plex-playlist/.gitea/workflows/cicd-tests.yaml

name: CICD Tests

on:
  workflow_dispatch:
    inputs:
      head_sha:
        description: Commit SHA to process
        required: false
      source_workflow:
        description: Upstream workflow name
        required: false
      trace_id:
        description: Correlation id propagated across CICD dispatch chain
        required: false

env:
  GITEA_REGISTRY: kankali.darkhelm.lan:3001
  GITEA_REGISTRY_IP: 10.18.75.2
  GITEA_REGISTRY_HOST: kankali.darkhelm.lan

concurrency:
  group: tests-${{ github.sha }}
  cancel-in-progress: true

jobs:
  setup:
    name: Setup Tests Context
    # Prefer the generic ubuntu-latest label for better runner availability.
    runs-on: ubuntu-latest
    timeout-minutes: 8
    outputs:
      head_sha: ${{ steps.meta.outputs.head_sha }}
    steps:
      - name: Identify runner
        run: |
          echo "=== Runner Identity ==="
          echo "runner_name=${RUNNER_NAME:-}"
          echo "runner_name_hint=${GITEA_RUNNER_NAME:-${ACT_RUNNER_NAME:-${RUNNER_NAME:-unknown}}}"
          echo "runner_hostname_env=${HOSTNAME:-unknown}"
          echo "runner_uname_n=$(uname -n 2>/dev/null || echo unknown)"
          echo "runner_etc_hostname=$(cat /etc/hostname 2>/dev/null || echo unknown)"
          echo "runner_os=${RUNNER_OS:-unknown}"
          echo "runner_arch=${RUNNER_ARCH:-unknown}"
          echo "timestamp_utc=$(date -u +%Y-%m-%dT%H:%M:%SZ)"

      - name: Audit trigger context
        env:
          EVENT_NAME: ${{ github.event_name }}
          SOURCE_WORKFLOW: ${{ github.event.inputs.source_workflow }}
          HEAD_SHA_INPUT: ${{ github.event.inputs.head_sha }}
          HEAD_SHA_FALLBACK: ${{ github.sha }}
          REF: ${{ github.ref }}
          REF_NAME: ${{ github.ref_name }}
          HEAD_REF: ${{ github.head_ref }}
          TRACE_ID_INPUT: ${{ github.event.inputs.trace_id }}
        run: |
          RESOLVED_HEAD_SHA="${HEAD_SHA_INPUT:-${HEAD_SHA_FALLBACK}}"
          TRACE_ID="${TRACE_ID_INPUT:-cicd-tests-${GITHUB_RUN_ID}-${GITHUB_RUN_ATTEMPT}-${RESOLVED_HEAD_SHA:0:8}}"
          echo "=== Dispatch Audit: CICD Tests ==="
          echo "event_name=${EVENT_NAME}"
          echo "source_workflow=${SOURCE_WORKFLOW}"
          echo "head_sha_input=${HEAD_SHA_INPUT}"
          echo "head_sha=${RESOLVED_HEAD_SHA}"
          echo "ref=${REF}"
          echo "ref_name=${REF_NAME}"
          echo "head_ref=${HEAD_REF}"
          echo "trace_id=${TRACE_ID}"

      - name: Resolve head SHA
        id: meta
        env:
          HEAD_SHA_INPUT: ${{ github.event.inputs.head_sha }}
          HEAD_SHA_FALLBACK: ${{ github.sha }}
        run: |
          RESOLVED_HEAD_SHA="${HEAD_SHA_INPUT:-${HEAD_SHA_FALLBACK}}"
          echo "head_sha=${RESOLVED_HEAD_SHA}" >> "$GITHUB_OUTPUT"

