pipecraft 0.0.0-releaseit

package/.github/example/workflows/job.app.docs.test.yml

@@ -0,0 +1,50 @@
+name: "Docs:Deploy"
+
+
+on:
+  workflow_dispatch:
+  workflow_call: 
+
+jobs:
+  build:
+    name: Build Docusaurus
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Setup node
+        uses: actions/setup-node@v4
+        with:
+          node-version: 20
+          cache-dependency-path: 'pnpm-lock.yaml'
+
+      - name: Install pnpm
+        run: npm install -g pnpm
+
+      - name: Get pnpm store directory
+        shell: bash
+        run: |
+          echo "STORE_PATH=$(pnpm store path --silent)" >> $GITHUB_ENV
+
+      - uses: actions/cache@v4
+        name: Setup pnpm cache
+        with:
+          path: ${{ env.STORE_PATH }}
+          key: ${{ runner.os }}-pnpm-store-${{ hashFiles('pnpm-lock.yaml') }}
+          restore-keys: |
+            ${{ runner.os }}-pnpm-store-
+  
+      - name: Install dependencies
+        run: pnpm install --frozen-lockfile --filter @madi/docs
+    
+      - name: Build website
+        working-directory: ./apps/docs
+        run: pnpm run build
+      
+      - name: Upload Build Artifact
+        uses: actions/upload-artifact@v4
+        with:
+          name: docs-build
+          path: ./apps/docs/build

package/.github/example/workflows/job.app.web.deploy.yml

@@ -0,0 +1,96 @@
+name: Build and Deploy to Google Cloud Storage
+on:
+  workflow_call:
+    inputs:
+      project_id:
+        description: 'The project ID for the environment'
+        required: true
+        type: string
+      bucket:
+        description: 'The bucket to store the deployment'
+        required: true
+        type: string
+
+jobs:
+  build_and_push_image:
+    environment: ${{ github.ref_name == 'main' && 'production' || github.ref_name }}
+    permissions:
+      contents: 'read'
+      id-token: 'write'
+    runs-on: ubuntu-latest
+    env:
+      WORKING_DIR: ./apps/interfaces/web
+      WEB_STORAGE: ${{ inputs.bucket }}
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Authenticate with Google
+        uses: 'google-github-actions/auth@v2'
+        with:
+          project_id: ${{ inputs.project_id }}
+          credentials_json: ${{ secrets.GCP_CREDENTIALS }}
+
+      - name: Setup node
+        uses: actions/setup-node@v4
+        with:
+          node-version: 20
+
+      - name: Install pnpm
+        run: npm install -g pnpm
+        working-directory: ${{ env.WORKING_DIR }}
+
+      - name: Cache pnpm store
+        uses: actions/cache@v4
+        with:
+          path: ~/.pnpm-store
+          key: ${{ runner.os }}-pnpm-store-${{ hashFiles('${{ env.WORKING_DIR }}/pnpm-lock.yaml') }}
+          restore-keys: |
+            ${{ runner.os }}-pnpm-store-${{ env.WORKING_DIR }}-
+
+      - name: Install dependencies
+        run: pnpm install --frozen-lockfile -F @madi/web
+
+      - name: Cache Next.js
+        uses: actions/cache@v4
+        with:
+          path: |
+            ~/.pnpm-store
+            ${{ github.workspace }}/${{ env.WORKING_DIR }}/.next/cache
+          key: ${{ runner.os }}-nextjs-${{ env.WORKING_DIR }}-${{ hashFiles('${{ env.WORKING_DIR }}/pnpm-lock.yaml') }}-${{ hashFiles('${{ env.WORKING_DIR }}/**/*.js', '${{ env.WORKING_DIR }}/**/*.jsx', '${{ env.WORKING_DIR }}/**/*.ts', '${{ env.WORKING_DIR }}/**/*.tsx') }}
+          restore-keys: |
+            ${{ runner.os }}-nextjs-${{ env.WORKING_DIR }}-${{ hashFiles('${{ env.WORKING_DIR }}/pnpm-lock.yaml') }}-
+
+      - name: Build the distribution
+        run: pnpm -F @madi/web run build;
+
+      - name: Store release SHA in JSON file
+        working-directory: ${{ env.WORKING_DIR }} 
+        run: |
+          mkdir -p ${{ env.WORKING_DIR }}/dist
+          REPO_NAME=$(echo "${{ github.repository }}" | cut -d'/' -f2)
+          echo '{
+            "sha": "${{ github.sha }}",
+            "owner": "${{ github.repository_owner }}",
+            "repo": "'$REPO_NAME'",
+            "branch": "${{ github.ref_name }}"
+          }' > ${{ env.WORKING_DIR }}/dist/sha.json
+
+      - name: Download Built Documentation
+        uses: actions/download-artifact@v4
+        with:
+          name: docs-build
+          path: ${{ env.WORKING_DIR }}/dist/docs
+
+      - name: 'Set up Cloud SDK'
+        uses: 'google-github-actions/setup-gcloud@v2'
+        with:
+          version: 'latest'
+          project_id: ${{ inputs.project_id }}
+
+      - name: 'Sync dist to bucket (delete the old files)'
+        run: |
+          gsutil -m -h "Cache-Control:public, max-age=0" rsync -d -r "${{ env.WORKING_DIR }}/dist" "gs://${{ env.WEB_STORAGE }}"
+
+## TODO:  Set max-age back up to 3600 when stack stabilizes.
+# gs://web-app-hq-madi-dev-4ebd7d92-7d0cb30c/

package/.github/example/workflows/job.app.web.test.yml

@@ -0,0 +1,49 @@
+name: "Web: Lint & Test"
+
+on:
+  workflow_call:
+  workflow_dispatch:
+    
+jobs:
+  smoke-tests:
+    timeout-minutes: 60
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+      
+      - name: Setup node
+        uses: actions/setup-node@v4
+        with:
+          node-version: 20
+
+      - name: Install pnpm
+        run: npm install -g pnpm
+
+      - name: Cache dependencies
+        uses: actions/cache@v4
+        with:
+          path: ~/.pnpm-store
+          key: ${{ runner.os }}-pnpm-${{ hashFiles('pnpm-lock.yaml') }}
+          restore-keys: |
+            ${{ runner.os }}-pnpm-
+
+      - name: Install dependencies
+        run: pnpm install -F @madi/web
+
+      - name: Cache Playwright browsers
+        id: cache-playwright-browsers
+        uses: actions/cache@v4
+        with:
+          path: ~/.cache/ms-playwright
+          key: ${{ runner.os }}-playwright-${{ hashFiles('pnpm-lock.yaml') }}
+          restore-keys: |
+            ${{ runner.os }}-playwright-
+
+      - name: Install Playwright Browsers
+        run: pnpm exec playwright install --with-deps
+        working-directory: apps/interfaces/web
+      
+      - name: Run Playwright tests
+        run: pnpm exec playwright test
+        working-directory: apps/interfaces/web

