CI/CD regression plan

Required Gates

Pull Request Gate

• Repository contract checks.
• Go CLI unit tests.
• Shell syntax checks for repo-owned scripts.
• Documentation site contract checks.
• Generated Docker stack smoke test with registration-first, Postgres-backed auth.
• Future backend unit, integration, and compatibility checks.

Main Branch Gate

• The pull request gate.
• Documentation deployment to GitHub Pages.
• Future release candidate smoke checks.

Regression Suites

• Repository contract: protects required files, docs, workflows, and product constraints.
• CLI scaffold: tests the Go CLI, shared output renderer, carbide new, carbide init, compact run dev output, status table rendering, detach-without-teardown on Ctrl+C, explicit stop dev teardown, full-width TTY-only per-container progress behavior including no-color terminals, timestamped service-log streaming, live log follow, structured log querying, placeholder replacement, and empty-directory enforcement.
• Backend build and API: protects generated backend builds, public API behavior, and release compatibility.
• Unit tests: protects router, request, response, middleware, config, and logging behavior.
• Compatibility and race tests: exposes concurrency and generated app compatibility failures.
• Postgres integration: tests readiness, pooling, migrations, transactions, and parameterized queries.
• Container and IaC: validates Compose generation, frontend/backend/database separation, health checks, file-watch rebuilds for view/web, backend, model, controller, and Dockerfile changes, external URL logs, registration-first JSON auth, and environment schemas.
• Frontend: protects the Bun/React/Tailwind container, same-origin API proxy, lockfile install path, and dashboard app shell.
• Backend API: protects JSON auth responses, session cookies, /api/me, and Postgres-backed dashboard data.
• CLI golden tests: protects scaffolding, deterministic generated files, and actionable command errors.
• Security regression: protects cookies, CSRF, upload limits, SQL parameterization, and secret handling.
• Documentation regression: keeps examples, links, and published docs aligned with framework behavior.

Implemented Now

bash -n scripts/*.sh bin/carbide bin/sealion install.sh
go test ./...
bash scripts/check_repo_contract.sh
bash scripts/test_cli_scaffold.sh
bash scripts/test_starter_docker_flow.sh

The source plan is maintained in docs/engineering/CI_CD_REGRESSION_TESTS.md.