  backend-tests:
    name: Backend Tests
    # Docker-capable 8GB runner required for stable container startup.
    runs-on: ubuntu-act-8gb
    timeout-minutes: 25
    needs: setup
    steps:
      - name: Identify runner
        run: |
          echo "=== Runner Identity ==="
          echo "runner_name=${RUNNER_NAME:-}"
          echo "runner_name_hint=${GITEA_RUNNER_NAME:-${ACT_RUNNER_NAME:-${RUNNER_NAME:-unknown}}}"
          echo "runner_hostname_env=${HOSTNAME:-unknown}"
          echo "runner_uname_n=$(uname -n 2>/dev/null || echo unknown)"
          echo "runner_etc_hostname=$(cat /etc/hostname 2>/dev/null || echo unknown)"
          echo "runner_os=${RUNNER_OS:-unknown}"
          echo "runner_arch=${RUNNER_ARCH:-unknown}"
          echo "timestamp_utc=$(date -u +%Y-%m-%dT%H:%M:%SZ)"

      - &configure_registry_host_step
        name: Configure registry host resolution
        run: |
          if ! grep -q "${GITEA_REGISTRY_HOST}" /etc/hosts; then
            echo "${GITEA_REGISTRY_IP} ${GITEA_REGISTRY_HOST}" >> /etc/hosts
          fi

      - &ensure_cicd_image_step
        name: Ensure CICD image is available
        env:
          HEAD_SHA: ${{ needs.setup.outputs.head_sha }}
        run: |
          IMAGE="${GITEA_REGISTRY}/darkhelm.org/plex-playlist-cicd:${HEAD_SHA}"
          if docker image inspect "${IMAGE}" >/dev/null 2>&1; then
            echo "Using cached CICD image: ${IMAGE}"
          else
            echo "${{ secrets.PACKAGE_ACCESS_TOKEN }}" | docker login "http://${GITEA_REGISTRY}" -u "${{ github.actor }}" --password-stdin
            pulled=false
            for i in 1 2 3; do
              echo "Pull attempt ${i}/3 for ${IMAGE}"
              if docker pull "${IMAGE}"; then
                pulled=true
                break
              fi
              if [ "${i}" -lt 3 ]; then
                sleep_seconds=$((5 * i))
                echo "Pull failed; retrying in ${sleep_seconds}s"
                sleep "${sleep_seconds}"
              fi
            done

            if [ "${pulled}" != "true" ]; then
              echo "❌ Failed to pull CICD image after 3 attempts: ${IMAGE}"
              exit 1
            fi
          fi

      - name: Run backend tests with coverage
        env:
          HEAD_SHA: ${{ needs.setup.outputs.head_sha }}
        run: |
          docker run --rm "${GITEA_REGISTRY}/darkhelm.org/plex-playlist-cicd:${HEAD_SHA}" bash -c "
            cd /workspace/backend &&
            source .venv/bin/activate &&
            uv run pytest -v --tb=short --cov=src --cov-report=term-missing --cov-fail-under=95
          "

  frontend-tests:
    name: Frontend Tests
    # Docker-capable 8GB runner required for stable container startup.
    runs-on: ubuntu-act-8gb
    timeout-minutes: 25
    needs: setup
    steps:
      - name: Identify runner
        run: |
          echo "=== Runner Identity ==="
          echo "runner_name=${RUNNER_NAME:-}"
          echo "runner_name_hint=${GITEA_RUNNER_NAME:-${ACT_RUNNER_NAME:-${RUNNER_NAME:-unknown}}}"
          echo "runner_hostname_env=${HOSTNAME:-unknown}"
          echo "runner_uname_n=$(uname -n 2>/dev/null || echo unknown)"
          echo "runner_etc_hostname=$(cat /etc/hostname 2>/dev/null || echo unknown)"
          echo "runner_os=${RUNNER_OS:-unknown}"
          echo "runner_arch=${RUNNER_ARCH:-unknown}"
          echo "timestamp_utc=$(date -u +%Y-%m-%dT%H:%M:%SZ)"

