dev => main

.agent/rules/website.md

@@ -0,0 +1,78 @@
+---
+trigger: always_on
+---
+
+# Agent Guide - Website Relaunch
+
+This repository is a monorepo containing multiple services. Please follow these guidelines when working on this codebase.
+
+## Project Structure
+
+- `api/` - NestJS API service (TypeScript)
+- `frontend/` - Next.js frontend application (TypeScript)
+- `github-service/` - NestJS service for GitHub integration (TypeScript)
+- `k8s-service/` - Kubernetes management service (Go)
+
+## 1. Build, Lint, and Test Commands
+
+### General
+
+- Package Manager: `pnpm` is used for JavaScript/TypeScript projects.
+- Go: Standard Go toolchain (1.23+) and `make`.
+
+### `api/` & `github-service/` (NestJS)
+
+- **Build:** `pnpm build` (Runs `nest build`)
+- **Format:** `pnpm format` (Runs `prettier`)
+- **Run Dev:** `pnpm start:dev`
+
+### `frontend/` (Next.js)
+
+- **Build:** `pnpm build` (Runs `next build`)
+- **Dev:** `pnpm dev`
+
+### `k8s-service/` (Go)
+
+- **Build:** `make build` (compiles to `bin/server`)
+- **Run:** `make run`
+
+## 2. Code Style & Conventions
+
+### TypeScript (NestJS & Next.js)
+
+- **Formatting:** Use Prettier. 2 spaces indentation. Double quotes for strings and imports. Semicolons required.
+- **Naming:**
+  - Variables/Functions: `camelCase`
+  - Classes/Interfaces/Components: `PascalCase`
+  - Files: `kebab-case.ts` (NestJS conventions), `PascalCase.tsx` (React components) or `page.tsx`/`layout.tsx` (Next.js App Router).
+- **Imports:** Clean and organized. Remove unused imports.
+- **Typing:** Strict TypeScript. Avoid `any` where possible. Use interfaces/types for DTOs and props.
+- **NestJS Specifics:**
+  - Use Dependency Injection via constructors.
+  - Use Decorators (`@Injectable()`, `@Controller()`, `@Get()`) appropriately.
+  - Follow `module` -> `controller` -> `service` architecture.
+- **Next.js Specifics:**
+  - Use App Router structure (`app/`).
+  - Mark Client Components with `"use client"` at the top.
+  - Use Tailwind CSS for styling.
+  - **UI Components:** ONLY use `shadcn/ui` components for building UIs. Do not introduce other UI libraries or create custom components if a `shadcn` equivalent exists. Check `components/ui` or `components.json` for available components.
+
+### Go (`k8s-service`)
+
+- **Formatting:** Standard `gofmt`.
+- **Project Layout:** Follows Standard Go Project Layout (`cmd/`, `internal/`, `pkg/`).
+- **Error Handling:**
+  - Return errors as the last return value.
+  - Check errors immediately: `if err != nil { return err }`.
+  - Don't panic unless during startup.
+- **Logging:** Use `zap.SugaredLogger`.
+- **Web Framework:** Uses `echo`.
+- **Configuration:** Uses `internal/config` and environment variables.
+
+## 3. General Rules for Agents
+
+1.  **Context is King:** Always analyze the surrounding code before making changes to match the existing style.
+2.  **Verify Changes:** Run the lint and test commands for the specific service you are modifying before declaring the task complete.
+3.  **Monorepo Awareness:** Be aware of which directory you are in. Do not run `npm` commands in the root if you intend to affect a specific service; `cd` into the service directory or use `pnpm --filter`.
+4.  **No Blind Edits:** Use `read` to check file contents before `edit` or `write`.
+5.  **Paths:** Always use absolute paths for file operations.

.github/workflows/api-build.yml

@@ -2,18 +2,18 @@ name: Build API
 
 on:
   push:
-    branches: [ main, dev ]
+    branches: [main, dev]
     paths:
       - "api/**"
       - ".github/workflows/api-build.yml"
       - ".github/workflows/api-deploy.yml"
   pull_request:
-    branches: [ main, dev ]
+    branches: [main, dev]
     paths:
       - "api/**"
       - ".github/workflows/api-build.yml"
       - ".github/workflows/api-deploy.yml"
-    types: [ opened, synchronize, reopened ]
+    types: [opened, synchronize, reopened]
   workflow_dispatch:
     inputs:
       environment:
@@ -34,6 +34,49 @@ env:
   IMAGE_NAME: ${{ github.repository }}-api
 
