11. DevOps¶
11.1 CI/CD¶
flowchart LR
PR[Pull Request] --> CI[ci.yml: build/typecheck/test + action-dist freshness]
PR --> CQ[codeql.yml SAST]
PR --> SEC[security.yml: gitleaks + pnpm audit]
PR --> QR[quality-regression.yml: golden estrutural]
Merge[Merge main] --> REL[Release tag]
REL --> SBOM[sbom.yml CycloneDX]
REL --> NPM[npm publish --provenance]
REL --> DEPLOY[Vercel deploy]
Nightly[cron] --> QRN[golden real-provider]
Workflows em .github/workflows/: ci.yml, codeql.yml, security.yml,
quality-regression.yml, sbom.yml.
11.2 Git Flow & Branches¶
- Trunk-based:
mainprotegida; branchesfeat/*,fix/*,docs/*; PR com CI verde + CODEOWNERS; squash-merge.
11.3 Testes automáticos¶
- 314 testes (Vitest) offline (mock); golden regression; SCA gate.
11.4 Deploy / Rollback / Flags / Blue-Green / Canary¶
- Deploy: Vercel (preview por PR, prod no merge).
- Rollback: promover deployment anterior (imutável) na Vercel.
- Feature flags: via env/plano (
org.plan,context.ast,quality.paranoid). - Canary/Blue-Green: Vercel traffic split (recomendado para mudanças de prompt/modelo, junto do golden set).