@decocms/blocks-cli 7.40.0 → 7.41.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@decocms/blocks-cli",
-  "version": "7.40.0",
+  "version": "7.41.0",
   "type": "module",
   "description": "Deco codegen (generate-blocks, generate-schema, generate-invoke) and Fresh-to-TanStack migration tooling",
   "repository": {
@@ -31,7 +31,7 @@
     "lint:unused": "knip"
   },
   "dependencies": {
-    "@decocms/blocks": "7.40.0",
+    "@decocms/blocks": "7.41.0",
     "ts-morph": "^27.0.0",
     "tsx": "^4.22.5"
   },

package/scripts/migrate/phase-scaffold.ts

@@ -1,38 +1,39 @@
 import * as fs from "node:fs";
 import * as path from "node:path";
-import type { MigrationContext } from "./types";
-import { log, logPhase } from "./types";
+// `lib-utils` is imported lazily — see end of phase-cleanup. Eager
+// generation of all 11 shims left every site with dead code that had
+// to be cleaned up by hand.
+import { extractTheme } from "./analyzers/theme-extractor";
+import { generateAppCss } from "./templates/app-css";
+import { generateCacheConfig } from "./templates/cache-config";
+import { generateCiFiles } from "./templates/ci-yml";
+import { generateCommerceInit } from "./templates/commerce-init";
+import { generateCommerceLoaders } from "./templates/commerce-loaders";
+import { generateMigrationPolicyPointerRule } from "./templates/cursor-rules";
+import { generateHooks } from "./templates/hooks";
+import { generateKnipConfig } from "./templates/knip-config";
+import { generateLockfileCheckYml } from "./templates/lockfile-check-yml";
+import { generateMainPushGuardYml } from "./templates/main-push-guard-yml";
 import {
   CANONICAL_BUN_VERSION,
   CANONICAL_NODE_VERSION,
   generatePackageJson,
 } from "./templates/package-json";
-import { generateLockfileCheckYml } from "./templates/lockfile-check-yml";
-import { generateTsconfig } from "./templates/tsconfig";
-import { generateViteConfig } from "./templates/vite-config";
-import { generateKnipConfig } from "./templates/knip-config";
+import { generateParityYml } from "./templates/parity-yml";
+import { generatePerfFiles } from "./templates/perf-yml";
+import { generatePlaywrightFiles } from "./templates/playwright-yml";
+import { generateReactDoctorYml } from "./templates/react-doctor-yml";
 import { generateRoutes } from "./templates/routes";
-import { generateSetup } from "./templates/setup";
+import { generateSdkFiles } from "./templates/sdk-gen";
+import { generateSectionLoaders } from "./templates/section-loaders";
 import { generateServerEntry } from "./templates/server-entry";
-import { generateAppCss } from "./templates/app-css";
+import { generateSetup } from "./templates/setup";
+import { generateTsconfig } from "./templates/tsconfig";
 import { generateTypeFiles } from "./templates/types-gen";
 import { generateUiComponents } from "./templates/ui-components";
-import { generateHooks } from "./templates/hooks";
-import { generateCommerceInit } from "./templates/commerce-init";
-import { generateCommerceLoaders } from "./templates/commerce-loaders";
-import { generateSectionLoaders } from "./templates/section-loaders";
-import { generateCacheConfig } from "./templates/cache-config";
-import { generateSdkFiles } from "./templates/sdk-gen";
-import { generateMigrationPolicyPointerRule } from "./templates/cursor-rules";
-import { generatePerfFiles } from "./templates/perf-yml";
-import { generateCiFiles } from "./templates/ci-yml";
-import { generateMainPushGuardYml } from "./templates/main-push-guard-yml";
-import { generatePlaywrightFiles } from "./templates/playwright-yml";
-import { generateReactDoctorYml } from "./templates/react-doctor-yml";
-// `lib-utils` is imported lazily — see end of phase-cleanup. Eager
-// generation of all 11 shims left every site with dead code that had
-// to be cleaned up by hand.
-import { extractTheme } from "./analyzers/theme-extractor";
+import { generateViteConfig } from "./templates/vite-config";
+import type { MigrationContext } from "./types";
+import { log, logPhase } from "./types";
 
