Merge dev into main: bring the prod deploy pipeline and 40 commits of dev work to main

.github/workflows/deploy-parakh-dev.yml

@@ -0,0 +1,187 @@
+name: Update ParakhAI Dev
+
+on:
+  push:
+    branches: ['dev']
+  workflow_dispatch: {}
+
+concurrency:
+  group: parakh-dev-deploy
+  cancel-in-progress: false
+
+jobs:
+  deploy:
+    runs-on: ubuntu-latest
+    environment: development
+    timeout-minutes: 15
+    env:
+      KEYCLOAK_CLIENT_ID: ${{ secrets.KEYCLOAK_CLIENT_ID }}
+      KEYCLOAK_CLIENT_SECRET: ${{ secrets.KEYCLOAK_CLIENT_SECRET }}
+      AUTH_ISSUER: ${{ secrets.AUTH_ISSUER }}
+      NEXTAUTH_URL: ${{ vars.NEXTAUTH_URL }}
+      NEXTAUTH_SECRET: ${{ secrets.NEXTAUTH_SECRET }}
+      END_SESSION_URL: ${{ secrets.END_SESSION_URL }}
+      REFRESH_TOKEN_URL: ${{ secrets.REFRESH_TOKEN_URL }}
+      NEXT_PUBLIC_BACKEND_URL: ${{ vars.NEXT_PUBLIC_BACKEND_URL }}
+      NEXT_PUBLIC_BACKEND_BASE_URL: ${{ vars.NEXT_PUBLIC_BACKEND_BASE_URL }}
+      NEXT_PUBLIC_AI_MAKER_URL: ${{ vars.NEXT_PUBLIC_AI_MAKER_URL }}
+      NEXT_PUBLIC_DATASPACE_API_URL: ${{ vars.NEXT_PUBLIC_DATASPACE_API_URL }}
+      NEXT_PUBLIC_USI_GRAPHQL_ENDPOINT: ${{ vars.NEXT_PUBLIC_USI_GRAPHQL_ENDPOINT }}
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: '20'
+          cache: 'npm'
+
+      - name: Install dependencies
+        run: npm ci --legacy-peer-deps
+
+      - name: Build
+        run: npm run build
+
+      - name: Rename .next to .next2
+        run: mv .next .next2
+
+      - name: Rename public to public2
+        run: mv public public2
+
+      - name: Send files to EC2
+        uses: appleboy/scp-action@v0.1.7
+        with:
+          host: ${{ vars.EC2_HOST }}
+          username: ${{ secrets.EC2_USERNAME }}
+          key: ${{ secrets.EC2_PRIVATE_KEY }}
+          source: .next2,public2,package.json,package-lock.json
+          target: platform/ParakhAI-frontend
+
+      - name: Update with new build
+        uses: appleboy/ssh-action@v1.0.3
+        continue-on-error: false
+        env:
+          HEALTH_CHECK_URL: ${{ vars.HEALTH_CHECK_URL || 'http://localhost:3000' }}
+        with:
+          host: ${{ vars.EC2_HOST }}
+          username: ${{ secrets.EC2_USERNAME }}
+          key: ${{ secrets.EC2_PRIVATE_KEY }}
+          envs: HEALTH_CHECK_URL
+          script: |
+            set -e
+            export PATH="/home/ubuntu/.nvm/versions/node/v24.11.1/bin:$PATH"
+            cd platform/ParakhAI-frontend
+
+            npm ci --legacy-peer-deps --omit=dev
+
+            rm -rf .next.bak public.bak
+            if [ -d .next ]; then mv .next .next.bak; fi
+            if [ -d public ]; then mv public public.bak; fi
+
+            mv .next2 .next
+            mv public2 public
+
+            rollback() {
+              echo "Deploy failed - rolling back to previous build"
+              rm -rf .next public
+              if [ -d .next.bak ]; then mv .next.bak .next; fi
+              if [ -d public.bak ]; then mv public.bak public; fi
+              pm2 restart parakh || true
+              exit 1
+            }
+
+            pm2 restart parakh || rollback
+
+            attempts=0
+            until curl -sf -o /dev/null "$HEALTH_CHECK_URL"; do
