hrm/.github/workflows/pr-quality.yml at 4c5530cee87383014b1f881e82878c6191e406c6 · arii/hrm · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
name: PR Quality Gate

on:
  pull_request:
    branches: [ "leader" ]
  workflow_dispatch:
    inputs:
      branch:
        description: 'Branch to check'
        required: true
        default: 'leader'

concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

env:
  FORCE_COLOR: 1
  # Browsers are installed INSIDE the workspace so they persist with clean: false
  PLAYWRIGHT_BROWSERS_PATH: ${{ github.workspace }}/.cache/ms-playwright

jobs:
  # ===========================================================================
  # JOB 1: INFRASTRUCTURE SETUP (The "Clean Slate")
  # Wipes workspace, installs deps, and prepares the environment for all jobs.
  # ===========================================================================
  infra-setup:
    name: 🏗️ Infra Setup
    runs-on: self-hosted
    timeout-minutes: 10
    steps:
      - name: Checkout
        uses: actions/checkout@v4
        with:
          ref: ${{ inputs.branch || github.ref }}
          fetch-depth: 0
          clean: true  # 🧹 Wipes previous run artifacts to ensure a fresh start

      # --- GLOBAL PERSISTENCE CONFIG ---
      - name: Install pnpm
        uses: pnpm/action-setup@v4
        with:
          run_install: false

      - name: Configure Persistent Store
        shell: bash
        run: |
          mkdir -p ~/.local/share/pnpm/store
          pnpm config set store-dir ~/.local/share/pnpm/store
          pnpm config set side-effects-cache true

      - name: Setup Node.js
        uses: actions/setup-node@v4
        with:
          node-version: "20.x"
      # ---------------------------------

      - name: Create Runtime Envs
        run: |
          mkdir -p logs
          echo "NEXTAUTH_URL=http://127.0.0.1:3000" > .env.local
          echo "NEXTAUTH_SECRET=ci-secret" >> .env.local

      - name: Run Setup Script
        run: |
          chmod +x ./scripts/setup.sh
          ./scripts/setup.sh
        # This installs dependencies into ./node_modules

      - name: Install Playwright (Binary Only)
        run: pnpm exec playwright install chromium
        # Installs into ./.cache/ms-playwright (inside workspace)

  # ===========================================================================
  # JOB 2: QUALITY CHECKS
  # Reuses the workspace from Job 1 (No re-install needed)
  # ===========================================================================
  quality-check:
    name: 🛡️ Quality Check
    needs: infra-setup
    runs-on: self-hosted
    timeout-minutes: 10
    steps:
      - uses: actions/checkout@v4
        with:
          ref: ${{ inputs.branch || github.ref }}
          clean: false  # ⚡ KEEP WORKSPACE (Preserves node_modules & browsers)

      # We still set up pnpm/node just to ensure the binaries are in PATH
      - uses: pnpm/action-setup@v4
        with: { run_install: false }
      - uses: actions/setup-node@v4
        with: { node-version: "20.x" }

      - name: Lint Code
        run: pnpm run lint

      - name: Verify Build
        run: pnpm run build

  # ===========================================================================
  # JOB 3: CORE LOGIC TESTS
  # Reuses workspace. Runs functional tests.
  # ===========================================================================
  core-tests:
    name: 🧪 Core Logic
    needs: quality-check
    runs-on: self-hosted
    timeout-minutes: 15
    steps:
      - uses: actions/checkout@v4
        with:
          ref: ${{ inputs.branch || github.ref }}
          clean: false  # ⚡ KEEP WORKSPACE

      - uses: pnpm/action-setup@v4
        with: { run_install: false }
      - uses: actions/setup-node@v4
        with: { node-version: "20.x" }

      - name: Configure Envs
        run: |
          # Re-write envs just in case, but folder is persisted
          echo "NEXTAUTH_URL=http://127.0.0.1:3000" > .env.local
          echo "NEXTAUTH_SECRET=ci-secret" >> .env.local

      - name: Run Infra Tests
        run: pnpm run test:infra

      - name: Run Unit Tests
        run: pnpm run test:unit

  # ===========================================================================
  # JOB 4: VISUAL REGRESSION TESTS
  # Reuses workspace. Runs visual tests.
  # ===========================================================================
  visual-tests:
    name: 🎨 Visual Regression
    needs: core-tests
    runs-on: self-hosted
    timeout-minutes: 15
    steps:
      - uses: actions/checkout@v4
        with:
          ref: ${{ inputs.branch || github.ref }}
          clean: false  # ⚡ KEEP WORKSPACE

      - uses: pnpm/action-setup@v4
        with: { run_install: false }
      - uses: actions/setup-node@v4
        with: { node-version: "20.x" }

      - name: Configure Envs
        run: |
          echo "NEXTAUTH_URL=http://127.0.0.1:3000" > .env.local
          echo "NEXTAUTH_SECRET=ci-secret" >> .env.local

      - name: Run Visual Tests
        run: pnpm run test:json

      - name: Upload Report on Failure
        if: failure()
        uses: actions/upload-artifact@v4
        with:
          name: playwright-report-visual
          path: playwright-report/
          retention-days: 5