Revert/concurrency group v2

.env.example

@@ -168,7 +168,8 @@ NEXT_PUBLIC_BUILDER_URL=http://localhost:3123
 SCHEDULER_BUCKET_RANGE=0-255
 
 # Increase Node.js heap for large workloads. Set per-process, not globally.
-# NODE_OPTIONS="--max_old_space_size=4096"
+# Increase Node.js heap for large workloads. Set per-process, not globally.
+# NODE_OPTIONS="--max-old-space-size=8192"
 
 # ─────────────────────────────────────────────
 # Logging

.github/workflows/ci.yml

@@ -32,6 +32,8 @@ jobs:
     name: Types
     runs-on: ubuntu-latest
     timeout-minutes: 20
+    env:
+      NODE_OPTIONS: --max-old-space-size=4096
     steps:
       - name: Checkout repository
         uses: actions/checkout@v7
@@ -55,12 +57,14 @@ jobs:
       # Sets TURBO_API/TURBO_TOKEN/TURBO_TEAM for the steps below.
       - name: Set up Turbo cache
         uses: rharkor/caching-for-turbo@v2.5.1
+        with:
+          server-port: 0
 
       # 56 independent `tsc --noEmit` runs (no `composite`/`references` in this
       # repo, so turbo.json declares no `dependsOn` — see the comment there).
       # Each is single-threaded, so concurrency can fill all 4 vCPUs.
       - name: Type-check
-        run: pnpm turbo run check-types --concurrency=4
+        run: pnpm turbo run check-types --concurrency=1
 
   lint:
     name: Lint
@@ -84,6 +88,8 @@ jobs:
 
       - name: Set up Turbo cache
         uses: rharkor/caching-for-turbo@v2.5.1
+        with:
+          server-port: 0
 
       # Root `pnpm lint` runs cheapest-first: check:agent-instructions, then
       # `turbo run lint` (apps/builder's i18n key-parity check plus 57
@@ -115,6 +121,8 @@ jobs:
 
       - name: Set up Turbo cache
         uses: rharkor/caching-for-turbo@v2.5.1
+        with:
+          server-port: 0
 
       # Turbo does not parallelize *within* a suite, so wall clock is bounded
       # by the slowest single suite — builder (248 files), which is ~40% of

.github/workflows/deploy-devel.yml

@@ -0,0 +1,152 @@
+# Deploy devel — ChatbotX (patrón sysbrazo)
+#
+# Corre en push a main (después de merge de PR).
+# Enforce PR-only merges via branch protection on main (no direct pushes).
+#
+# workflow_dispatch (manual):
+#   maintenance_on  — maintenance sin deploy
+#   maintenance_off — restaura tráfico si deploy/smoke falló
+#
+# Los scripts viven en el repo (scripts/deployment/*.sh) y corren desde el
+# runner, igual que sysbrazo (deploy-v3.sh). Las credenciales de AWS las
+# tiene la instancia EC2 (IAM role). El runner se autentica con SSH_PRIVATE_KEY.
+
+name: Deploy Devel
+
+permissions:
+  contents: read
+
+on:
+  push:
+    branches:
+      - main
+  workflow_dispatch:
+    inputs:
+      job:
+        description: Manual maintenance action
+        type: choice
+        required: true
+        options:
+          - maintenance_on
+          - maintenance_off
+
+concurrency:
+  group: chatbotx-devel
+  cancel-in-progress: true
+
+env:
+  ENV: devel
+  WORKSPACE: /var/www/chatbotx-dev
+  SERVER: ip-10-6-3-11.us-west-2.compute.internal
+  SSH_USER: sysbrazo
+  SECRET_NAME: dev/chatbotx/all-secret
+  COMPOSE_FILES: "-f docker-compose.yml -f docker-compose.apps.yml -f docker-compose.dev.yml"
+  HUSKY: "0"
+
+jobs:
+  maintenance_on:
+    name: Maintenance on
+    if: |
+      always() &&
+      (
+        (github.event_name == 'push') ||
+        (github.event_name == 'workflow_dispatch' && github.event.inputs.job == 'maintenance_on')
+      )
+    runs-on: [self-hosted, chatbotx]
+    timeout-minutes: 15
+    environment:
+      name: devel
+      url: https://dev-chatbotx.fibrazo.com.co/
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Init SSH
+        shell: bash
+        run: |
+          mkdir -p ~/.ssh
+          chmod 700 ~/.ssh
+          echo -e "Host *\n\tStrictHostKeyChecking no\n\n" > ~/.ssh/config
+
+      - name: Load SSH key
+        uses: webfactory/ssh-agent@v0.9.0
+        with:
+          ssh-private-key: ${{ secrets.SSH_PRIVATE_KEY }}
+
+      - name: Enable maintenance
+        run: |
+          chmod +x ./scripts/deployment/maintenance-on.sh
+          ./scripts/deployment/maintenance-on.sh
+
+  deploy:
+    name: Deploy + smoke
+    needs: [maintenance_on]
+    if: |
+      always() &&
+      github.event_name == 'push' &&
+      needs.maintenance_on.result == 'success'
+    runs-on: [self-hosted, chatbotx]
+    timeout-minutes: 60
+    environment:
+      name: devel
+      url: https://dev-chatbotx.fibrazo.com.co/
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Init SSH
+        shell: bash
+        run: |
+          mkdir -p ~/.ssh
+          chmod 700 ~/.ssh
+          echo -e "Host *\n\tStrictHostKeyChecking no\n\n" > ~/.ssh/config
+
+      - name: Load SSH key
+        uses: webfactory/ssh-agent@v0.9.0
+        with:
+          ssh-private-key: ${{ secrets.SSH_PRIVATE_KEY }}
+
+      - name: Deploy
+        run: |
+          chmod +x ./scripts/deployment/deploy.sh
+          ./scripts/deployment/deploy.sh
+
+      - name: Smoke tests
+        run: |
+          chmod +x ./scripts/deployment/run-smoke-tests.sh
+          ./scripts/deployment/run-smoke-tests.sh
+
+  maintenance_off:
+    name: Maintenance off
+    needs: [deploy]
+    if: |
+      always() &&
+      (
+        (github.event_name == 'push' && needs.deploy.result == 'success') ||
+        (github.event_name == 'workflow_dispatch' && github.event.inputs.job == 'maintenance_off')
+      )
+    runs-on: [self-hosted, chatbotx]
+    timeout-minutes: 15
+    environment:
+      name: devel
+      url: https://dev-chatbotx.fibrazo.com.co/
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Init SSH
+        shell: bash
+        run: |
+          mkdir -p ~/.ssh
+          chmod 700 ~/.ssh
+          echo -e "Host *\n\tStrictHostKeyChecking no\n\n" > ~/.ssh/config
+
+      - name: Load SSH key
+        uses: webfactory/ssh-agent@v0.9.0
+        with:
+          ssh-private-key: ${{ secrets.SSH_PRIVATE_KEY }}
+
+      - name: Disable maintenance
+        run: |
+          chmod +x ./scripts/deployment/maintenance-off.sh
+          ./scripts/deployment/maintenance-off.sh