 function writeFile(ctx: MigrationContext, relPath: string, content: string) {
   const fullPath = path.join(ctx.sourceDir, relPath);
@@ -78,13 +79,21 @@ export function scaffold(ctx: MigrationContext): void {
   // does NOT scaffold deploy/preview/sync-secrets workflows in the site
   // repo; the operator wires the repo<->worker connection in the CF
   // dashboard once after the first push.
-  writeFile(ctx, ".prettierrc", JSON.stringify({
-    semi: true,
-    singleQuote: false,
-    trailingComma: "all" as const,
-    printWidth: 100,
-    tabWidth: 2,
-  }, null, 2) + "\n");
+  writeFile(
+    ctx,
+    ".prettierrc",
+    JSON.stringify(
+      {
+        semi: true,
+        singleQuote: false,
+        trailingComma: "all" as const,
+        printWidth: 100,
+        tabWidth: 2,
+      },
+      null,
+      2,
+    ) + "\n",
+  );
 
   // PR-time lockfile guardrail. Lives in the site repo (per-site, not
   // a centralised reusable workflow) because per D6.3 we are not
@@ -117,6 +126,10 @@ export function scaffold(ctx: MigrationContext): void {
   // Advisory React lint (react-doctor): comments on PRs, never fails.
   writeFile(ctx, ".github/workflows/react-doctor.yml", generateReactDoctorYml());
 
+  // Advisory parity validation: compares each PR preview against the original
+  // live storefront (@decocms/parity). Inert until PARITY_PROD_URL is set.
+  writeFile(ctx, ".github/workflows/parity.yml", generateParityYml(ctx.siteName));
+
   // Server entry files (server.ts, worker-entry.ts, router.tsx, runtime.ts, context.ts)
   writeMultiFile(ctx, generateServerEntry(ctx));
 
@@ -255,18 +268,20 @@ export { type Font as SiteThemeFont };
 }
 
 function generateWranglerConfig(ctx: MigrationContext): string {
-  return JSON.stringify(
-    {
-      name: ctx.siteName,
-      main: "src/worker-entry.ts",
-      compatibility_date: "2025-05-01",
-      compatibility_flags: ["nodejs_compat", "no_handle_cross_request_promise_resolution"],
-      cache: { enabled: true },
-      kv_namespaces: [{ binding: "SITES_KV", id: "dev-sites-kv" }],
-    },
-    null,
-    2,
-  ) + "\n";
+  return (
+    JSON.stringify(
+      {
+        name: ctx.siteName,
+        main: "src/worker-entry.ts",
+        compatibility_date: "2025-05-01",
+        compatibility_flags: ["nodejs_compat", "no_handle_cross_request_promise_resolution"],
+        cache: { enabled: true },
+        kv_namespaces: [{ binding: "SITES_KV", id: "dev-sites-kv" }],
+      },
+      null,
+      2,
+    ) + "\n"
+  );
 }
 
 function generateGitignore(): string {
@@ -580,10 +595,7 @@ ${entries.join("\n")}
 }
 
 function hasLocationMatcher(ctx: MigrationContext): boolean {
-  const dirs = [
-    path.join(ctx.sourceDir, "matchers"),
-    path.join(ctx.sourceDir, "src", "matchers"),
-  ];
+  const dirs = [path.join(ctx.sourceDir, "matchers"), path.join(ctx.sourceDir, "src", "matchers")];
   for (const dir of dirs) {
     if (fs.existsSync(dir)) {
       const files = fs.readdirSync(dir);
@@ -598,7 +610,9 @@ function hasLocationMatcher(ctx: MigrationContext): boolean {
       try {
         const content = fs.readFileSync(path.join(blocksDir, file), "utf-8");
         if (content.includes("website/matchers/location")) return true;
-      } catch { /* skip */ }
+      } catch {
+        /* skip */
+      }
     }
   }
   return false;