 jobs:
+  lint:
+    if: |
+      github.event_name == 'workflow_dispatch' ||
+      github.event_name == 'push' ||
+      (github.event_name == 'pull_request' &&
+       github.head_ref != 'dev' &&
+       github.event.pull_request.base.ref != github.event.pull_request.head.ref)
+    runs-on: blacksmith-2vcpu-ubuntu-2404
+    permissions:
+      contents: read
+      actions: write
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v6
+
+      - name: Setup pnpm
+        uses: pnpm/action-setup@v4
+        with:
+          version: 10
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v6
+        with:
+          node-version: 25
+          cache: "pnpm"
+          cache-dependency-path: api/pnpm-lock.yaml
+
+      - name: Install dependencies
+        working-directory: ./api
+        run: pnpm install --frozen-lockfile
+
+      - name: Lint code
+        working-directory: ./api
+        run: |
+          pnpm lint
+          git diff --exit-code ..
+
+      - name: Cancel workflow on failure
+        if: failure()
+        run: gh run cancel ${{ github.run_id }}
+        env:
+          GH_TOKEN: ${{ github.token }}
+
   build:
     # Only run on pull requests that are cross-branch or on direct pushes
     if: |
@@ -45,10 +88,11 @@ jobs:
     runs-on: blacksmith-4vcpu-ubuntu-2404
     strategy:
       matrix:
-        platform: [ linux/amd64 ]
+        platform: [linux/amd64]
     permissions:
       contents: read
       packages: write
+      actions: write
     outputs:
       short_sha: ${{ steps.short-sha.outputs.short_sha }}
 
@@ -67,15 +111,15 @@ jobs:
           echo "name=$SANITIZED" >> $GITHUB_OUTPUT
 
       - name: Log in to Container Registry
-        uses: docker/login-action@v3
+        uses: docker/login-action@v4
         with:
           registry: ${{ env.REGISTRY }}
           username: ${{ github.actor }}
           password: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Extract metadata
         id: meta
-        uses: docker/metadata-action@v5
+        uses: docker/metadata-action@v6
         with:
           images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
           tags: |
@@ -135,9 +179,15 @@ jobs:
             echo "ℹ️ **Note:** Image was built for testing but not pushed to registry (only pushes on direct commits to main/dev)" >> $GITHUB_STEP_SUMMARY
           fi
 
+      - name: Cancel workflow on failure
+        if: failure()
+        run: gh run cancel ${{ github.run_id }}
+        env:
+          GH_TOKEN: ${{ github.token }}
+
   # Deploy job - only runs on push events or manual dispatch
   deploy:
-    needs: build
+    needs: [lint, build]
     if: github.event_name == 'push' || github.event_name == 'workflow_dispatch'
     uses: ./.github/workflows/api-deploy.yml
     with:

.github/workflows/frontend-build.yml

@@ -39,6 +39,49 @@ env:
   IMAGE_NAME: ${{ github.repository }}-frontend
 
 jobs:
+  lint:
+    if: |
+      github.event_name == 'workflow_dispatch' ||
+      github.event_name == 'push' ||
+      (github.event_name == 'pull_request' &&
+       github.head_ref != 'dev' &&
+       github.event.pull_request.base.ref != github.event.pull_request.head.ref)
+    runs-on: blacksmith-2vcpu-ubuntu-2404
+    permissions:
+      contents: read
+      actions: write
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v6
+
+      - name: Setup pnpm
+        uses: pnpm/action-setup@v4
+        with:
+          version: 10
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v6
+        with:
+          node-version: 25
+          cache: "pnpm"
+          cache-dependency-path: frontend/pnpm-lock.yaml
+
+      - name: Install dependencies
+        working-directory: ./frontend
+        run: pnpm install --frozen-lockfile
+
+      - name: Lint code
+        working-directory: ./frontend
+        run: |
+          pnpm lint
+          git diff --exit-code ..
+
+      - name: Cancel workflow on failure
+        if: failure()
+        run: gh run cancel ${{ github.run_id }}
+        env:
+          GH_TOKEN: ${{ github.token }}
+
   build:
     # Only run on pull requests that are cross-branch or on direct pushes
     if: |
@@ -56,6 +99,7 @@ jobs:
     permissions:
       contents: read
       packages: write
+      actions: write
     outputs:
       short_sha: ${{ steps.short-sha.outputs.short_sha }}
 
@@ -74,15 +118,15 @@ jobs:
           echo "name=$SANITIZED" >> $GITHUB_OUTPUT
 
       - name: Log in to Container Registry
-        uses: docker/login-action@v3
+        uses: docker/login-action@v4
         with:
           registry: ${{ env.REGISTRY }}
           username: ${{ github.actor }}
           password: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Extract metadata
         id: meta
-        uses: docker/metadata-action@v5
+        uses: docker/metadata-action@v6
         with:
           images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
           tags: |
@@ -151,9 +195,15 @@ jobs:
             echo "ℹ️ **Note:** Image was built for testing but not pushed to registry (only pushes on direct commits to main/dev)" >> $GITHUB_STEP_SUMMARY
           fi
 
+      - name: Cancel workflow on failure
+        if: failure()
+        run: gh run cancel ${{ github.run_id }}
+        env:
+          GH_TOKEN: ${{ github.token }}
+
   # Deploy job - only runs on push events or manual dispatch
   deploy:
-    needs: build
+    needs: [lint, build]
     if: github.event_name == 'push' || github.event_name == 'workflow_dispatch'
     uses: ./.github/workflows/frontend-deploy.yml
     with: