Feat/ai sdk v6 migration

.devcontainer/devcontainer.json

@@ -1,7 +1,7 @@
 {
   "name": "Azure Chat Solution Accelerator powered by Azure Open AI Service",
   // Or use a Dockerfile or Docker Compose file. More info: https://containers.dev/guide/dockerfile
-  "image": "mcr.microsoft.com/devcontainers/javascript-node:0-18-bullseye",
+  "image": "mcr.microsoft.com/devcontainers/javascript-node:22",
 
   // Features to add to the dev container. More info: https://containers.dev/features.
   "features": {
@@ -21,11 +21,6 @@
       "version": "latest",
       "dockerDashComposeVersion": "v2"
     },
-    "ghcr.io/devcontainers-contrib/features/zsh-plugins:0": {
-      "plugins": "ssh-agent npm zsh-syntax-highlighting zsh-autosuggestions",
-      "omzPlugins": "https://github.com/zsh-users/zsh-autosuggestions https://github.com/zsh-users/zsh-syntax-highlighting",
-      "username": "node"
-    },
     "ghcr.io/devcontainers/features/azure-cli:1": {
       "installBicep": true
     },

.github/workflows/open-ai-app.yml

@@ -1,16 +1,19 @@
 name: Build & deploy Next.js app to Azure Web App
 
-# When this action will be executed
+# Runs only after the Tests workflow finishes successfully on main. This
+# gates every deploy (dev + prod) on vitest + Playwright green. Manual
+# dispatch stays available for hotfix / re-deploy scenarios.
 on:
-  # Automatically trigger it when detected changes in repo
-  push:
+  workflow_run:
+    workflows: ["Tests"]
+    types: [completed]
     branches: [main]
-
-  # Allow manual workflow trigger
   workflow_dispatch:
 
 jobs:
   build:
+    # Only proceed when triggered by a successful Tests run (or manually).
+    if: ${{ github.event_name == 'workflow_dispatch' || github.event.workflow_run.conclusion == 'success' }}
     runs-on: ubuntu-latest
 
     steps:
@@ -23,44 +26,66 @@ jobs:
           node-version: "20.x"
 
       - name: ⚙️ npm install and build
+        env:
+          NEXT_PUBLIC_FEEDBACK_LINK: ${{ secrets.NEXT_PUBLIC_FEEDBACK_LINK }}
+          NEXT_PUBLIC_MAX_PERSONA_DOCUMENT_LIMIT: ${{ secrets.NEXT_PUBLIC_PERSONA_DOCUMENT_LIMIT }}
+          NEXT_PUBLIC_AI_RULES: ${{ secrets.NEXT_PUBLIC_AI_RULES }}
+          NEXT_PUBLIC_SHAREPOINT_URL: ${{ secrets.NEXT_PUBLIC_SHAREPOINT_URL }}
         run: |
           cd ./src
           npm install
           npm run build --if-present
           cd ..
 
       - name: 📂 Copy standalone into the root
-        run: cp -R ./src/.next/standalone ./site-deploy
-
-      - name: 📂 Copy static into the .next folder
-        run: cp -R ./src/.next/static ./site-deploy/.next/static
-
-      - name: 📂 Copy Public folder
-        run: cp -R ./src/public ./site-deploy/public
+        run: |
+          # Next picks the workspace root for the standalone output by walking
+          # up for the first lockfile. The repo previously had a (stale) root
+          # package-lock.json, which made the standalone output nest under
+          # `standalone/src/`. With only `src/package-lock.json` left, the
+          # standalone bundle now sits directly under `build/standalone/`.
+          mkdir -p ./site-deploy
+          if [ -d ./src/build/standalone/src ]; then
+            cp -R ./src/build/standalone/src/* ./site-deploy/
+          else
+            cp -R ./src/build/standalone/* ./site-deploy/
+          fi
+
+      - name: 📂 Copy static and public folders into standalone
+        run: |
+          # Move static from build to standalone
+          mkdir -p ./site-deploy/build
+          cp -R ./src/build/static ./site-deploy/build/
+          # Move public folder to standalone
+          cp -R ./src/public ./site-deploy/
 
       - name: 📦 Package Next application
         run: |
           cd ./site-deploy
-          zip Nextjs-site.zip ./* .next -qr
+          zip -qr Nextjs-site.zip .
 
