pi-ku/.github/workflows/ci.yml

name: CI

on:
  push:
    branches: [ main ]
  pull_request:
    branches: [ main ]

jobs:
  setup-environment:
    name: Generate Certificates
    runs-on: ubuntu-latest
    outputs:
      cache-key: ${{ steps.cert-key.outputs.key }}
    steps:
      - uses: actions/checkout@v4
      - name: Generate SSL Certificates
        run: |
          sudo apt-get update && sudo apt-get install -y mkcert libnss3-tools
          mkdir -p certs
          mkcert -install
          mkcert -cert-file certs/localhost.pem -key-file certs/localhost-key.pem localhost 127.0.0.1 ::1
          echo "cert_path=certs/localhost.pem" >> $GITHUB_OUTPUT
          echo "key_path=certs/localhost-key.pem" >> $GITHUB_OUTPUT

      - id: cert-key
        run: echo "key=${{ runner.os }}-certs-${{ github.sha }}" >> $GITHUB_OUTPUT

      - name: Cache certificates
        uses: actions/cache/save@v4
        with:
          path: certs
          key: ${{ runner.os }}-certs-${{ github.sha }}


  frontend:
    name: Frontend CI
    runs-on: ubuntu-latest
    needs: setup-environment
    defaults:
      run:
        working-directory: ./frontend
    steps:
      - uses: actions/checkout@v4
      - uses: oven-sh/setup-bun@v2
        with:
          bun-version: latest

      - name: Restore certificates
        uses: actions/cache/restore@v4
        with:
          path: certs
          key: certs-${{ github.sha }}

      - name: Install dependencies
        run: bun install --frozen-lockfile

      - name: Code Quality
        run: |
          cp ../.env.example ../.env
          bun run check

      - name: Type Check & Build
        run: bun run build

      - name: Unit Tests
        run: bun run test

  backend:
    name: Backend CI
    runs-on: ubuntu-latest
    needs: setup-environment
    defaults:
      run:
        working-directory: ./backend
    services:
      postgres:
        image: postgres:16-alpine
        env:
          POSTGRES_DB: piku
          POSTGRES_USER: user
          POSTGRES_PASSWORD: password123
        ports:
          - 5432:5432
        options: --health-cmd pg_isready --health-interval 10s --health-timeout 5s --health-retries 5
    steps:
      - uses: actions/checkout@v4
      - name: Install uv
        uses: astral-sh/setup-uv@v5
        with:
          enable-cache: true
          cache-dependency-glob: backend/uv.lock

      - name: Restore certificates
        uses: actions/cache/restore@v4
        with:
          path: certs
          key: ${{ runner.os }}-certs-${{ github.sha }}

      - name: Setup Environment
        run: |
          cp ../.env.example ../.env
          uv sync

      - name: Lint & Test
        run: |
          uv run ruff check
          uv run python manage.py test

  e2e:
    name: E2E Tests
    runs-on: ubuntu-latest
    needs: [frontend, backend, setup-environment]
    services:
      postgres:
        image: postgres:16-alpine
        env:
          POSTGRES_DB: piku_e2e
          POSTGRES_USER: piku_test
          POSTGRES_PASSWORD: piku_test
        ports:
          - 5433:5432
        options: --health-cmd pg_isready --health-interval 10s --health-timeout 5s --health-retries 5
      mailpit:
        image: axllent/mailpit:latest
        ports:
          - 8025:8025
          - 1025:1025
    steps:
      - uses: actions/checkout@v4

      - name: Restore Certificates
        uses: actions/cache/restore@v4
        with:
          path: certs
          key: certs-${{ github.sha }}

      - name: Setup Tools
        uses: astral-sh/setup-uv@v5

      - uses: oven-sh/setup-bun@v2
        with:
          bun-version: latest

      - name: Install Dependencies
        run: |
          cd frontend && bun install
          cd frontend && bun x playwright install --with-deps

      - name: Run E2E
        run: |
          cp .env.e2e.example .env.e2e
          chmod +x ./scripts/run-e2e.sh
          ./scripts/run-e2e.sh
        env:
          CI: "true"

      - name: Upload Playwright Report
        if: always()
        uses: actions/upload-artifact@v4
        with:
          name: playwright-report
          path: frontend/playwright-report/
          retention-days: 10