veza/.github/workflows/e2e.yml

name: E2E Playwright

# v1.0.8 Batch C — Playwright E2E suite triggered on PRs (@critical only,
# fast feedback) + push to main and nightly (full suite, deeper coverage).
# Uses the --ci seed flag (cmd/tools/seed --ci) for ~5s seeding instead
# of the ~60s minimal seed.

on:
    pull_request:
        branches: [main]
    push:
        branches: [main]
    schedule:
        # Nightly full run — 03:00 UTC keeps it off the daytime runner pool.
        - cron: "0 3 * * *"
    workflow_dispatch:

env:
    GIT_SSL_NO_VERIFY: "true"
    NODE_TLS_REJECT_UNAUTHORIZED: "0"
    # Forces playwright.config.ts:141,155 to spawn fresh backend + Vite
    # instead of reusing whatever is on the runner.
    CI: "true"

jobs:
    # ===========================================================================
    # Job: e2e — single matrix entry that selects the test scope per trigger.
    #   - PR              → @critical only (5-7min target)
    #   - push main / cron / dispatch → full suite (~25min target)
    # ===========================================================================
    e2e:
        name: e2e (${{ github.event_name == 'pull_request' && '@critical' || 'full' }})
        runs-on: ubuntu-latest
        timeout-minutes: ${{ github.event_name == 'pull_request' && 20 || 45 }}
        steps:
            - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2

            - name: Set up Node
              uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
              with:
                  node-version: "20"
                  cache: "npm"
                  cache-dependency-path: package-lock.json

            - name: Set up Go
              uses: actions/setup-go@f111f3307d8850f501ac008e886eec1fd1932a34 # v5.3.0
              with:
                  go-version: "1.25"
                  cache: true
                  cache-dependency-path: veza-backend-api/go.sum

            - name: Install dependencies
              run: npm ci

            # Playwright tests reach the frontend via http://veza.fr:5174,
            # which the browsers resolve via /etc/hosts. Without this entry
            # the navigation step times out.
            - name: Add veza.fr to hosts
              run: echo "127.0.0.1 veza.fr" | sudo tee -a /etc/hosts

            - name: Generate dev JWT keys + SSL cert
              run: |
                  ./scripts/generate-jwt-keys.sh
                  ./scripts/generate-ssl-cert.sh                  

            - name: Start backend services (Postgres, Redis, RabbitMQ)
              run: |
                  docker compose up -d postgres redis rabbitmq
                  echo "Waiting for Postgres..."
                  for i in $(seq 1 30); do
                    if docker exec veza_postgres pg_isready -U veza 2>/dev/null; then
                      echo "Postgres ready"
                      break
                    fi
                    sleep 2
                  done
                  docker compose ps                  

            - name: Run database migrations
              env:
                  DATABASE_URL: postgresql://veza:devpassword@localhost:15432/veza?sslmode=disable
              run: |
                  cd veza-backend-api
                  go run cmd/migrate_tool/main.go                  

            - name: Seed database (CI mode — 5 test accounts + minimal fixtures)
              env:
                  DATABASE_URL: postgresql://veza:devpassword@localhost:15432/veza?sslmode=disable
              run: |
                  cd veza-backend-api
                  go run ./cmd/tools/seed --ci                  

            - name: Build + start backend API
              env:
                  APP_ENV: test
                  APP_PORT: "18080"
                  DATABASE_URL: postgresql://veza:${{ secrets.E2E_DB_PASSWORD || 'devpassword' }}@localhost:15432/veza?sslmode=disable
                  REDIS_URL: redis://localhost:16379
                  JWT_SECRET: ${{ secrets.E2E_JWT_SECRET || 'ci-dev-jwt-secret-32-chars-min-padding!!' }}
                  COOKIE_SECURE: "false"
                  CORS_ALLOWED_ORIGINS: http://veza.fr:5174,http://localhost:5174
                  RABBITMQ_URL: ${{ secrets.E2E_RABBITMQ_URL || 'amqp://guest:guest@localhost:5672/' }}
                  DISABLE_RATE_LIMIT_FOR_TESTS: "true"
                  RATE_LIMIT_LIMIT: "10000"
                  RATE_LIMIT_WINDOW: "60"
                  ACCOUNT_LOCKOUT_EXEMPT_EMAILS: "user@veza.music,artist@veza.music,admin@veza.music,mod@veza.music,new@veza.music"
              run: |
                  cd veza-backend-api
                  go build -o veza-api ./cmd/api/main.go
                  ./veza-api > /tmp/backend.log 2>&1 &
                  sleep 10
                  curl -sf http://localhost:18080/api/v1/health > /tmp/health.json || (echo "Backend health check failed"; tail -50 /tmp/backend.log; exit 1)
                  jq -e '.status == "ok"' /tmp/health.json || (echo "Health response invalid"; cat /tmp/health.json; exit 1)
                  echo "Backend healthy"                  

            - name: Install Playwright browsers
              run: npx playwright install --with-deps chromium

            - name: Run E2E (@critical, PR scope)
              if: github.event_name == 'pull_request'
              env:
                  PORT: "5174"
                  VITE_API_URL: "/api/v1"
                  VITE_DOMAIN: veza.fr
                  VITE_BACKEND_PORT: "18080"
                  PLAYWRIGHT_BASE_URL: "http://localhost:5174"
              run: npm run e2e:critical

            - name: Run E2E (full, push/cron/dispatch)
              if: github.event_name != 'pull_request'
              env:
                  PORT: "5174"
                  VITE_API_URL: "/api/v1"
                  VITE_DOMAIN: veza.fr
                  VITE_BACKEND_PORT: "18080"
                  PLAYWRIGHT_BASE_URL: "http://localhost:5174"
              run: npm run e2e

            - name: Upload Playwright report
              if: failure()
              uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4.6.0
              with:
                  name: playwright-report-${{ github.run_id }}-${{ github.run_attempt }}
                  path: |
                      tests/e2e/playwright-report/
                      tests/e2e/test-results/                      
                  retention-days: 7

            - name: Upload backend log
              if: failure()
              uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4.6.0
              with:
                  name: backend-log-${{ github.run_id }}-${{ github.run_attempt }}
                  path: /tmp/backend.log
                  retention-days: 7