package/scripts/migrate/phase-verify.ts

@@ -25,6 +25,7 @@ const REQUIRED_FILES = [
   ".github/workflows/main-push-guard.yml",
   ".github/workflows/playwright.yml",
   ".github/workflows/react-doctor.yml",
+  ".github/workflows/parity.yml",
   "tools/gates/no-suppressions.sh",
   "playwright.config.ts",
   "knip.config.ts",
@@ -74,9 +75,7 @@ export const checks: Check[] = [
     name: "All scaffolded files exist",
     severity: "error",
     fn: (ctx) => {
-      const missing = REQUIRED_FILES.filter(
-        (f) => !fs.existsSync(path.join(ctx.sourceDir, f)),
-      );
+      const missing = REQUIRED_FILES.filter((f) => !fs.existsSync(path.join(ctx.sourceDir, f)));
       if (missing.length > 0) {
         console.log(`    Missing: ${missing.join(", ")}`);
         return false;
@@ -88,9 +87,7 @@ export const checks: Check[] = [
     name: "Old artifacts removed",
     severity: "error",
     fn: (ctx) => {
-      const remaining = MUST_NOT_EXIST.filter(
-        (f) => fs.existsSync(path.join(ctx.sourceDir, f)),
-      );
+      const remaining = MUST_NOT_EXIST.filter((f) => fs.existsSync(path.join(ctx.sourceDir, f)));
       if (remaining.length > 0) {
         console.log(`    Still exists: ${remaining.join(", ")}`);
         return false;
@@ -141,14 +138,16 @@ export const checks: Check[] = [
     },
   },
   {
-    name: 'No class= in JSX (should be className=)',
+    name: "No class= in JSX (should be className=)",
     severity: "warning",
     fn: (ctx) => {
       const srcDir = path.join(ctx.sourceDir, "src");
       if (!fs.existsSync(srcDir)) return true;
       const bad = findFilesWithPattern(srcDir, /<[a-zA-Z][^>]*\sclass\s*=/);
       if (bad.length > 0) {
-        console.log(`    Still has class= in JSX: ${bad.slice(0, 5).join(", ")}${bad.length > 5 ? ` (+${bad.length - 5} more)` : ""}`);
+        console.log(
+          `    Still has class= in JSX: ${bad.slice(0, 5).join(", ")}${bad.length > 5 ? ` (+${bad.length - 5} more)` : ""}`,
+        );
         return false;
       }
       return true;
@@ -163,12 +162,8 @@ export const checks: Check[] = [
         console.log("    public/ directory missing");
         return false;
       }
-      const hasSprites = fs.existsSync(
-        path.join(publicDir, "sprites.svg"),
-      );
-      const hasFavicon = fs.existsSync(
-        path.join(publicDir, "favicon.ico"),
-      );
+      const hasSprites = fs.existsSync(path.join(publicDir, "sprites.svg"));
+      const hasFavicon = fs.existsSync(path.join(publicDir, "favicon.ico"));
       if (!hasSprites) console.log("    Missing: public/sprites.svg");
       if (!hasFavicon) console.log("    Missing: public/favicon.ico");
       return hasSprites && hasFavicon;
@@ -277,7 +272,9 @@ export const checks: Check[] = [
       const bad = findFilesWithPattern(srcDir, /(?<!<(?:img|Image)[^>]*)-z-\d+/);
       if (bad.length > 0) {
         console.log(`    Negative z-index on non-image elements: ${bad.join(", ")}`);
-        console.log(`    These may be invisible due to stacking contexts. Replace with z-0 or positive z-index.`);
+        console.log(
+          `    These may be invisible due to stacking contexts. Replace with z-0 or positive z-index.`,
+        );
         return false;
       }
       return true;
@@ -324,7 +321,9 @@ export const checks: Check[] = [
         // Check that runtime.ts exists and has the invoke proxy
         const runtimePath = path.join(srcDir, "runtime.ts");
         if (!fs.existsSync(runtimePath)) {
-          console.log(`    Files use invoke.* but src/runtime.ts is missing: ${hasInvoke.join(", ")}`);
+          console.log(
+            `    Files use invoke.* but src/runtime.ts is missing: ${hasInvoke.join(", ")}`,
+          );
           return false;
         }
       }
@@ -379,7 +378,10 @@ export const checks: Check[] = [
     fn: (ctx) => {
       const srcDir = path.join(ctx.sourceDir, "src");
       if (!fs.existsSync(srcDir)) return true;
-      const bad = findFilesWithPattern(srcDir, /\bhx-(?:get|post|put|delete|patch|trigger|target|swap|on|indicator|sync|select)\b/);
+      const bad = findFilesWithPattern(
+        srcDir,
