Turso + Drizzle マイグレーション運用ガイド：Vercel Hobby プラン対応

npx drizzle-kit generate  # マイグレーションファイル生成
npx drizzle-kit migrate   # マイグレーション適用

# Production グループの作成（本番専用）
turso group create production --location nrt

# Preview グループの作成（Staging + Feature ブランチ用）
turso group create preview --location nrt

# データベースの作成
turso db create linto-prod --group production
turso db create linto-staging --group preview

# Production 用トークン（本番 DB 専用）
turso db tokens create linto-prod --expiration none

# Preview グループトークン（Staging + Feature DB 用）
turso group tokens create preview

# Platform API 用トークン（GitHub Actions での DB 作成/削除用）
turso auth api-tokens mint github-actions

{
  "$schema": "https://openapi.vercel.sh/vercel.json",
  "git": {
    "deploymentEnabled": {
      "main": true,
      "develop": true,
      "issue-*": false
    }
  }
}

{
  "key": "TURSO_DATABASE_URL",
  "value": "libsql://linto-issue-1-org.turso.io",
  "target": ["preview"],
  "gitBranch": "issue-1"
}

import { betterAuth } from "better-auth";
import { drizzleAdapter } from "better-auth/adapters/drizzle";
import { oAuthProxy } from "better-auth/plugins";
import { db } from "@/db";
import { env } from "@/env";

export const auth = betterAuth({
  baseURL: env.BETTER_AUTH_URL,
  database: drizzleAdapter(db, {
    provider: "sqlite",
  }),
  plugins: [
    oAuthProxy({
      // Production 環境の URL（Google に登録した redirect URI のベース）
      productionURL: "https://linto-dev.vercel.app",
    }),
  ],
  socialProviders: {
    google: {
      clientId: env.GOOGLE_CLIENT_ID,
      clientSecret: env.GOOGLE_CLIENT_SECRET,
      // redirect URI を明示的に Production に設定
      redirectURI: "https://linto-dev.vercel.app/api/auth/callback/google",
    },
  },
});

export type Auth = typeof auth;
export type Session = typeof auth.$Infer.Session;

https://linto-dev.vercel.app/api/auth/callback/google

// src/env.ts
export const env = createEnv({
  server: {
    // Vercel では VERCEL_URL から自動構築、ローカルでは明示的に設定
    BETTER_AUTH_URL: z.string().url().default(
      process.env.VERCEL_URL
        ? `https://${process.env.VERCEL_URL}`
        : "http://localhost:3000"
    ),
    // ...
  },
});

name: Preview Deploy

on:
  pull_request:
    types: [opened, reopened, synchronize]
    branches: [develop]

env:
  VERCEL_ORG_ID: ${{ secrets.VERCEL_ORG_ID }}
  VERCEL_PROJECT_ID: ${{ secrets.VERCEL_PROJECT_ID }}

jobs:
  deploy-preview:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Setup Node.js
        uses: actions/setup-node@v4
        with:
          node-version: "20"
          cache: "npm"

      - name: Install dependencies
        run: npm ci

      - name: Install Turso CLI
        run: curl -sSfL https://get.tur.so/install.sh | bash

      - name: Install Vercel CLI
        run: npm install -g vercel@latest

      # ========================================
      # Step 1: データベースの作成（初回のみ）
      # ========================================
      - name: Generate DB name from branch
        id: db_name
        run: |
          BRANCH="${{ github.head_ref }}"
          DB_NAME="linto-$(echo "$BRANCH" | tr '[:upper:]' '[:lower:]' | tr -cd '[:alnum:]-' | cut -c 1-32)"
          echo "name=$DB_NAME" >> $GITHUB_OUTPUT

      - name: Check if database exists
        id: db_check
        env:
          TURSO_API_TOKEN: ${{ secrets.TURSO_API_TOKEN }}
        run: |
          if ~/.turso/turso db show ${{ steps.db_name.outputs.name }} > /dev/null 2>&1; then
            echo "exists=true" >> $GITHUB_OUTPUT
          else
            echo "exists=false" >> $GITHUB_OUTPUT
          fi

      - name: Create Preview Database (branched from staging)
        if: steps.db_check.outputs.exists == 'false'
        env:
          TURSO_API_TOKEN: ${{ secrets.TURSO_API_TOKEN }}
        run: |
          ~/.turso/turso db create ${{ steps.db_name.outputs.name }} \
            --from-db linto-staging \
            --group preview

      - name: Get Preview Database URL
        id: db_url
        env:
          TURSO_API_TOKEN: ${{ secrets.TURSO_API_TOKEN }}
        run: |
          DB_URL=$(~/.turso/turso db show ${{ steps.db_name.outputs.name }} --url)
          echo "url=$DB_URL" >> $GITHUB_OUTPUT

      # ========================================
      # Step 2: マイグレーションの適用
      # ========================================
      - name: Apply migrations
        env:
          TURSO_DATABASE_URL: ${{ steps.db_url.outputs.url }}
          TURSO_AUTH_TOKEN: ${{ secrets.TURSO_GROUP_TOKEN }}
        run: npx drizzle-kit migrate

