static-pages/.github/workflows/test.yml

name: Test
on:
  workflow_dispatch:
  pull_request:
  push:
    branches: [main]

concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

env:
  MISE_TRUSTED_CONFIG_PATHS: ${{ github.workspace }}/.mise/config.toml

jobs:
  test:
    name: Test
    runs-on: ubuntu-latest
    steps:
      - name: Checkout code
        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
        with:
          persist-credentials: false

      - id: token
        uses: immich-app/devtools/actions/create-workflow-token@df46d635b905e618b88fc4c95baa920aeb30b309 # create-workflow-token-action-v3.0.1
        with:
          client-id: ${{ secrets.PUSH_O_MATIC_APP_CLIENT_ID }}
          private-key: ${{ secrets.PUSH_O_MATIC_APP_KEY }}
          permission-contents: read

      - name: Setup Mise
        uses: immich-app/devtools/actions/use-mise@06a9ef925332c91be647d6256642b86b398592c8 # use-mise-action-v3.2.1
        with:
          github_token: ${{ steps.token.outputs.token }}

      - name: Get pnpm store directory
        id: pnpm-store
        run: echo "path=$(pnpm store path --silent)" >> "$GITHUB_OUTPUT"

      - name: Cache pnpm store
        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
        with:
          path: ${{ steps.pnpm-store.outputs.path }}
          key: ${{ runner.os }}-pnpm-store-${{ hashFiles('pnpm-lock.yaml') }}
          restore-keys: |
            ${{ runner.os }}-pnpm-store-

      - name: Run install
        run: pnpm install --frozen-lockfile

      - name: Build packages
        run: pnpm build:packages

      - name: Run sync
        run: pnpm sync
        if: ${{ !cancelled() }}

      - name: Type check
        run: pnpm check
        if: ${{ !cancelled() }}

      - name: Run linter
        run: pnpm lint
        if: ${{ !cancelled() }}

      - name: Run formatter
        run: pnpm format
        if: ${{ !cancelled() }}

      - name: Run unit tests
        run: pnpm test
        if: ${{ !cancelled() }}

      - name: Run medium tests
        run: pnpm test:medium
        if: ${{ !cancelled() }}

  survey-e2e:
    name: Test (survey e2e)
    runs-on: ubuntu-latest
    defaults:
      run:
        working-directory: apps/survey.immich.app
    steps:
      - name: Checkout code
        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
        with:
          persist-credentials: false

      - id: token
        uses: immich-app/devtools/actions/create-workflow-token@df46d635b905e618b88fc4c95baa920aeb30b309 # create-workflow-token-action-v3.0.1
        with:
          client-id: ${{ secrets.PUSH_O_MATIC_APP_CLIENT_ID }}
          private-key: ${{ secrets.PUSH_O_MATIC_APP_KEY }}
          permission-contents: read

      - name: Setup Mise
        uses: immich-app/devtools/actions/use-mise@06a9ef925332c91be647d6256642b86b398592c8 # use-mise-action-v3.2.1
        with:
          github_token: ${{ steps.token.outputs.token }}

      - name: Get pnpm store directory
        id: pnpm-store
        run: echo "path=$(pnpm store path --silent)" >> "$GITHUB_OUTPUT"

      - name: Cache pnpm store
        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
        with:
          path: ${{ steps.pnpm-store.outputs.path }}
          key: ${{ runner.os }}-pnpm-store-${{ hashFiles('pnpm-lock.yaml') }}
          restore-keys: |
            ${{ runner.os }}-pnpm-store-

      - name: Run install
        run: pnpm install --frozen-lockfile

      - name: Install Playwright browsers
        run: pnpm exec playwright install --with-deps chromium
        if: ${{ !cancelled() }}

      - name: Start wrangler and Vite
        # Boot both servers in the background and wait for readiness. /api/auth/me
        # answers 200 once wrangler is up (with {authenticated:false}); match on
        # that so we don't race ahead of a still-starting server.
        if: ${{ !cancelled() }}
        run: |
          (cd backend && npx wrangler d1 migrations apply survey --local --config wrangler-dev.jsonc)
          (cd backend && npx wrangler dev --config wrangler-dev.jsonc --port 8787) &
          echo "WRANGLER_PID=$!" >> $GITHUB_ENV
          pnpm dev &
          echo "VITE_PID=$!" >> $GITHUB_ENV
          timeout 60 bash -c 'until [ "$(curl -s -o /dev/null -w "%{http_code}" http://localhost:8787/api/auth/me)" = "200" ]; do sleep 1; done'
          timeout 60 bash -c 'until curl -sf http://localhost:5173 >/dev/null 2>&1; do sleep 1; done'

      - name: Backend integration tests
        if: ${{ !cancelled() }}
        working-directory: apps/survey.immich.app/backend
        run: pnpm test:integration

      - name: E2E tests
        if: ${{ !cancelled() }}
        run: pnpm exec playwright test

      - name: Stop dev servers
        if: ${{ always() }}
        run: |
          if [ -n "${WRANGLER_PID:-}" ]; then kill "$WRANGLER_PID" 2>/dev/null || true; fi
          if [ -n "${VITE_PID:-}" ]; then kill "$VITE_PID" 2>/dev/null || true; fi

      - name: Upload Playwright report
        if: ${{ failure() }}
        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
        with:
          name: playwright-report
          path: apps/survey.immich.app/test-results/
          retention-days: 7