package/.github/example/workflows/job.changes.yml

@@ -0,0 +1,82 @@
+name: "Changes"
+
+on:
+  workflow_call:
+    outputs:
+      api: 
+        value: ${{ jobs.changes.outputs.api }}
+      web: 
+        value: ${{ jobs.changes.outputs.web }}
+      docs: 
+        value: ${{ jobs.changes.outputs.docs }}
+      libs: 
+        value: ${{ jobs.changes.outputs.libs }}
+      cicd:
+        value: ${{ jobs.changes.outputs.cicd }}
+      
+  workflow_dispatch:
+
+jobs:
+  changes:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      pull-requests: read
+    outputs:
+      api: ${{ steps.merge.outputs.api }}
+      web: ${{ steps.merge.outputs.web }}
+      docs: ${{ steps.merge.outputs.docs }}
+      libs: ${{ steps.merge.outputs.libs }}
+      cicd: ${{ steps.merge.outputs.cicd }}
+    steps:
+
+    - uses: actions/checkout@v4
+      with:
+        fetch-depth: 0
+
+    - name: Set Base Branch
+      id: set-base
+      ## if base branch is develop compare to test.  Test and Main always fully deploy
+      run: |
+        base_branch=$(
+          if [[ '${{ github.ref }}' == 'refs/heads/develop' ]]; then
+            echo 'test'
+          else
+            echo 'develop'
+          fi
+        )
+        echo "Base branch determined: $base_branch"
+        echo "base_branch=$base_branch" >> $GITHUB_ENV
+
+    - uses: dorny/paths-filter@v3
+      id: filter
+      with:
+        base: ${{ env.base_branch }}
+        filters: |
+          api:
+            - 'apps/api/**'
+          web:
+            - 'apps/interfaces/web/**'
+          docs:
+            - 'apps/docs/**'
+          libs:
+            - 'libs/**'
+          cicd: 
+            - '.github/workflows/**'
+
+    - name: Merge filter outputs with branch condition
+      id: merge
+      run: |
+        echo "api=${{ steps.filter.outputs.api == 'true' || github.ref == 'refs/heads/main' || github.ref == 'refs/heads/test' }}" >> $GITHUB_OUTPUT
+        echo "web=${{ steps.filter.outputs.web == 'true' || github.ref == 'refs/heads/main' || github.ref == 'refs/heads/test' }}" >> $GITHUB_OUTPUT
+        echo "docs=${{ steps.filter.outputs.docs == 'true' || github.ref == 'refs/heads/main' || github.ref == 'refs/heads/test' }}" >> $GITHUB_OUTPUT
+        echo "libs=${{ steps.filter.outputs.libs == 'true' || github.ref == 'refs/heads/main' || github.ref == 'refs/heads/test' }}" >> $GITHUB_OUTPUT
+        echo "cicd=${{ steps.filter.outputs.cicd == 'true' || github.ref == 'refs/heads/main' || github.ref == 'refs/heads/test' }}" >> $GITHUB_OUTPUT
+
+    - name: Debug Paths Filter Outputs
+      run: |
+        echo "API: ${{ steps.merge.outputs.api }}"
+        echo "WEB: ${{ steps.merge.outputs.web }}"
+        echo "DOCS: ${{ steps.merge.outputs.docs }}"
+        echo "LIBS: ${{ steps.merge.outputs.libs }}"
+        echo "CICD: ${{ steps.merge.outputs.cicd }}"

package/.github/example/workflows/job.create-pr.yml

@@ -0,0 +1,96 @@
+name: "Create PR"
+
+on:
+  workflow_call:
+    inputs:
+      version:
+        description: 'The new version to deploy'
+        required: true
+        type: string
+  workflow_dispatch:
+
+jobs:
+  create-pr:
+    runs-on: ubuntu-latest
+    if: ${{ github.ref == 'refs/heads/develop' || github.ref == 'refs/heads/test'  }}
+    steps:
+      - name: Checkout Code
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0  # Ensures full history for version tracking
+
+      - name: Set Up Git
+        run: |
+          git config user.name "github-actions[bot]"
+          git config user.email "github-actions[bot]@users.noreply.github.com"
+
+      - name: Determine Base and Target Version
+        id: versioning
+        run: |
+          set -x
+          BASE_BRANCH=${{ github.ref_name == 'develop' && 'test' || 'main' }}
+          
+          # Fetch latest tag on base branch
+          # Get the current commit hash on the base branch (test or main)
+          BASE_COMMIT_HASH=$(git rev-parse origin/$BASE_BRANCH)
+
+          # Get the tags that are on or before the base commit
+          PREV_VERSION=$(git tag --list 'v[0-9]*.[0-9]*.[0-9]*' --sort=-v:refname | while read tag; do git merge-base --is-ancestor "$tag" "$BASE_COMMIT_HASH" && echo "$tag" && break; done)
+
+          if [[ -z "$PREV_VERSION" ]]; then
+            echo "No previous version found, aborting."
+            exit 1
+          fi
+
+          echo "Previous version: $PREV_VERSION"
+          echo "BASE_BRANCH=$BASE_BRANCH" >> $GITHUB_ENV
+          echo "PREV_VERSION=$PREV_VERSION" >> $GITHUB_ENV
+
+      - name: Create Fake Branches
+        run: |
+          NEW_BRANCH="temp-${BASE_BRANCH}-${{ inputs.version }}"
+          OLD_BRANCH="temp-${BASE_BRANCH}-${PREV_VERSION}"
+
+          # Fetch the latest changes
+          git fetch origin
+
+          # Create a new fake branch from the current version of develop (or base branch)
+          git checkout -b $NEW_BRANCH origin/${{ github.ref_name }}
+          git push origin $NEW_BRANCH --force
+
+          # Create an old branch based on the previous version on the base branch (test or main)
+          git checkout -b $OLD_BRANCH origin/$BASE_BRANCH
+          git push origin $OLD_BRANCH --force
+
+          echo "NEW_BRANCH=$NEW_BRANCH" >> $GITHUB_ENV
+          echo "OLD_BRANCH=$OLD_BRANCH" >> $GITHUB_ENV
+
+      - name: Create Pull Request
+        uses: actions/github-script@v6
+        with:
+          script: |
+            const base = process.env.OLD_BRANCH;
+            const head = process.env.NEW_BRANCH;
+            const version = '${{ inputs.version }}';
+
+            const { data: existingPRs } = await github.rest.pulls.list({
+              owner: context.repo.owner,
+              repo: context.repo.repo,
+              head: head,
+              base: base,
+              state: 'open'
+            });
+
+            if (existingPRs.length > 0) {
+              console.log('A pull request already exists.');
+            } else {
+              const { data: pullRequest } = await github.rest.pulls.create({
+                owner: context.repo.owner,
+                repo: context.repo.repo,
+                title: `ci: Promote ${process.env.BASE_BRANCH} from ${process.env.PREV_VERSION} to ${version}`,
+                head: head,
+                base: base,
+                body: 'This PR is automatically created by CI.'
+              });
+              console.log(`Created pull request: ${pullRequest.html_url}`);
+            }

