feat: sentry integration (#85)

* feat(web): sentry integration

* feat(marketing): sentry integration

* feat: turbo for root lint:spell and lint:md tasks

* refactor: turbo lint:spell, lint:md in ci

* refactor: new ci pipelines

* fix: bash shell for playwright install step in ci

* feat: posthog in ci

* chore: ignore .changeset folder from lint:md and lint:spell

* chore: switch e2e tests dev server port for apps

* chore: forgot base url in pw config

* chore: adds a changeset

.changeset/thirty-schools-wonder.md

@@ -0,0 +1,20 @@
+---
+'@orbitkit/marketing': minor
+'@orbitkit/env': minor
+'@orbitkit/docs': minor
+'@orbitkit/web': minor
+'@orbitkit/api': minor
+'@orbitkit/assets': minor
+'@orbitkit/auth': minor
+'@orbitkit/eslint': minor
+'@orbitkit/storybook': minor
+'@orbitkit/tailwind': minor
+'@orbitkit/tsconfig': minor
+'@orbitkit/vite': minor
+'@orbitkit/core': minor
+'@orbitkit/db': minor
+'@orbitkit/ui': minor
+'@orbitkit/utils': minor
+---
+
+feat: sentry integration for apps

.github/actions/setup/action.yml

@@ -18,3 +18,7 @@ runs:
     - name: Install dependencies
       shell: bash
       run: bun install
+
+    - name: Install Playwright Browsers
+      shell: bash
+      run: bun playwright install --with-deps

.github/workflows/main.yml

@@ -0,0 +1,111 @@
+name: Main CI
+
+on:
+  push:
+    branches:
+      - main
+
+env:
+  # These are needed to enable turborepo's remote task caching
+  TURBO_TOKEN: ${{ secrets.TURBO_TOKEN }}
+  TURBO_TEAM: ${{ vars.TURBO_TEAM }}
+
+jobs:
+  spell-and-md-lint:
+    name: Spellcheck and Markdown Lint
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 2
+
+      - name: Setup
+        uses: ./.github/actions/setup
+
+      - name: Checks
+        run: bun turbo lint:md lint:spell
+
+  web:
+    name: Web CI
+    runs-on: ubuntu-latest
+
+    environment: Production
+
+    env:
+      # Database URL
+      DATABASE_URL: ${{ secrets.DATABASE_URL }}
+
+      # Auth Secret
+      AUTH_SECRET: ${{ secrets.AUTH_SECRET }}
+
+      # Github OAuth
+      AUTH_GITHUB_ID: ${{ secrets.AUTH_GITHUB_ID }}
+      AUTH_GITHUB_SECRET: ${{ secrets.AUTH_GITHUB_SECRET }}
+
+      # Google OAuth
+      AUTH_GOOGLE_ID: ${{ secrets.AUTH_GOOGLE_ID }}
+      AUTH_GOOGLE_SECRET: ${{ secrets.AUTH_GOOGLE_SECRET }}
+
+      # Uploadthing
+      UPLOADTHING_SECRET: ${{ secrets.UPLOADTHING_SECRET }}
+      UPLOADTHING_APP_ID: ${{ secrets.UPLOADTHING_APP_ID }}
+
+      # Unkey
+      UNKEY_ROOT_KEY: ${{ secrets.UNKEY_ROOT_KEY }}
+      UNKEY_NAMESPACE: ${{ secrets.UNKEY_NAMESPACE }}
+
+      # Sentry
+      NEXT_PUBLIC_SENTRY_DSN: ${{ vars.PUBLIC_SENTRY_DSN }}
+      SENTRY_ORG: ${{ secrets.SENTRY_ORG }}
+      SENTRY_PROJECT: web
+      SENTRY_AUTH_TOKEN: ${{ secrets.SENTRY_AUTH_TOKEN }}
+
+      # Posthog
+      NEXT_PUBLIC_POSTHOG_HOST: ${{ vars.PUBLIC_POSTHOG_HOST }}
+      NEXT_PUBLIC_POSTHOG_KEY: ${{ secrets.NEXT_PUBLIC_POSTHOG_KEY }}
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 2
+
+      - name: Setup
+        uses: ./.github/actions/setup
+
+      - name: Checks
+        run: bun turbo lint typecheck build test:e2e --filter=@orbitkit/web
+
+      - uses: actions/upload-artifact@v4
+        if: always()
+        with:
+          name: web-playwright-report
+          path: apps/web/playwright-report/
+          retention-days: 30
+
+  marketing:
+    name: Marketing CI
+    runs-on: ubuntu-latest
+
+    environment: Production
+
+    env:
+      # Sentry
+      PUBLIC_SENTRY_DSN: ${{ vars.PUBLIC_SENTRY_DSN }}
+      SENTRY_ORG: ${{ secrets.SENTRY_ORG }}
+      SENTRY_PROJECT: marketing
+      SENTRY_AUTH_TOKEN: ${{ secrets.SENTRY_AUTH_TOKEN }}
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 2
+
+      - name: Setup
+        uses: ./.github/actions/setup
+
+      - name: Checks
+        run: bun turbo lint typecheck build test:e2e --filter=@orbitkit/marketing