+        /\bhx-(?:get|post|put|delete|patch|trigger|target|swap|on|indicator|sync|select)\b/,
+      );
       if (bad.length > 0) {
         console.log(`    HTMX attributes found (needs manual React migration): ${bad.join(", ")}`);
         return false;
@@ -433,7 +435,9 @@ export const checks: Check[] = [
       ];
       const unique = [...new Set(bad)];
       if (unique.length > 0) {
-        console.log(`    Still references frozen @decocms/start or @decocms/apps/* specifiers: ${unique.join(", ")}`);
+        console.log(
+          `    Still references frozen @decocms/start or @decocms/apps/* specifiers: ${unique.join(", ")}`,
+        );
         return false;
       }
       return true;
@@ -450,9 +454,7 @@ export const checks: Check[] = [
         "src/setup/commerce-init.ts",
         "src/setup/section-loaders.ts",
       ];
-      const missing = setupFiles.filter(
-        (f) => !fs.existsSync(path.join(ctx.sourceDir, f)),
-      );
+      const missing = setupFiles.filter((f) => !fs.existsSync(path.join(ctx.sourceDir, f)));
       if (missing.length > 0) {
         console.log(`    Missing setup infrastructure: ${missing.join(", ")}`);
         return false;
@@ -468,9 +470,13 @@ export const checks: Check[] = [
       if (fs.existsSync(islandsDir)) {
         try {
           const files = fs.readdirSync(islandsDir, { recursive: true });
-          const tsxFiles = (files as string[]).filter((f: string) => f.endsWith(".tsx") || f.endsWith(".ts"));
+          const tsxFiles = (files as string[]).filter(
+            (f: string) => f.endsWith(".tsx") || f.endsWith(".ts"),
+          );
           if (tsxFiles.length > 0) {
-            console.log(`    src/islands/ still has ${tsxFiles.length} files — should be moved to components/`);
+            console.log(
+              `    src/islands/ still has ${tsxFiles.length} files — should be moved to components/`,
+            );
             return false;
           }
         } catch {}
@@ -487,9 +493,7 @@ export const checks: Check[] = [
         "src/hooks/useUser.ts",
         "src/hooks/useWishlist.ts",
       ];
-      const missing = hookFiles.filter(
-        (f) => !fs.existsSync(path.join(ctx.sourceDir, f)),
-      );
+      const missing = hookFiles.filter((f) => !fs.existsSync(path.join(ctx.sourceDir, f)));
       if (missing.length > 0) {
         console.log(`    Missing hooks: ${missing.join(", ")}`);
         return false;
@@ -507,9 +511,7 @@ export const checks: Check[] = [
         "src/types/deco.ts",
         "src/types/commerce-app.ts",
       ];
-      const missing = typeFiles.filter(
-        (f) => !fs.existsSync(path.join(ctx.sourceDir, f)),
-      );
+      const missing = typeFiles.filter((f) => !fs.existsSync(path.join(ctx.sourceDir, f)));
       if (missing.length > 0) {
         console.log(`    Missing type files: ${missing.join(", ")}`);
         return false;
@@ -530,7 +532,8 @@ function findFilesWithPattern(
   for (const entry of entries) {
     const fullPath = path.join(dir, entry.name);
     if (entry.isDirectory()) {
-      if (entry.name === "node_modules" || entry.name === ".git" || entry.name === "server") continue;
+      if (entry.name === "node_modules" || entry.name === ".git" || entry.name === "server")
+        continue;
       findFilesWithPattern(fullPath, pattern, results, root);
     } else if (entry.name.endsWith(".ts") || entry.name.endsWith(".tsx")) {
       const content = fs.readFileSync(fullPath, "utf-8");
@@ -563,7 +566,8 @@ function findMatchesWithPattern(
   for (const entry of entries) {
     const fullPath = path.join(dir, entry.name);
     if (entry.isDirectory()) {
-      if (entry.name === "node_modules" || entry.name === ".git" || entry.name === "server") continue;
+      if (entry.name === "node_modules" || entry.name === ".git" || entry.name === "server")
+        continue;
       findMatchesWithPattern(fullPath, pattern, results, root);
     } else if (entry.name.endsWith(".ts") || entry.name.endsWith(".tsx")) {
       const content = fs.readFileSync(fullPath, "utf-8");
@@ -591,7 +595,11 @@ export function verify(ctx: MigrationContext): boolean {
 