package/.github/example/workflows/job.env-check.yml

@@ -0,0 +1,43 @@
+name: "Environment Check"
+
+on:
+  workflow_call:
+    outputs:
+      project_id:
+        description: "The determined project id"
+        value: ${{ jobs.check.outputs.project_id }}
+      bucket:
+        description: "The determined bucket"
+        value: ${{ jobs.check.outputs.bucket }}
+
+jobs:
+  check:
+    runs-on: ubuntu-latest
+    if: ${{ github.ref_name == 'main' || github.ref_name == 'develop' || github.ref_name == 'test' }}
+    outputs:
+      project_id: ${{ steps.set-vars.outputs.project_id }}
+      bucket: ${{ steps.set-vars.outputs.bucket }}
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Set environment variables
+        id: set-vars
+        run: |
+          echo "Current branch: ${{ github.ref_name }}"
+          if [ "${{ github.ref_name }}" = "main" ]; then
+            echo "Using PROD project ID"
+            echo "project_id=${{ vars.PROJECT_ID_PROD }}" >> $GITHUB_OUTPUT
+            echo "bucket=${{ vars.WEB_STORAGE_PROD }}" >> $GITHUB_OUTPUT
+          elif [ "${{ github.ref_name }}" = "develop" ]; then
+            echo "Using DEVELOP project ID"
+            echo "project_id=${{ vars.PROJECT_ID_DEVELOP }}" >> $GITHUB_OUTPUT
+            echo "bucket=${{ vars.WEB_STORAGE_DEVELOP }}" >> $GITHUB_OUTPUT
+          elif [ "${{ github.ref_name }}" = "test" ]; then
+            echo "Using TEST project ID"
+            echo "project_id=${{ vars.PROJECT_ID_TEST }}" >> $GITHUB_OUTPUT
+            echo "bucket=${{ vars.WEB_STORAGE_TEST }}" >> $GITHUB_OUTPUT
+          else
+            echo "Error: Unsupported branch ${{ github.ref_name }}"
+            exit 1
+          fi

