(cache)marumie/.github/workflows/ci.yml at develop · team-mirai/marumie · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
name: CI

on:
  pull_request:
    paths:
      - 'admin/**'
      - 'webapp/**'
      - 'packages/**'
      - 'prisma/**'
      - '.dependency-cruiser.cjs'
      - 'pnpm-lock.yaml'
      - '.github/workflows/**'

env:
  # Supabase local development defaults
  # Note: SUPABASE_ANON_KEY and SUPABASE_SERVICE_ROLE_KEY are now dynamically generated
  # by Supabase CLI and will be extracted after `supabase start` in the e2e job
  SUPABASE_URL: http://127.0.0.1:54321
  # Note: CI uses default Supabase ports (54321 for API, 54322 for DB)
  # Local development may use different ports - check supabase/config.toml
  DATABASE_URL: postgresql://postgres:postgres@127.0.0.1:54322/postgres
  DIRECT_URL: postgresql://postgres:postgres@127.0.0.1:54322/postgres

jobs:
  admin:
    runs-on: ubuntu-latest

    steps:
      - name: Checkout code
        uses: actions/checkout@v6

      - name: Setup pnpm
        uses: pnpm/action-setup@v4

      - name: Setup Node.js
        uses: actions/setup-node@v6
        with:
          node-version: '24'
          cache: 'pnpm'

      - name: Cache Prisma client
        uses: actions/cache@v5
        with:
          path: node_modules/.prisma
          key: ${{ runner.os }}-prisma-${{ hashFiles('prisma/schema.prisma') }}
          restore-keys: |
            ${{ runner.os }}-prisma-

      - name: Install dependencies
        run: pnpm install

      - name: Run lint for admin
        run: pnpm --filter admin run lint

      - name: Run tests for admin with coverage
        run: pnpm --filter admin run test:coverage

      - name: Run type check for admin
        run: pnpm --filter admin run type-check

      - name: Check dependency rules for admin
        run: pnpm depcruise

      - name: Upload admin coverage
        uses: actions/upload-artifact@v6
        with:
          name: admin-coverage
          path: admin/coverage/lcov.info

  webapp:
    runs-on: ubuntu-latest

    services:
      postgres:
        image: postgres:18
        env:
          POSTGRES_USER: postgres
          POSTGRES_PASSWORD: postgres
          POSTGRES_DB: test
        ports:
          - 5432:5432
        options: >-
          --health-cmd pg_isready
          --health-interval 10s
          --health-timeout 5s
          --health-retries 5

    env:
      DATABASE_URL: postgresql://postgres:postgres@localhost:5432/test
      DIRECT_URL: postgresql://postgres:postgres@localhost:5432/test

    steps:
      - name: Checkout code
        uses: actions/checkout@v6

      - name: Setup pnpm
        uses: pnpm/action-setup@v4

      - name: Setup Node.js
        uses: actions/setup-node@v6
        with:
          node-version: '24'
          cache: 'pnpm'

      - name: Cache Prisma client
        uses: actions/cache@v5
        with:
          path: node_modules/.prisma
          key: ${{ runner.os }}-prisma-${{ hashFiles('prisma/schema.prisma') }}
          restore-keys: |
            ${{ runner.os }}-prisma-

      - name: Cache Next.js build
        uses: actions/cache@v5
        with:
          path: webapp/.next/cache
          key: ${{ runner.os }}-nextjs-webapp-${{ hashFiles('pnpm-lock.yaml') }}-${{ hashFiles('webapp/**/*.ts', 'webapp/**/*.tsx') }}
          restore-keys: |
            ${{ runner.os }}-nextjs-webapp-${{ hashFiles('pnpm-lock.yaml') }}-
            ${{ runner.os }}-nextjs-webapp-

      - name: Install dependencies
        run: pnpm install

      - name: Run lint for webapp
        run: pnpm --filter webapp run lint

      - name: Run tests for webapp with coverage
        run: pnpm --filter webapp run test:coverage

      - name: Run type check for webapp
        run: pnpm --filter webapp run type-check

      - name: Upload webapp coverage
        uses: actions/upload-artifact@v6
        with:
          name: webapp-coverage
          path: webapp/coverage/lcov.info

  knip:
    runs-on: ubuntu-latest

    steps:
      - name: Checkout code
        uses: actions/checkout@v6

      - name: Setup pnpm
        uses: pnpm/action-setup@v4

      - name: Setup Node.js
        uses: actions/setup-node@v6
        with:
          node-version: '24'
          cache: 'pnpm'

      - name: Install dependencies
        run: pnpm install

      - name: Check unused code
        run: pnpm knip

  coverage:
    runs-on: ubuntu-latest
    needs: [admin, webapp]

    steps:
      - name: Checkout code
        uses: actions/checkout@v6

      - name: Download admin coverage
        uses: actions/download-artifact@v7
        with:
          name: admin-coverage
          path: admin/coverage

      - name: Download webapp coverage
        uses: actions/download-artifact@v7
        with:
          name: webapp-coverage
          path: webapp/coverage