   for (const check of checks) {
     const pass = check.fn(ctx);
-    const icon = pass ? "\x1b[32m✓\x1b[0m" : check.severity === "error" ? "\x1b[31m✗\x1b[0m" : "\x1b[33m⚠\x1b[0m";
+    const icon = pass
+      ? "\x1b[32m✓\x1b[0m"
+      : check.severity === "error"
+        ? "\x1b[31m✗\x1b[0m"
+        : "\x1b[33m⚠\x1b[0m";
     console.log(`  ${icon} ${check.name}`);
     if (!pass) {
       if (check.severity === "error") errors++;

package/scripts/migrate/templates/ci-workflows.test.ts

@@ -1,6 +1,7 @@
 import { describe, expect, it } from "vitest";
 import { generateCiFiles } from "./ci-yml";
 import { generateMainPushGuardYml } from "./main-push-guard-yml";
+import { generateParityYml } from "./parity-yml";
 import { generatePlaywrightFiles } from "./playwright-yml";
 import { generateReactDoctorYml } from "./react-doctor-yml";
 
@@ -25,7 +26,9 @@ describe("generateCiFiles", () => {
 
   it("blocks on generate + build, keeps cleanliness gates advisory", () => {
     // generate + build have NO continue-on-error
-    expect(ci).toMatch(/Generate artifacts[\s\S]*?run: bun run generate && bun run generate:routes/);
+    expect(ci).toMatch(
+      /Generate artifacts[\s\S]*?run: bun run generate && bun run generate:routes/,
+    );
     expect(ci).toMatch(/Build \(vite\)\n\s+run: bun run build\n/);
     // the four cleanliness gates are advisory
     for (const advisory of ["Typecheck", "Format check", "Knip", "no new suppression"]) {
@@ -106,3 +109,17 @@ describe("generateReactDoctorYml", () => {
     expect(yml).not.toMatch(/^\s*blocking: error/m);
   });
 });
+
+describe("generateParityYml", () => {
+  const yml = generateParityYml("loja-tanstack");
+  it("runs parity journey advisory, gated on PARITY_PROD_URL", () => {
+    expect(yml).toContain("name: Parity");
+    expect(yml).toContain("continue-on-error: true"); // advisory, never blocks
+    expect(yml).toContain("vars.PARITY_PROD_URL"); // prod = original storefront
+    expect(yml).toContain("bunx @decocms/parity journey");
+    expect(yml).toContain("--junit parity-results.xml");
+    expect(yml).toContain("--github");
+    expect(yml).toContain("Workers Builds: loja-tanstack"); // worker name interpolated
+    expect(yml).toContain("secrets.ANTHROPIC_API_KEY"); // optional LLM key
+  });
+});