.github/workflows/deploy-production.yml

@@ -0,0 +1,158 @@
+# Deploy production — ChatbotX (patrón sysbrazo)
+#
+# Corre en push de tags (igual que sysbrazo: crear tags desde main, ej.:
+#   git tag 4.1.19 && git push origin 4.1.19
+#
+# workflow_dispatch (manual):
+#   maintenance_on  — maintenance sin deploy
+#   maintenance_off — restaura tráfico si deploy/smoke falló
+#
+# Los scripts viven en el repo (scripts/deployment/*.sh) y corren desde el
+# runner, igual que sysbrazo (deploy-v3.sh). Las credenciales de AWS las
+# tiene la instancia EC2 (IAM role). El runner se autentica con SSH_PRIVATE_KEY.
+# Requiere GitHub environment `production` con SSH_PRIVATE_KEY secret.
+
+name: Deploy Production
+
+permissions:
+  contents: read
+
+on:
+  push:
+    tags:
+      - "*"
+  workflow_dispatch:
+    inputs:
+      job:
+        description: Manual maintenance action
+        type: choice
+        required: true
+        options:
+          - maintenance_on
+          - maintenance_off
+
+concurrency:
+  group: chatbotx-production
+  cancel-in-progress: true
+
+env:
+  ENV: production
+  WORKSPACE: /var/www/chatbotx-prod
+  SERVER: <SERVER-PROD-PENDIENTE>
+  SSH_USER: sysbrazo
+  SECRET_NAME: prod/chatbotx/all-secret
+  COMPOSE_FILES: "-f docker-compose.yml -f docker-compose.apps.yml -f docker-compose.prod.yml"
+  HUSKY: "0"
+
+jobs:
+  maintenance_on:
+    name: Maintenance on
+    if: |
+      always() &&
+      (
+        (github.event_name == 'push' && startsWith(github.ref, 'refs/tags/')) ||
+        (github.event_name == 'workflow_dispatch' && github.event.inputs.job == 'maintenance_on')
+      )
+    runs-on: [self-hosted, chatbotx]
+    timeout-minutes: 15
+    environment:
+      name: production
+      url: https://chatbotx.fibrazo.com.co/
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          ref: ${{ github.event_name == 'workflow_dispatch' && 'main' || github.ref }}
+
+      - name: Init SSH
+        shell: bash
+        run: |
+          mkdir -p ~/.ssh
+          chmod 700 ~/.ssh
+          echo -e "Host *\n\tStrictHostKeyChecking no\n\n" > ~/.ssh/config
+
+      - name: Load SSH key
+        uses: webfactory/ssh-agent@v0.9.0
+        with:
+          ssh-private-key: ${{ secrets.SSH_PRIVATE_KEY }}
+
+      - name: Enable maintenance
+        run: |
+          chmod +x ./scripts/deployment/maintenance-on.sh
+          ./scripts/deployment/maintenance-on.sh
+
+  deploy:
+    name: Deploy + smoke
+    needs: [maintenance_on]
+    if: |
+      always() &&
+      github.event_name == 'push' &&
+      startsWith(github.ref, 'refs/tags/') &&
+      needs.maintenance_on.result == 'success'
+    runs-on: [self-hosted, chatbotx]
+    timeout-minutes: 60
+    environment:
+      name: production
+      url: https://chatbotx.fibrazo.com.co/
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Init SSH
+        shell: bash
+        run: |
+          mkdir -p ~/.ssh
+          chmod 700 ~/.ssh
+          echo -e "Host *\n\tStrictHostKeyChecking no\n\n" > ~/.ssh/config
+
+      - name: Load SSH key
+        uses: webfactory/ssh-agent@v0.9.0
+        with:
+          ssh-private-key: ${{ secrets.SSH_PRIVATE_KEY }}
+
+      - name: Deploy
+        run: |
+          chmod +x ./scripts/deployment/deploy.sh
+          ./scripts/deployment/deploy.sh
+
+      - name: Smoke tests
+        run: |
+          chmod +x ./scripts/deployment/run-smoke-tests.sh
+          ./scripts/deployment/run-smoke-tests.sh
+
+  maintenance_off:
+    name: Maintenance off
+    needs: [deploy]
+    if: |
+      always() &&
+      (
+        (github.event_name == 'push' && startsWith(github.ref, 'refs/tags/') && needs.deploy.result == 'success') ||
+        (github.event_name == 'workflow_dispatch' && github.event.inputs.job == 'maintenance_off')
+      )
+    runs-on: [self-hosted, chatbotx]
+    timeout-minutes: 15
+    environment:
+      name: production
+      url: https://chatbotx.fibrazo.com.co/
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          ref: ${{ github.event_name == 'workflow_dispatch' && 'main' || github.ref }}
+
+      - name: Init SSH
+        shell: bash
+        run: |
+          mkdir -p ~/.ssh
+          chmod 700 ~/.ssh
+          echo -e "Host *\n\tStrictHostKeyChecking no\n\n" > ~/.ssh/config
+
+      - name: Load SSH key
+        uses: webfactory/ssh-agent@v0.9.0
+        with:
+          ssh-private-key: ${{ secrets.SSH_PRIVATE_KEY }}
+
+      - name: Disable maintenance
+        run: |
+          chmod +x ./scripts/deployment/maintenance-off.sh
+          ./scripts/deployment/maintenance-off.sh

.github/workflows/release.yml

@@ -1,9 +1,9 @@
 name: Build and Push Docker Images
 
 on:
-  push:
-    branches: [main]
-    tags: ["v*"]
+  # Disabled: this workflow is not used for ChatbotX deploys (we build on the
+  # server via docker compose, not via ghcr.io images). Kept for reference;
+  # can be re-enabled by restoring the push triggers.
   workflow_dispatch:
     inputs:
       environment:
@@ -58,6 +58,8 @@ jobs:
 
       - name: Set up Turbo cache
         uses: rharkor/caching-for-turbo@v2.5.1
+        with:
+          server-port: 0
 
       # `pnpm lint` covers everything, cheapest-first: check:agent-instructions,
       # `turbo run lint` for apps/builder's i18n check, then repo-wide Biome

.gitignore

@@ -61,3 +61,6 @@ CLAUDE.md
 
 .pnpm-store/
 .plans/
+
+# Local editor config with machine-specific paths (codegraph --path)
+.cursor/mcp.json