      # ========================================
      # Step 3: Vercel 環境変数の設定
      # ========================================
      - name: Set Vercel environment variable for branch
        env:
          VERCEL_TOKEN: ${{ secrets.VERCEL_TOKEN }}
        run: |
          curl -X POST "https://api.vercel.com/v10/projects/$VERCEL_PROJECT_ID/env?upsert=true" \
            -H "Authorization: Bearer $VERCEL_TOKEN" \
            -H "Content-Type: application/json" \
            -d '{
              "key": "TURSO_DATABASE_URL",
              "value": "${{ steps.db_url.outputs.url }}",
              "type": "encrypted",
              "target": ["preview"],
              "gitBranch": "${{ github.head_ref }}"
            }'

      # ========================================
      # Step 4: Vercel CLI でビルド & デプロイ
      # ========================================
      - name: Pull Vercel Environment
        run: vercel pull --yes --environment=preview --git-branch=${{ github.head_ref }} --token=${{ secrets.VERCEL_TOKEN }}

      - name: Build Project
        run: vercel build --token=${{ secrets.VERCEL_TOKEN }}
        env:
          TURSO_DATABASE_URL: ${{ steps.db_url.outputs.url }}
          TURSO_AUTH_TOKEN: ${{ secrets.TURSO_GROUP_TOKEN }}

      - name: Deploy to Vercel
        id: deploy
        run: |
          DEPLOY_URL=$(vercel deploy --prebuilt --token=${{ secrets.VERCEL_TOKEN }})
          echo "url=$DEPLOY_URL" >> $GITHUB_OUTPUT

      # ========================================
      # Step 5: PR にコメント
      # ========================================
      - name: Comment PR with deployment info
        if: github.event.action == 'opened'
        uses: actions/github-script@v7
        with:
          script: |
            github.rest.issues.createComment({
              issue_number: context.issue.number,
              owner: context.repo.owner,
              repo: context.repo.repo,
              body: `## 🚀 Preview Deployed

              | Item | Value |
              |------|-------|
              | Preview URL | ${{ steps.deploy.outputs.url }} |
              | Database | \`${{ steps.db_name.outputs.name }}\` |
              | Branch | \`${{ github.head_ref }}\` |

              ✅ Database created from \`linto-staging\`
              ✅ Migrations applied
              ✅ Deployed with correct environment variables

              **Note**: Database will be deleted when PR is closed.
              `
            })

name: Delete Preview Database

on:
  pull_request:
    types: [closed]
    branches: [develop]

jobs:
  delete-preview-db:
    runs-on: ubuntu-latest
    steps:
      - name: Install Turso CLI
        run: curl -sSfL https://get.tur.so/install.sh | bash

      - name: Generate DB name from branch
        id: db_name
        run: |
          BRANCH="${{ github.head_ref }}"
          DB_NAME="linto-$(echo "$BRANCH" | tr '[:upper:]' '[:lower:]' | tr -cd '[:alnum:]-' | cut -c 1-32)"
          echo "name=$DB_NAME" >> $GITHUB_OUTPUT

      - name: Delete Preview Database
        env:
          TURSO_API_TOKEN: ${{ secrets.TURSO_API_TOKEN }}
        run: |
          ~/.turso/turso db destroy ${{ steps.db_name.outputs.name }} --yes || true

      - name: Get Vercel environment variable ID
        id: env_id
        env:
          VERCEL_TOKEN: ${{ secrets.VERCEL_TOKEN }}
          VERCEL_PROJECT_ID: ${{ secrets.VERCEL_PROJECT_ID }}
          VERCEL_TEAM_ID: ${{ secrets.VERCEL_TEAM_ID }}
          BRANCH_NAME: ${{ github.head_ref }}
        run: |
          TEAM_PARAM=""
          if [ -n "$VERCEL_TEAM_ID" ]; then
            TEAM_PARAM="?teamId=$VERCEL_TEAM_ID"
          fi

          # ブランチ固有の環境変数を検索
          # 注意: jq 内で環境変数を使用するため --arg を使用
          ENV_ID=$(curl -s "https://api.vercel.com/v9/projects/$VERCEL_PROJECT_ID/env$TEAM_PARAM" \
            -H "Authorization: Bearer $VERCEL_TOKEN" \
            | jq -r --arg branch "$BRANCH_NAME" '.envs[] | select(.key == "TURSO_DATABASE_URL" and .gitBranch == $branch) | .id')

          echo "id=$ENV_ID" >> $GITHUB_OUTPUT

      - name: Delete Vercel environment variable
        if: steps.env_id.outputs.id != ''
        env:
          VERCEL_TOKEN: ${{ secrets.VERCEL_TOKEN }}
          VERCEL_PROJECT_ID: ${{ secrets.VERCEL_PROJECT_ID }}
          VERCEL_TEAM_ID: ${{ secrets.VERCEL_TEAM_ID }}
        run: |
          TEAM_PARAM=""
          if [ -n "$VERCEL_TEAM_ID" ]; then
            TEAM_PARAM="?teamId=$VERCEL_TEAM_ID"
          fi

          curl -X DELETE "https://api.vercel.com/v9/projects/$VERCEL_PROJECT_ID/env/${{ steps.env_id.outputs.id }}$TEAM_PARAM" \
            -H "Authorization: Bearer $VERCEL_TOKEN"

          echo "Vercel environment variable deleted for branch: ${{ github.head_ref }}"