       - name: 🔍 Diagnostics
         run: |
-          ls ./src
-          ls ./src/.next
-          ls ./site-deploy
+          echo "=== site-deploy contents ==="
+          ls -la ./site-deploy/
+          echo "=== Verifying server.js exists ==="
+          ls -la ./site-deploy/server.js || echo "server.js NOT FOUND!"
+          echo "=== Verifying node_modules/next exists ==="
+          ls -la ./site-deploy/node_modules/next/package.json || echo "next module NOT FOUND!"
+          echo "=== Zip contents (first 50) ==="
+          unzip -l ./site-deploy/Nextjs-site.zip | head -50
 
       - name: ⬆️ Publish Next Application artifact
         uses: actions/upload-artifact@v4
         with:
           name: Nextjs-site
           path: ./site-deploy/Nextjs-site.zip
 
-  deploy:
+  deploy-development:
     runs-on: ubuntu-latest
     needs: build
     environment:
-      name: Production
-
+      name: "Development"
     steps:
       - name: 🍏 Set up Node.js version
         uses: actions/setup-node@v4
@@ -72,7 +97,7 @@ jobs:
         with:
           name: Nextjs-site
 
-      - name: 🗝️ Azure Login
+      - name: ️ Azure Login
         uses: azure/login@v1
         with:
           creds: ${{ secrets.AZURE_CREDENTIALS }}
@@ -82,19 +107,55 @@ jobs:
         uses: azure/CLI@v1
         with:
           inlineScript: |
-            rg=$(az webapp list --query "[?name=='${{ secrets.AZURE_APP_SERVICE_NAME }}'].resourceGroup" --output tsv)
-            echo Setting SCM_DO_BUILD_DURING_DEPLOYMENT=false on app service ${{ secrets.AZURE_APP_SERVICE_NAME }}
-            az webapp config appsettings set -n ${{ secrets.AZURE_APP_SERVICE_NAME }} -g $rg --settings SCM_DO_BUILD_DURING_DEPLOYMENT=false -o none
-            echo Setting --startup-file=\"node server.js\" on app service ${{ secrets.AZURE_APP_SERVICE_NAME }}
-            az webapp config set --startup-file="node server.js" -n ${{ secrets.AZURE_APP_SERVICE_NAME }} -g $rg -o none
+            rg=$(az webapp list --query "[?name=='${{ secrets.AZURE_APP_SERVICE_NAME_DEV }}'].resourceGroup" --output tsv)
+            echo Setting SCM_DO_BUILD_DURING_DEPLOYMENT=false on app service ${{ secrets.AZURE_APP_SERVICE_NAME_DEV }}
+            az webapp config appsettings set -n ${{ secrets.AZURE_APP_SERVICE_NAME_DEV }} -g $rg --settings SCM_DO_BUILD_DURING_DEPLOYMENT=false WEBSITE_SKIP_SYMLINK_NODEMODULES=1 -o none
+            echo Setting --startup-file=\"node server.js\" on app service ${{ secrets.AZURE_APP_SERVICE_NAME_DEV }}
+            az webapp config set --startup-file="node server.js" -n ${{ secrets.AZURE_APP_SERVICE_NAME_DEV }} -g $rg -o none
             sleep 10
 
       - name: 🚀 Deploy to Azure Web App
         id: deploy-to-webapp
         uses: azure/webapps-deploy@v2
         with:
-          app-name: ${{ secrets.AZURE_APP_SERVICE_NAME }}
+          resource-group-name: ${{ secrets.AZURE_APP_SERVICE_RG_NAME_DEV }}
+          app-name: ${{ secrets.AZURE_APP_SERVICE_NAME_DEV }}
           package: ${{ github.workspace }}/Nextjs-site.zip
 
-      - name: 🧹 Cleanup
-        run: rm ${{ github.workspace }}/Nextjs-site.zip
+  deploy-production:
+    runs-on: ubuntu-latest
+    needs: build
+    environment:
+      name: "Production"
+      url: ${{ steps.deploy-to-webapp.outputs.webapp-url }} # or your production URL, add reviewers as well if you need
+    steps:
+      - name: ⬇️ Download artifact from build job
+        uses: actions/download-artifact@v4
+        with:
+          name: Nextjs-site
+
+      - name: ️Azure Login
+        uses: azure/login@v1
+        with:
+          creds: ${{ secrets.AZURE_CREDENTIALS }}
+
+      # Set the build during deployment setting to false. This setting was added in the templates to all azd to work, but breaks deployment via webapps-deploy 
+      - name: Azure CLI script
+        uses: azure/CLI@v1
+        with:
+          inlineScript: |
+            rg=$(az webapp list --query "[?name=='${{ secrets.AZURE_APP_SERVICE_NAME_PROD }}'].resourceGroup" --output tsv)
+            echo Setting SCM_DO_BUILD_DURING_DEPLOYMENT=false on app service ${{ secrets.AZURE_APP_SERVICE_NAME_PROD }}
+            az webapp config appsettings set -n ${{ secrets.AZURE_APP_SERVICE_NAME_PROD }} -g $rg --settings SCM_DO_BUILD_DURING_DEPLOYMENT=false WEBSITE_SKIP_SYMLINK_NODEMODULES=1 -o none
+            echo Setting --startup-file=\"node server.js\" on app service ${{ secrets.AZURE_APP_SERVICE_NAME_PROD }}
+            az webapp config set --startup-file="node server.js" -n ${{ secrets.AZURE_APP_SERVICE_NAME_PROD }} -g $rg -o none
+            sleep 10
+
+      - name: 🚀 Deploy to Azure Web App
+        id: deploy-to-webapp
+        uses: azure/webapps-deploy@v2
+        with:
+          resource-group-name: ${{ secrets.AZURE_APP_SERVICE_RG_NAME_PROD }}
+          app-name: ${{ secrets.AZURE_APP_SERVICE_NAME_PROD }}
+          package: ${{ github.workspace }}/Nextjs-site.zip
+