package/.github/example/workflows/job.fast-forward.yml

@@ -0,0 +1,103 @@
+name: "Fast Forward After PR Merge"
+
+on:
+  pull_request:
+    types:
+      - closed  # Only run when PR is merged
+
+env:
+  pipefile: 'pipe.yml'
+
+jobs:
+  fast-forward:
+    if: github.event.pull_request.merged == true && startsWith(github.event.pull_request.head.ref, 'temp-test') || startsWith(github.event.pull_request.head.ref, 'temp-main')
+    runs-on: ubuntu-latest
+    steps:
+      - name: Verify PR Source is a Fake Branch
+        id: verify-branch
+        run: |
+          PR_HEAD="${{ github.event.pull_request.head.ref }}"
+          PR_BASE="${{ github.event.pull_request.base.ref }}"
+          
+
+          # Check if the PR source branch matches the fake branch pattern
+          if [[ ! "$PR_HEAD" =~ ^temp-(test|main)-v[0-9]+\.[0-9]+\.[0-9]+$ ]]; then
+            echo "Skipping: PR did not come from an auto-generated fake branch."
+            exit 1
+          fi
+
+          # Extract version and base branch from the PR branch name
+          BASE_BRANCH=$(echo "$PR_BASE" | cut -d'-' -f2)
+          OLD_VERSION=$(echo "$PR_BASE" | cut -d'-' -f3-)
+          NEXT_VERSION=$(echo "$PR_HEAD" | cut -d'-' -f3-)
+
+          echo "BASE_BRANCH=$BASE_BRANCH"
+          echo "OLD_VERSION=$OLD_VERSION"
+          echo "NEXT_VERSION=$NEXT_VERSION"
+
+          # Set as environment variables for later steps
+          echo "BASE_BRANCH=$BASE_BRANCH" >> $GITHUB_ENV
+          echo "OLD_VERSION=$OLD_VERSION" >> $GITHUB_ENV
+          echo "NEXT_VERSION=$NEXT_VERSION" >> $GITHUB_ENV
+
+      - name: Checkout Repository
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0  # Ensure full history for fast-forwarding
+
+      - name: Set Up Git
+        run: |
+          git config user.name "github-actions[bot]"
+          git config user.email "github-actions[bot]@users.noreply.github.com"
+
+      - name: Get Latest Commit from Head Branch
+        id: get-commit
+        run: |
+          PR_HEAD="${{ github.event.pull_request.head.ref }}"
+          PR_BASE="${{ github.event.pull_request.base.ref }}"
+          
+          # Ensure the head branch is checked out
+          git fetch origin $PR_HEAD:$PR_HEAD
+          git checkout $PR_HEAD
+
+          git rev-parse $PR_HEAD
+
+          # Fetch the latest commit hash from the head branch
+          COMMIT_HASH=$(git rev-parse $PR_HEAD)
+
+          if [[ -z "$COMMIT_HASH" ]]; then
+            echo "Failed to find commit for branch $PR_HEAD"
+            exit 1
+          fi
+
+          echo "Found commit: $COMMIT_HASH"
+          echo "COMMIT_HASH=$COMMIT_HASH" >> $GITHUB_ENV
+
+      - name: Fast Forward Target Branch
+        run: |
+          git fetch origin
+
+          # Checkout the target branch (test or main)
+          git checkout $BASE_BRANCH
+
+          # Ensure fast-forward merge
+          git merge --ff-only $COMMIT_HASH
+
+          # Push the changes back to the target branch
+          git push origin $BASE_BRANCH
+
+      - name: Delete Temporary Branches
+        run: |
+          # Delete the fake branches after the merge
+          git push origin --delete "temp-${BASE_BRANCH}-${OLD_VERSION}"
+          git push origin --delete "temp-${BASE_BRANCH}-${NEXT_VERSION}"
+
+          echo "Temporary branches deleted"
+      
+      - name: Trigger Test and Deploy Workflow
+        run: |
+          curl -X POST \
+            -H "Accept: application/vnd.github.v3+json" \
+            -H "Authorization: token ${{ secrets.GITHUB_TOKEN }}" \
+            https://api.github.com/repos/${{ github.repository }}/actions/workflows/${{env.pipefile}}/dispatches \
+            -d "{\"ref\":\"${BASE_BRANCH}\", \"inputs\": {\"migration_input\": \"false\", \"seed_input\": \"false\"}}"