      - name: Comment PR
        uses: actions/github-script@v7
        with:
          script: |
            github.rest.issues.createComment({
              issue_number: context.issue.number,
              owner: context.repo.owner,
              repo: context.repo.repo,
              body: `## Preview Database Deleted

              The preview database \`${{ steps.db_name.outputs.name }}\` and its Vercel environment variable have been deleted.
              `
            })

name: Staging Migration

on:
  push:
    branches: [develop]
    paths:
      - "src/db/schema/**"
      - "drizzle/**"

jobs:
  migrate-staging:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Setup Node.js
        uses: actions/setup-node@v4
        with:
          node-version: "20"
          cache: "npm"

      - name: Install dependencies
        run: npm ci

      - name: Run migrations on Staging
        env:
          TURSO_DATABASE_URL: ${{ secrets.TURSO_STAGING_DB_URL }}
          TURSO_AUTH_TOKEN: ${{ secrets.TURSO_GROUP_TOKEN }}
        run: npx drizzle-kit migrate

      - name: Notify success
        if: success()
        run: echo "Staging migration completed successfully"

name: Production Migration

on:
  workflow_dispatch:
    inputs:
      confirm:
        description: 'Type "migrate-production" to confirm'
        required: true
        type: string
      dry_run:
        description: "Dry run (show pending migrations without applying)"
        required: false
        type: boolean
        default: true

jobs:
  validate:
    runs-on: ubuntu-latest
    steps:
      - name: Validate confirmation
        if: github.event.inputs.confirm != 'migrate-production'
        run: |
          echo "::error::Confirmation text does not match. Please type 'migrate-production' to proceed."
          exit 1

  migrate-production:
    needs: validate
    runs-on: ubuntu-latest
    environment: production
    steps:
      - name: Checkout
        uses: actions/checkout@v4
        with:
          ref: main

      - name: Setup Node.js
        uses: actions/setup-node@v4
        with:
          node-version: "20"
          cache: "npm"

      - name: Install dependencies
        run: npm ci

      - name: Check pending migrations
        env:
          TURSO_DATABASE_URL: ${{ secrets.TURSO_PROD_DB_URL }}
          TURSO_AUTH_TOKEN: ${{ secrets.TURSO_PROD_DB_TOKEN }}
        run: |
          echo "Checking for pending migrations..."
          npx drizzle-kit check

      - name: Show pending migrations (if dry run)
        if: github.event.inputs.dry_run == 'true'
        run: |
          echo "=== DRY RUN MODE ==="
          echo "Pending migration files:"
          ls -la drizzle/*.sql 2>/dev/null || echo "No migration files found"
          echo ""
          echo "Migration journal:"
          cat drizzle/meta/_journal.json 2>/dev/null || echo "No journal found"
          echo "=== END DRY RUN ==="

      - name: Run migrations on Production
        if: github.event.inputs.dry_run == 'false'
        env:
          TURSO_DATABASE_URL: ${{ secrets.TURSO_PROD_DB_URL }}
          TURSO_AUTH_TOKEN: ${{ secrets.TURSO_PROD_DB_TOKEN }}
        run: |
          echo "Running production migrations..."
          npx drizzle-kit migrate

{
  "key": "TURSO_DATABASE_URL",
  "value": "libsql://linto-issue-1-org.turso.io",
  "type": "encrypted",
  "target": ["preview"],
  "gitBranch": "issue-1"
}

# マイグレーションファイルの生成
npx drizzle-kit generate

# 生成されたファイルを確認
ls drizzle/

# コミットに含める
git add drizzle/
git commit -m "Add migration: add user profile fields"

// 1. アプリケーションコードから該当カラムの参照を削除
// 2. デプロイ

// 3. カラム削除のマイグレーションを実行

-- drizzle/0001_add_profile.sql
ALTER TABLE users ADD COLUMN profile_image TEXT;

-- drizzle/0001_add_profile_rollback.sql (手動で作成)
ALTER TABLE users DROP COLUMN profile_image;

# production-migration.yml に追加
- name: Create backup before migration
  env:
    TURSO_API_TOKEN: ${{ secrets.TURSO_API_TOKEN }}
  run: |
    BACKUP_NAME="linto-prod-backup-$(date +%Y%m%d-%H%M%S)"
    # バックアップは preview グループに作成（本番トークンのスコープを限定）
    ~/.turso/turso db create $BACKUP_NAME --from-db linto-prod --group preview
    echo "Backup created: $BACKUP_NAME"