      - name: Upload coverage to Codecov
        uses: codecov/codecov-action@v5
        with:
          token: ${{ secrets.CODECOV_TOKEN }}
          files: ./admin/coverage/lcov.info,./webapp/coverage/lcov.info
          fail_ci_if_error: false

  e2e:
    runs-on: ubuntu-latest

    steps:
      - name: Checkout code
        uses: actions/checkout@v6

      - name: Setup pnpm
        uses: pnpm/action-setup@v4

      - name: Setup Node.js
        uses: actions/setup-node@v6
        with:
          node-version: '24'
          cache: 'pnpm'

      - name: Cache Prisma client
        uses: actions/cache@v5
        with:
          path: node_modules/.prisma
          key: ${{ runner.os }}-prisma-${{ hashFiles('prisma/schema.prisma') }}
          restore-keys: |
            ${{ runner.os }}-prisma-

      - name: Cache Next.js build (admin)
        uses: actions/cache@v5
        with:
          path: admin/.next/cache
          key: ${{ runner.os }}-nextjs-admin-${{ hashFiles('pnpm-lock.yaml') }}-${{ hashFiles('admin/**/*.ts', 'admin/**/*.tsx') }}
          restore-keys: |
            ${{ runner.os }}-nextjs-admin-${{ hashFiles('pnpm-lock.yaml') }}-
            ${{ runner.os }}-nextjs-admin-

      - name: Cache Next.js build (webapp)
        uses: actions/cache@v5
        with:
          path: webapp/.next/cache
          key: ${{ runner.os }}-nextjs-webapp-${{ hashFiles('pnpm-lock.yaml') }}-${{ hashFiles('webapp/**/*.ts', 'webapp/**/*.tsx') }}
          restore-keys: |
            ${{ runner.os }}-nextjs-webapp-${{ hashFiles('pnpm-lock.yaml') }}-
            ${{ runner.os }}-nextjs-webapp-

      - name: Cache Playwright browsers
        uses: actions/cache@v5
        with:
          path: ~/.cache/ms-playwright
          key: ${{ runner.os }}-playwright-${{ hashFiles('pnpm-lock.yaml') }}
          restore-keys: |
            ${{ runner.os }}-playwright-

      - name: Install dependencies
        run: pnpm install

      - name: Install Playwright browsers
        run: pnpm --filter admin exec playwright install chromium --with-deps

      - name: Setup Supabase CLI
        uses: supabase/setup-cli@v1
        with:
          version: latest

      - name: Generate Prisma Client
        run: pnpm db:generate

      - name: Start Supabase
        run: |
          # Enable API and use default ports for CI
          sed -i 's/^\[api\]$/[api]/' supabase/config.toml
          sed -i '/^\[api\]$/,/^\[/{s/^enabled = false$/enabled = true/}' supabase/config.toml
          sed -i 's/^port = 54332$/port = 54322/' supabase/config.toml

          # Start Supabase
          supabase start --exclude imgproxy,edge-runtime,vector,studio

          # Wait for Supabase API to be ready
          echo "Waiting for Supabase API..."
          timeout 60 bash -c 'until curl -s http://127.0.0.1:54321/rest/v1/ > /dev/null 2>&1; do sleep 2; done'
          echo "Supabase is ready"

      - name: Get Supabase keys
        id: supabase-keys
        run: |
          # Extract dynamic keys from Supabase CLI
          SUPABASE_STATUS=$(supabase status --output json)
          ANON_KEY=$(echo "$SUPABASE_STATUS" | jq -r '.ANON_KEY')
          SERVICE_ROLE_KEY=$(echo "$SUPABASE_STATUS" | jq -r '.SERVICE_ROLE_KEY')

          echo "SUPABASE_ANON_KEY=$ANON_KEY" >> $GITHUB_OUTPUT
          echo "SUPABASE_SERVICE_ROLE_KEY=$SERVICE_ROLE_KEY" >> $GITHUB_OUTPUT

          # Also set as environment variables for subsequent steps
          echo "SUPABASE_ANON_KEY=$ANON_KEY" >> $GITHUB_ENV
          echo "SUPABASE_SERVICE_ROLE_KEY=$SERVICE_ROLE_KEY" >> $GITHUB_ENV

      - name: Run database migrations and seed
        run: |
          pnpm db:migrate:deploy
          pnpm db:seed

      - name: Build admin
        run: pnpm build:admin
        env:
          NEXT_PUBLIC_SUPABASE_URL: ${{ env.SUPABASE_URL }}
          NEXT_PUBLIC_SUPABASE_ANON_KEY: ${{ steps.supabase-keys.outputs.SUPABASE_ANON_KEY }}

      - name: Build webapp
        run: pnpm build:webapp

      - name: Run E2E tests for admin
        run: pnpm --filter admin test:e2e
        env:
          NEXT_PUBLIC_SUPABASE_URL: ${{ env.SUPABASE_URL }}
          NEXT_PUBLIC_SUPABASE_ANON_KEY: ${{ steps.supabase-keys.outputs.SUPABASE_ANON_KEY }}

      - name: Run E2E tests for webapp
        run: pnpm --filter webapp test:e2e

      - name: Upload admin E2E test results
        uses: actions/upload-artifact@v6
        if: ${{ !cancelled() }}
        with:
          name: admin-e2e-report
          path: admin/e2e/.output/
          retention-days: 7

      - name: Upload webapp E2E test results
        uses: actions/upload-artifact@v6
        if: ${{ !cancelled() }}
        with:
          name: webapp-e2e-report
          path: webapp/e2e/.output/
          retention-days: 7