package/.github/example/workflows/job.lint.yml

@@ -0,0 +1,64 @@
+name: "Web: Lint & Test"
+
+on:
+  workflow_call:
+  workflow_dispatch:
+
+jobs:
+  lint:
+    name: ESLint
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout repo
+        uses: actions/checkout@v4
+
+      - name: Setup node
+        uses: actions/setup-node@v4
+        with:
+          node-version: 20
+
+      - name: Install pnpm
+        run: npm install -g pnpm
+
+      - name: Cache dependencies
+        uses: actions/cache@v4
+        with:
+          path: ~/.pnpm-store
+          key: ${{ runner.os }}-pnpm-${{ hashFiles('**/pnpm-lock.yaml') }}
+          restore-keys: |
+            ${{ runner.os }}-pnpm-
+
+      - name: Install dependencies
+        run: pnpm install --frozen-lockfile
+
+      - name: Lint
+        run: pnpm run lint:strict
+    
+  prettier:
+    name: Prettier
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout repo
+        uses: actions/checkout@v4
+
+      - name: Setup node
+        uses: actions/setup-node@v4
+        with:
+          node-version: 20
+
+      - name: Install pnpm
+        run: npm install -g pnpm
+
+      - name: Cache dependencies
+        uses: actions/cache@v4
+        with:
+          path: ~/.pnpm-store
+          key: ${{ runner.os }}-pnpm-${{ hashFiles('**/pnpm-lock.yaml') }}
+          restore-keys: |
+            ${{ runner.os }}-pnpm-
+
+      - name: Install dependencies
+        run: pnpm install --frozen-lockfile
+
+      - name: Prettier check
+        run: npm run format:check

package/.github/example/workflows/job.pr-name.yml

@@ -0,0 +1,70 @@
+name: "PR Title Format Check"
+
+on:
+  pull_request_target:
+    types:
+      - opened
+      - edited
+      - synchronize
+      - reopened
+  pull_request:
+    types:
+      - opened
+      - edited
+      - synchronize
+      - reopened
+
+permissions:
+  pull-requests: read
+
+jobs:
+  main:
+    name: Validate PR title
+    runs-on: ubuntu-latest
+    steps:
+      - uses: amannn/action-semantic-pull-request@v5
+        id: lint_pr_title
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        with:
+          # Configure which types are allowed (newline-delimited).
+          # Default: https://github.com/commitizen/conventional-commit-types
+          types: |
+            fix
+            feat
+            docs
+            style
+            chore
+            refactor
+            perf
+            test
+            ci
+            build
+            revert
+            major
+          requireScope: false
+
+
+      - uses: marocchino/sticky-pull-request-comment@v2
+        # When the previous steps fails, the workflow would stop. By adding this
+        # condition you can continue the execution with the populated error message.
+        if: always() && (steps.lint_pr_title.outputs.error_message != null)
+        with:
+          header: pr-title-lint-error
+          message: |
+            Hey there and thank you for opening this pull request! 👋🏼
+            
+            We require pull request titles to follow the [Conventional Commits specification](https://www.conventionalcommits.org/en/v1.0.0/) and it looks like your proposed title needs to be adjusted.
+
+            Details:
+            
+            ```
+            ${{ steps.lint_pr_title.outputs.error_message }}
+            ```
+
+      # Delete a previous comment when the issue has been resolved
+      - if: ${{ steps.lint_pr_title.outputs.error_message == null }}
+        uses: marocchino/sticky-pull-request-comment@v2
+        with:   
+          header: pr-title-lint-error
+          delete: true

package/.github/example/workflows/job.pr-squash-name.yml

@@ -0,0 +1,27 @@
+name: Enforce PR Title as Commit Message
+
+on:
+  pull_request:
+    types: [closed]
+
+jobs:
+  enforce-squash-message:
+    if: github.event.pull_request.merged == true && github.event.pull_request.merge_commit_sha != null
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Check squash commit message
+        run: |
+          TITLE="${{ github.event.pull_request.title }}"
+          SHA="${{ github.event.pull_request.merge_commit_sha }}"
+          MESSAGE=$(git log -1 --pretty=%B $SHA)
+
+          echo "PR Title: $TITLE"
+          echo "Squash Commit Message: $MESSAGE"
+
+          if [[ "$MESSAGE" != "$TITLE" ]]; then
+            echo "❌ Commit message does not match PR title!"
+            exit 1
+          fi