.github/workflows/test.yml

@@ -0,0 +1,90 @@
+name: Tests
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+    branches: [main]
+  workflow_dispatch:
+
+jobs:
+  unit:
+    name: Unit tests + coverage
+    runs-on: ubuntu-latest
+    defaults:
+      run:
+        working-directory: ./src
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/setup-node@v4
+        with:
+          node-version: "20.x"
+          cache: npm
+          cache-dependency-path: src/package-lock.json
+
+      - name: Install
+        run: npm ci
+
+      - name: Run vitest with coverage
+        run: npm run test:coverage
+
+      - name: Roll up coverage by feature area
+        run: node __tests__/coverage-rollup.mjs
+
+      - name: Upload coverage HTML
+        if: always()
+        uses: actions/upload-artifact@v4
+        with:
+          name: coverage-html
+          path: src/coverage/
+
+  e2e:
+    name: Playwright e2e
+    runs-on: ubuntu-latest
+    defaults:
+      run:
+        working-directory: ./src
+    env:
+      NEXTAUTH_SECRET: ci-nextauth-secret-do-not-use-in-prod
+      NEXTAUTH_URL: http://localhost:3000
+      AZURE_COSMOSDB_URI: https://cosmos.test.local
+      AZURE_COSMOSDB_KEY: test-key
+      AZURE_COSMOSDB_DB_NAME: chat
+      AZURE_COSMOSDB_CONTAINER_NAME: history
+      AZURE_COSMOSDB_CONFIG_CONTAINER_NAME: config
+      AZURE_SEARCH_API_KEY: test-search-key
+      AZURE_SEARCH_NAME: test-search
+      AZURE_SEARCH_INDEX_NAME: test-index
+      AZURE_OPENAI_API_KEY: test-openai-key
+      AZURE_OPENAI_API_INSTANCE_NAME: test-instance
+      AZURE_OPENAI_API_DEPLOYMENT_NAME: gpt-test
+      AZURE_OPENAI_API_VERSION: "2024-10-21"
+      AZURE_KEY_VAULT_NAME: test-kv
+      AZURE_STORAGE_ACCOUNT_NAME: teststorage
+      AZURE_STORAGE_ACCOUNT_KEY: test-storage-key
+      ADMIN_EMAIL_ADDRESS: admin@test.local
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/setup-node@v4
+        with:
+          node-version: "20.x"
+          cache: npm
+          cache-dependency-path: src/package-lock.json
+
+      - name: Install
+        run: npm ci
+
+      - name: Install Playwright browsers
+        run: npx playwright install --with-deps chromium
+
+      - name: Run Playwright
+        run: npx playwright test --project=chromium
+
+      - name: Upload Playwright report
+        if: always()
+        uses: actions/upload-artifact@v4
+        with:
+          name: playwright-report
+          path: src/playwright-report/

.gitignore

@@ -19,13 +19,22 @@
 .DS_Store
 *.pem
 
+# playwright e2e artifacts
+src/test-results/
+src/playwright-report/
+src/e2e/.auth/
+src/e2e/.dev-server.pid
+# global-setup.ts temporarily renames the (stale) root lockfile during e2e
+package-lock.json.e2e-stash
+
 # debug
 npm-debug.log*
 yarn-debug.log*
 yarn-error.log*
 
 # local env files
 .env*.local
+src/.env
 
 # typescript
 *.tsbuildinfo
@@ -34,3 +43,10 @@ next-env.d.ts
 .azure/
 infra/aad_setup.sh
 .vscode
+.claude/settings.local.json
+src/.env.local.bak
+
+# Local agent/skill tooling (installed via `npx skills add`) — not app code
+.agents/
+.claude/skills/
+skills-lock.json

.vscode/launch.json

@@ -0,0 +1,34 @@
+{
+  "version": "0.2.0",
+  "configurations": [
+    {
+      "name": "Next.js: debug server-side",
+      "type": "node-terminal",
+      "request": "launch",
+      "command": "npm run dev -- --inspect",
+      "cwd": "${workspaceFolder}/src"
+    },
+    {
+      "name": "Next.js: debug client-side",
+      "type": "chrome",
+      "request": "launch",
+      "url": "http://localhost:3000"
+    },
+    {
+      "name": "Next.js: debug full stack",
+      "type": "node",
+      "request": "launch",
+      "program": "${workspaceFolder}/src/node_modules/next/dist/bin/next",
+      "runtimeArgs": ["--inspect"],
+      "skipFiles": ["<node_internals>/**"],
+      "cwd": "${workspaceFolder}/src",
+      "serverReadyAction": {
+        "action": "debugWithChrome",
+        "killOnServerStop": true,
+        "pattern": "- Local:.+(https?://.+)",
+        "uriFormat": "%s",
+        "webRoot": "${workspaceFolder}"
+      }
+    }
+  ]
+}