
@@ -125,6 +125,9 @@ jobs:
       - name: Run tests again, to make sure they are stable (attempt 3)
         run: pnpm test
 
+      - name: Verify data integrity
+        run: pnpm run verify-data-integrity
+
       - name: Print Docker Compose logs
         if: always()
         run: docker compose -f dependencies.compose.yaml logs

.github/workflows/lint-and-build.yaml

@@ -12,7 +12,7 @@ on:
 
 jobs:
   lint_and_build:
-    runs-on: ubuntu-latest
+    runs-on: ubicloud-standard-8
 
     strategy:
       matrix:
@@ -72,6 +72,21 @@ jobs:
 
       - name: Typecheck
         run: pnpm typecheck
+
+      - name: Store Quetzal API key in packages/stack/.env.local to prepare for code gen
+        run: echo "QUETZAL_API_KEY=${{ secrets.QUETZAL_API_KEY }}" > packages/stack/.env.local
+
+      - name: Run code gen  # so we can check for uncommitted changes afterwards; `build` doesn't regenerate some committed files, eg. Quetzal
+        run: pnpm codegen
+
+      - name: Check for uncommitted changes
+        run: |
+          if [[ -n $(git status --porcelain) ]]; then
+            echo "Error: There are uncommitted changes after build/lint/typecheck."
+            echo "Please commit all changes before pushing."
+            git status
+            exit 1
+          fi
       
       - name: Check for uncommitted changes
         run: |

.github/workflows/preview-docs.yaml

@@ -4,7 +4,7 @@ on: pull_request
 
 jobs:
   run:
-    runs-on: ubuntu-latest
+    runs-on: ubicloud-standard-8
 
     permissions: write-all
 

.github/workflows/publish-docs.yaml

@@ -7,22 +7,7 @@ on:
 
 jobs:
   run:
-    runs-on: ubuntu-latest
-    env:
-      NEXT_PUBLIC_STACK_API_URL: http://localhost:8102
-      NEXT_PUBLIC_STACK_PROJECT_ID: internal
-      NEXT_PUBLIC_STACK_PUBLISHABLE_CLIENT_KEY: internal-project-publishable-client-key
-      STACK_SECRET_SERVER_KEY: internal-project-secret-server-key
-      STACK_SERVER_SECRET: 23-wuNpik0gIW4mruTz25rbIvhuuvZFrLOLtL7J4tyo
-
-      STACK_EMAIL_HOST: 127.0.0.1
-      STACK_EMAIL_PORT: 2500
-      STACK_EMAIL_USERNAME: test
-      STACK_EMAIL_PASSWORD: none
-      STACK_EMAIL_SENDER: [email protected]
-
-      STACK_DATABASE_CONNECTION_STRING: postgres://postgres:PASSWORD-PLACEHOLDER--uqfEC1hmmv@localhost:5432/stackframe
-      STACK_DIRECT_DATABASE_CONNECTION_STRING: postgres://postgres:PASSWORD-PLACEHOLDER--uqfEC1hmmv@localhost:5432/stackframe
+    runs-on: ubicloud-standard-8
 
     permissions: write-all
 

.vscode/extensions.json

@@ -11,6 +11,6 @@
 	],
 	// List of extensions recommended by VS Code that should not be recommended for users of this workspace.
 	"unwantedRecommendations": [
-
+		"esbenp.prettier-vscode"
 	]
 }

.vscode/settings.json

@@ -7,20 +7,27 @@
   "typescript.tsdk": "node_modules/typescript/lib",
   "editor.tabSize": 2,
   "cSpell.words": [
+    "backlinks",
     "Cdfc",
     "cjsx",
     "clsx",
     "cmdk",
     "codegen",
     "Crudl",
     "ctsx",
+    "datapoints",
     "deindent",
+    "deindented",
+    "EAUTH",
+    "EDNS",
+    "EMESSAGE",
     "Falsey",
     "frontends",
     "geoip",
     "hookform",
     "hostable",
     "INBUCKET",
+    "ipcountry",
     "Jwks",
     "JWTs",
     "katex",
@@ -67,6 +74,8 @@
     "typecheck",
     "typehack",
     "Uncapitalize",
+    "unindexed",
+    "unsubscribers",
     "upsert",
     "webapi",
     "webauthn",
@@ -80,5 +89,13 @@
   },
   "terminal.integrated.wordSeparators": " (){}',\"`─‘’“”|",
   "editor.formatOnSave": false,
-  "prettier.enable": false
+  "prettier.enable": false,
+  "debug.javascript.autoAttachSmartPattern": [
+    "${workspaceFolder}/**",
+    "!**/node_modules/**",
+    "**/$KNOWN_TOOLS$/**",
+    "**/start-server.js",
+    "**/turbo/**"
+  ],
+  "files.insertFinalNewline": true
 }