Skip to content

ci: add verify + deploy workflows and switch sync check to PlaywrightCheck#2

Merged
stefanjudis merged 7 commits into
mainfrom
ci/github-actions-pipeline
May 22, 2026
Merged

ci: add verify + deploy workflows and switch sync check to PlaywrightCheck#2
stefanjudis merged 7 commits into
mainfrom
ci/github-actions-pipeline

Conversation

@stefanjudis
Copy link
Copy Markdown
Collaborator

@stefanjudis stefanjudis commented May 22, 2026

Summary

  • Adds a verify workflow that runs lint, format check, typecheck, and unit tests on PRs and pushes to main — mirrors the local pre-commit hook so it can't be skipped.
  • Adds a deploy workflow that, on push to main, re-runs validation, executes npx checkly test --record, and then npx checkly deploy --force. Concurrency group deploy-checkly prevents overlapping deploys.
  • Refactors the skill sync check from MultiStepCheck (comparing two remote raw URLs) to PlaywrightCheck pointed at the repo's playwright.config.ts. The spec now diffs the checked-in skill files against the upstream source resolved via skills.config.ts + buildRawUrl, so the check fails the moment the bundled skill drifts from upstream.
  • Groups the check under a new ai-context CheckGroupV2 so future AI-context checks share alerting/tagging.
  • .gitignore now ignores .env and test-results/.

Required follow-up before merge

  • Add CHECKLY_API_KEY and CHECKLY_ACCOUNT_ID to Settings → Secrets and variables → Actions.
  • In Settings → Branches, mark the verify job as a required status check on main.
  • Optional: in Settings → Actions → General, set "Fork pull request workflows from outside collaborators" to "Require approval for all outside collaborators" so secrets don't leak via a malicious PR.

Test plan

  • verify workflow passes on this PR
  • After merge, deploy workflow runs npx checkly test --record and then npx checkly deploy --force cleanly against the configured account
  • Manually break a skill file locally, run npx checkly test, confirm the diff fails the run

Switches the skill sync check from MultiStepCheck (which compared two
remote raw URLs) to PlaywrightCheck pointed at the repo's
playwright.config.ts. The spec now diffs the checked-in skill files
against the upstream source resolved from skills.config.ts via
buildRawUrl, so the check fails the moment the deployed bundle drifts
from upstream.

Also groups the check under a new ai-context CheckGroupV2 so future
AI-context checks share alerting and tagging.
Runs lint, format check, typecheck, and unit tests so PRs cannot merge
red and pushes to main are guarded with the same gate as the local
pre-commit hook.
On push to main, re-runs validation as a safety net, executes
"npx checkly test --record" against Checkly infra, then deploys with
"npx checkly deploy --force". A deploy-checkly concurrency group
prevents overlapping deploys from racing the API.

Requires CHECKLY_API_KEY and CHECKLY_ACCOUNT_ID secrets in the repo
Actions settings.
The project now covers more than skill-sync monitoring (see the new
ai-context CheckGroupV2), so the name and logicalId no longer fit.
Renames projectName and bumps logicalId to checkly-plugin-and-ai-context
so future AI-context checks deploy under the same umbrella.

Note: this orphans the old checkly-plugin-skills-monitoring project in
the Checkly account on next deploy. Destroy it manually if no longer
needed.
@stefanjudis stefanjudis merged commit 0b3e246 into main May 22, 2026
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant