Initial app setup with databases, auth and testing

.env.schema

@@ -0,0 +1,21 @@
+# This env file uses @env-spec - see https://varlock.dev/env-spec for more info
+# 
+# @defaultRequired=infer @defaultSensitive=false
+# @generateTypes(lang=ts, path=env.d.ts)
+# ----------
+
+# @type=enum(development, production)
+APP_ENV=development
+
+# Postgres
+# @optional @sensitive @example="postgresql://postgres:postgres@localhost:5432/trackr"
+POSTGRES_DATABASE_URL=
+
+# SQLite
+# @optional @sensitive @example="file:./.local/trackr.sqlite"
+SQLITE_DATABASE_URL=
+
+
+# Auth
+# @required @sensitive @example="00000000000000000000000000000000"
+BETTER_AUTH_SECRET=

.github/workflows/ci.yml

@@ -2,32 +2,12 @@ name: CI
 
 on:
   pull_request:
-    branches: ["main"]
   push:
     branches: ["main"]
 
 jobs:
-  test-build:
+  quality:
     runs-on: ubuntu-latest
-    # Service containers start before steps
-    # (e.g. PRs from forks). Must match Postgres service env below.
-    env:
-      CI_PG_PASSWORD: ${{ secrets.CI_POSTGRES_PASSWORD }}
-      DATABASE_URL: postgresql://postgres:${{ secrets.CI_POSTGRES_PASSWORD }}@localhost:5432/trackr_test
-    services:
-      postgres:
-        image: postgres:16
-        env:
-          POSTGRES_PASSWORD: ${{ secrets.CI_POSTGRES_PASSWORD }}
-          POSTGRES_DB: trackr_test
-        ports:
-          - 5432:5432
-        options: >-
-          --health-cmd="pg_isready -U postgres"
-          --health-interval=5s
-          --health-timeout=5s
-          --health-retries=10
-
     steps:
       - name: Checkout
         uses: actions/checkout@v4
@@ -38,37 +18,53 @@ jobs:
           node-version: 22
           cache: npm
 
+      - name: Load environment variables
+        uses: dmno-dev/varlock-action@v1.0.1
+
       - name: Install dependencies
         run: npm ci
 
       - name: Prisma generate (Postgres + SQLite clients)
         working-directory: packages/prisma
         run: npm run build
 
-      - name: Migrate and seed Postgres
-        working-directory: packages/prisma
-        run: |
-          npx prisma migrate deploy --config prisma.config.ts
-          npm run seed
+      - name: Check format
+        run: npm run format:check
 
       - name: Lint
         run: npm run lint
 
-      - name: Test
-        env:
-          RUN_INTEGRATION: "true"
-        run: npm run test
+      - name: Test (unit)
+        run: npm run test:unit
 
-      - name: Build (exclude desktop app on generic Linux job)
-        run: npx turbo build --filter=!@trackr/desktop
+  build_web_stack:
+    needs: [quality]
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
 
-      - name: Install Playwright browsers
-        run: npx playwright install chromium
+      - name: Setup Node
+        uses: actions/setup-node@v4
+        with:
+          node-version: 22
+          cache: npm
 
-      - name: E2E (exclude desktop app on generic Linux job)
-        run: npx turbo e2e --filter=!@trackr/desktop
+      - name: Load environment variables
+        uses: dmno-dev/varlock-action@v1.0.1
 
-  desktop-build:
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Prisma generate (Postgres + SQLite clients)
+        working-directory: packages/prisma
+        run: npm run build
+
+      - name: Build web and server
+        run: npx turbo build --filter=@trackr/web --filter=@trackr/server
+
+  build_desktop:
+    needs: [quality]
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
@@ -80,6 +76,9 @@ jobs:
           node-version: 22
           cache: npm
 
+      - name: Load environment variables
+        uses: dmno-dev/varlock-action@v1.0.1
+
       - name: Setup Rust
         uses: dtolnay/rust-toolchain@stable
 
@@ -107,3 +106,63 @@ jobs:
       - name: Build desktop app
         working-directory: apps/desktop
         run: npm run build
+
+  integration_and_e2e:
+    needs: [quality, build_web_stack, build_desktop]
+    runs-on: ubuntu-latest
+    services:
+      postgres:
+        image: postgres:16
+        env:
+          POSTGRES_PASSWORD: ${{ secrets.CI_POSTGRES_PASSWORD }}
+          POSTGRES_DB: trackr_test
+        ports:
+          - 5432:5432
+        options: >-
+          --health-cmd="pg_isready -U postgres"
+          --health-interval=5s
+          --health-timeout=5s
+          --health-retries=10
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Setup Node
+        uses: actions/setup-node@v4
+        with:
+          node-version: 22
+          cache: npm
+
+      - name: Load environment variables
+        uses: dmno-dev/varlock-action@v1.0.1
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Prisma generate (Postgres + SQLite clients)
+        working-directory: packages/prisma
+        run: npm run build
+
+      - name: Migrate and seed Postgres
+        working-directory: packages/prisma
+        run: |
+          npx prisma migrate deploy --config prisma.config.ts
+          npm run seed
+
+      - name: Server integration tests (Vitest)
+        run: npm run test:integration
+
+      - name: Install Playwright browsers
+        run: npx playwright install chromium
+
+      - name: E2E (full suite)
+        if: ${{ (github.event_name == 'push' && github.ref == 'refs/heads/main') || (github.event_name == 'pull_request' && github.event.pull_request.base.ref == 'main') }}
+        run: npx turbo e2e --filter=!@trackr/desktop
+
+      - name: E2E (changed only, PR base not main)
+        if: github.event_name == 'pull_request' && github.event.pull_request.base.ref != 'main'
+        working-directory: apps/server
+        run: npx playwright test --only-changed=${{ github.event.pull_request.base.sha }}

.gitignore

@@ -35,3 +35,12 @@ packages/prisma/.local/
 
 # Tauri
 apps/desktop/src-tauri/gen/schemas/
+
+# Environment variables
+!.env.schema
+.env.local
+.env.*.local
+env.d.ts
+
+# Vitest Varlock coordinator → worker cache
+apps/server/.vitest-cache/

.husky/pre-commit

@@ -1,4 +1,4 @@
+npm run format:fix
 npm run lint
-npm run test
-npm run build -- --filter=!@trackr/desktop
-npm run format
+npm run build:all
+npm run test:unit

.prettierignore

@@ -0,0 +1,2 @@
+# Rust / Tauri build output (large, generated)
+apps/desktop/src-tauri/target/

.vscode/settings.json

@@ -1,3 +1,3 @@
 {
-  "cSpell.words": ["autoincrement", "Tauri", "Trackr", "Turborepo"]
+  "cSpell.words": ["autoincrement", "Tauri", "Trackr", "Turborepo", "varlock"]
 }

CONTRIBUTING.md

@@ -0,0 +1,86 @@
+# Contributing to Trackr
+
+Thanks for your interest in Trackr. This guide covers how to work in the monorepo, what we expect before you open a pull request, and how CI validates changes.
+
+For environment variables, database setup, and day-to-day dev commands, start with the [README](README.md) — especially **Local development**, **Database and Prisma**, and **End-to-end tests**.
+
+## Prerequisites
+
+- **Node.js** 22 or newer (LTS recommended)
+- **npm** — the repo pins a version in the root `package.json` (`packageManager`); use [Corepack](https://nodejs.org/api/corepack.html) if you want npm to match automatically
+- **PostgreSQL** — required for server development, integration tests, and most E2E flows
+- **Desktop / Tauri** — Rust stable toolchain and platform libraries when you work on `apps/desktop` (see CI’s `desktop-build` job for Linux packages)
+
+## Getting started
+
+From the repository root:
+
+```bash
+npm install
+```
+
+Match CI more closely (clean install from the lockfile):
+
+```bash
+npm ci
+```
+
+Generate Prisma clients before running server or tests that touch the database:
+
+```bash
+npm run build -w @trackr/prisma
+```
+
+Apply migrations and seed a dev database when you need auth and sample data (see README for `POSTGRES_DATABASE_URL`):
+
+```bash
+npm run migrate:dev -w @trackr/prisma   # or migrate:deploy in CI-like environments
+npm run seed -w @trackr/prisma
+```
+
+Use workspace-scoped scripts when you only need one app, for example:
+
+```bash
+npm run dev -w @trackr/server
+npm run dev -w @trackr/web
+```
+
+## Quality checks (run locally)
+
+Run these from the **repo root** before opening a PR:
+
+| Command                | Purpose                                                |
+| ---------------------- | ------------------------------------------------------ |
+| `npm run format`       | Apply Prettier                                         |
+| `npm run check-format` | Verify formatting (also enforced via Husky pre-commit) |
+| `npm run lint`         | Turborepo lint across packages                         |
+| `npm run test`         | Unit / Vitest tasks                                    |
+| `npm run build`        | Production builds (see CI note for desktop on Linux)   |
+
+**Integration tests** for the server need a real Postgres database and:
+
+```bash
+RUN_INTEGRATION=true npm run test -w @trackr/server
+```
+
+**E2E (Playwright):** install Chromium once (`npx playwright install chromium`), build the server if `dist/` is missing, then use the README’s E2E section. Onboarding E2E resets the database — use a disposable dev DB. Root shortcuts: `npm run e2e`, `npm run dev:e2e`, `npm run dev:e2e-desktop`.
+
+## Pull requests
+
+- **Target branch:** `main`
+- **Describe the change** in the PR: what problem it solves and any trade-offs
+- **Keep scope focused** — unrelated refactors make review harder
+- **Update tests** when behavior changes; add coverage when it prevents regressions
+
+CI (`.github/workflows/ci.yml`) runs on pushes and PRs to `main`: `npm ci`, Prisma generate, migrate + seed, lint, tests with `RUN_INTEGRATION=true`, Turbo build (desktop excluded on the generic Linux job), then E2E (desktop excluded on that job). A separate job builds the desktop app with Rust and Tauri dependencies.
+
+Maintainers: configure the **`CI_POSTGRES_PASSWORD`** repository secret as described in the README so the Postgres service uses a strong password. Fork PRs use a documented fallback in the workflow.
+
+## Issues and discussion
+
+- **Bugs and features:** [GitHub Issues](https://github.com/nealhorner/trackr/issues)
+- **Repository:** [github.com/nealhorner/trackr](https://github.com/nealhorner/trackr)
+
+## License
+
+Trackr is distributed under the terms in [LICENSE](LICENSE). Read that file before redistributing or relying on permission to modify the software; contribution and use may be limited by those terms.