package/scripts/migrate/templates/parity-yml.ts

@@ -0,0 +1,136 @@
+/**
+ * Scaffolds `.github/workflows/parity.yml` — validates the migrated storefront
+ * against the ORIGINAL live site on every PR, using `@decocms/parity`.
+ *
+ * Why day-one: a fresh migration is exactly when parity earns its keep — it
+ * catches the sections/SEO/journey steps that silently didn't survive the
+ * VTEX IO → blocks port, comparing the PR preview against the source of truth
+ * (the still-live original storefront).
+ *
+ * Shape (mirrors perf.yml):
+ *   - Advisory (`continue-on-error: true`) so day-one CI is green; comments,
+ *     never blocks. Flip to a gate by removing continue-on-error once stable.
+ *   - cand = the CF Workers Builds preview URL, discovered by polling the
+ *     check-run output (same block as perf.yml — no CF token, no local build).
+ *   - prod = repo variable `PARITY_PROD_URL` (the original storefront). The one
+ *     calibration knob the operator sets once; the job SKIPS cleanly if unset,
+ *     so the workflow is inert until wired.
+ *   - Runs `parity journey` (the tightest loop: purchase journey only, JUnit +
+ *     GitHub annotations, no LLM aggregation). ANTHROPIC_API_KEY is an OPTIONAL
+ *     secret — parity runs without it (issues severity-sorted, not LLM-ranked).
+ *
+ * Docs: https://docs.decocms.com/v2/en/parity/ci
+ *
+ * @param workerName  Cloudflare Worker name (= wrangler `name`, e.g. "loja-tanstack").
+ *                    Used to match the "Workers Builds: <name>" check run.
+ */
+export function generateParityYml(workerName: string): string {
+  return `name: Parity
+
+# Valida a loja migrada contra a loja ORIGINAL (source of truth) a cada PR, com
+# @decocms/parity. Advisory (comenta, não trava) — vire gate removendo o
+# \`continue-on-error\` do job quando estabilizar, igual perf/react-doctor.
+#
+# Requer a variável de repo \`PARITY_PROD_URL\` = URL da loja original (ex.:
+# https://www.minhaloja.com.br). Sem ela, o job pula limpo. \`ANTHROPIC_API_KEY\`
+# é secret OPCIONAL (ranqueia issues com IA; parity roda sem ele).
+#
+# cand = preview URL do CF Workers Builds (mesmo polling do perf.yml).
+
+on:
+  pull_request:
+
+permissions:
+  contents: read
+  pull-requests: write
+  checks: read
+
+concurrency:
+  group: parity-\${{ github.workflow }}-\${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  parity:
+    runs-on: ubuntu-latest
+    continue-on-error: true
+    steps:
+      # Pula tudo se a URL da loja original não foi configurada.
+      - id: guard
+        name: Checar PARITY_PROD_URL
+        env:
+          PROD_URL: \${{ vars.PARITY_PROD_URL }}
+        run: |
+          if [ -z "$PROD_URL" ]; then
+            echo "PARITY_PROD_URL não configurada — pulando parity." >> "$GITHUB_STEP_SUMMARY"
+            echo "Configure em Settings → Variables → Actions para ativar." >> "$GITHUB_STEP_SUMMARY"
+            echo "run=false" >> "$GITHUB_OUTPUT"
+          else
+            echo "run=true" >> "$GITHUB_OUTPUT"
+          fi
+
+      # Aguarda o CF Workers Builds completar e extrai a preview URL do output.
+      # Timeout: 10 min (builds normalmente terminam em ~3 min).
+      - id: cf
+        name: Aguardar CF build e extrair preview URL
+        if: steps.guard.outputs.run == 'true'
+        env:
+          GH_TOKEN: \${{ github.token }}
+          SHA: \${{ github.event.pull_request.head.sha }}
+        run: |
+          echo "Aguardando CF Workers Builds para $SHA..."
+          for i in $(seq 1 60); do
+            summary=$(gh api \\
+              "repos/$GITHUB_REPOSITORY/commits/$SHA/check-runs" \\
+              --jq '.check_runs[] | select(.name == "Workers Builds: ${workerName}") | .output.summary' \\
+              2>/dev/null || true)
+
+            if [ -n "$summary" ]; then
+              conclusion=$(gh api \\
+                "repos/$GITHUB_REPOSITORY/commits/$SHA/check-runs" \\
+                --jq '.check_runs[] | select(.name == "Workers Builds: ${workerName}") | .conclusion' \\
+                2>/dev/null || true)
+
+              if [ "$conclusion" = "success" ]; then
+                url=$(printf '%s' "$summary" | grep -oP '(?<=Preview URL: )https://\\S+' | head -1)
+                if [ -n "$url" ]; then
+                  echo "url=$url" >> "$GITHUB_OUTPUT"
+                  echo "run=true"  >> "$GITHUB_OUTPUT"
+                  echo "CF build OK — preview: $url"
+                  exit 0
+                fi
+              elif [ -n "$conclusion" ] && [ "$conclusion" != "null" ]; then
+                echo "CF build concluiu com: $conclusion — pulando parity"
+                echo "run=false" >> "$GITHUB_OUTPUT"
+                exit 0
+              fi
+            fi
+
+            echo "Tentativa $i/60 — aguardando 10s..."
+            sleep 10
+          done
+
+          echo "Timeout aguardando CF build — pulando parity"
+          echo "run=false" >> "$GITHUB_OUTPUT"
+
+      - uses: oven-sh/setup-bun@v2
+        if: steps.cf.outputs.run == 'true'
+        with:
+          bun-version: "1.3.5"
+
+      # parity journey dirige um browser real — precisa do binário do chromium.
+      - name: Instalar chromium
+        if: steps.cf.outputs.run == 'true'
+        run: bunx playwright install --with-deps chromium
+
+      - name: Rodar parity journey (prod × preview)
+        if: steps.cf.outputs.run == 'true'
+        env:
+          ANTHROPIC_API_KEY: \${{ secrets.ANTHROPIC_API_KEY }}
+        run: |
+          bunx @decocms/parity journey \\
+            --prod "\${{ vars.PARITY_PROD_URL }}" \\
+            --cand "\${{ steps.cf.outputs.url }}" \\
+            --junit parity-results.xml \\
+            --github
+`;
+}