+              attempts=$((attempts + 1))
+              if [ "$attempts" -ge 10 ]; then
+                echo "Health check failed after $attempts attempts"
+                rollback
+              fi
+              sleep 3
+            done
+
+            echo "Deploy verified healthy - keeping backup until smoke tests confirm"
+
+  smoke-tests:
+    name: Smoke Tests
+    needs: deploy
+    uses: CivicDataLab/ParakhAI_test/.github/workflows/run-smoke.yml@main
+    secrets:
+      TEST_EMAIL_1: ${{ secrets.TEST_EMAIL_1 }}
+      TEST_PASSWORD_1: ${{ secrets.TEST_PASSWORD_1 }}
+      TEST_EMAIL_2: ${{ secrets.TEST_EMAIL_2 }}
+      TEST_PASSWORD_2: ${{ secrets.TEST_PASSWORD_2 }}
+      SANDBOX_ORG_SLUG: ${{ secrets.SANDBOX_ORG_SLUG }}
+
+  rollback-on-smoke-failure:
+    name: Rollback (smoke tests failed)
+    needs: smoke-tests
+    if: failure() && needs.deploy.result == 'success'
+    runs-on: ubuntu-latest
+    environment: development
+    timeout-minutes: 10
+    steps:
+      - name: Restore previous build and restart
+        uses: appleboy/ssh-action@v1.0.3
+        env:
+          HEALTH_CHECK_URL: ${{ vars.HEALTH_CHECK_URL || 'http://localhost:3000' }}
+        with:
+          host: ${{ vars.EC2_HOST }}
+          username: ${{ secrets.EC2_USERNAME }}
+          key: ${{ secrets.EC2_PRIVATE_KEY }}
+          envs: HEALTH_CHECK_URL
+          script: |
+            set -e
+            export PATH="/home/ubuntu/.nvm/versions/node/v24.11.1/bin:$PATH"
+            cd platform/ParakhAI-frontend
+
+            if [ ! -d .next.bak ] || [ ! -d public.bak ]; then
+              echo "No backup found to roll back to - leaving current deploy in place"
+              exit 1
+            fi
+
+            rm -rf .next public
+            mv .next.bak .next
+            mv public.bak public
+            pm2 restart parakh
+
+            attempts=0
+            until curl -sf -o /dev/null "$HEALTH_CHECK_URL"; do
+              attempts=$((attempts + 1))
+              if [ "$attempts" -ge 10 ]; then
+                echo "Rollback restart did not become healthy after $attempts attempts"
+                exit 1
+              fi
+              sleep 3
+            done
+
+            echo "Rolled back to previous build after failed smoke tests"
+
+      - name: Mark this run as failed
+        run: |
+          echo "::error::Smoke tests failed after deploy - rolled back to the previous build."
+          exit 1
+
+  finalize-deploy:
+    name: Finalize Deploy
+    needs: smoke-tests
+    if: success()
+    runs-on: ubuntu-latest
+    environment: development
+    timeout-minutes: 5
+    steps:
+      - name: Clean up backup build
+        uses: appleboy/ssh-action@v1.0.3
+        with:
+          host: ${{ vars.EC2_HOST }}
+          username: ${{ secrets.EC2_USERNAME }}
+          key: ${{ secrets.EC2_PRIVATE_KEY }}
+          script: |
+            set -e
+            cd platform/ParakhAI-frontend
+            rm -rf .next.bak public.bak
+            echo "Deploy confirmed healthy by smoke tests - backup cleared"

.gitignore

@@ -43,4 +43,4 @@ next-env.d.ts
 /gql/generated/
 
 # graphql-codegen output (auto-generated on npm install via postinstall)
-/generated/
+/generated/