      - *configure_registry_host_step
      - *ensure_cicd_image_step
      - name: Run frontend tests with coverage
        env:
          HEAD_SHA: ${{ needs.setup.outputs.head_sha }}
        run: |
          docker run --rm "${GITEA_REGISTRY}/darkhelm.org/plex-playlist-cicd:${HEAD_SHA}" bash -c "
            cd /workspace/frontend &&
            yarn test:coverage --run --reporter=verbose --coverage.reporter=text --coverage.reporter=text-summary --coverage.thresholds.lines=85 --coverage.thresholds.functions=85 --coverage.thresholds.branches=85 --coverage.thresholds.statements=85
          "

  xdoctest:
    name: Backend Doctests
    # Docker-capable 8GB runner required for stable container startup.
    runs-on: ubuntu-act-8gb
    timeout-minutes: 15
    needs: setup
    steps:
      - name: Identify runner
        run: |
          echo "=== Runner Identity ==="
          echo "runner_name=${RUNNER_NAME:-}"
          echo "runner_name_hint=${GITEA_RUNNER_NAME:-${ACT_RUNNER_NAME:-${RUNNER_NAME:-unknown}}}"
          echo "runner_hostname_env=${HOSTNAME:-unknown}"
          echo "runner_uname_n=$(uname -n 2>/dev/null || echo unknown)"
          echo "runner_etc_hostname=$(cat /etc/hostname 2>/dev/null || echo unknown)"
          echo "runner_os=${RUNNER_OS:-unknown}"
          echo "runner_arch=${RUNNER_ARCH:-unknown}"
          echo "timestamp_utc=$(date -u +%Y-%m-%dT%H:%M:%SZ)"

      - *configure_registry_host_step
      - *ensure_cicd_image_step
      - name: Run backend doctests
        env:
          HEAD_SHA: ${{ needs.setup.outputs.head_sha }}
        run: |
          docker run --rm "${GITEA_REGISTRY}/darkhelm.org/plex-playlist-cicd:${HEAD_SHA}" bash -c "
            cd /workspace/backend &&
            source .venv/bin/activate &&
            uv run xdoctest src/ --quiet
          "

  integration-tests:
    name: Integration Tests
    # Docker-capable 8GB runner required for stable container startup.
    runs-on: ubuntu-act-8gb
    timeout-minutes: 20
    needs: [setup, backend-tests]
    steps:
      - name: Identify runner
        run: |
          echo "=== Runner Identity ==="
          echo "runner_name=${RUNNER_NAME:-}"
          echo "runner_name_hint=${GITEA_RUNNER_NAME:-${ACT_RUNNER_NAME:-${RUNNER_NAME:-unknown}}}"
          echo "runner_hostname_env=${HOSTNAME:-unknown}"
          echo "runner_uname_n=$(uname -n 2>/dev/null || echo unknown)"
          echo "runner_etc_hostname=$(cat /etc/hostname 2>/dev/null || echo unknown)"
          echo "runner_os=${RUNNER_OS:-unknown}"
          echo "runner_arch=${RUNNER_ARCH:-unknown}"
          echo "timestamp_utc=$(date -u +%Y-%m-%dT%H:%M:%SZ)"

      - *configure_registry_host_step
      - *ensure_cicd_image_step
      - name: Run integration tests
        env:
          HEAD_SHA: ${{ needs.setup.outputs.head_sha }}
        run: |
          docker run --rm "${GITEA_REGISTRY}/darkhelm.org/plex-playlist-cicd:${HEAD_SHA}" bash -c "
            cd /workspace/backend &&
            source .venv/bin/activate &&
            if [ -d 'tests/integration' ]; then
              uv run pytest tests/integration/ -v --tb=short
            else
              echo 'No integration tests found'
            fi
          "

  e2e-tests:
    name: End-to-End Tests
    # Docker-capable 8GB runner required for stable container startup.
    runs-on: ubuntu-act-8gb
    timeout-minutes: 30
    needs: [setup, frontend-tests]
    steps:
      - name: Identify runner
        run: |
          echo "=== Runner Identity ==="
          echo "runner_name=${RUNNER_NAME:-}"
          echo "runner_name_hint=${GITEA_RUNNER_NAME:-${ACT_RUNNER_NAME:-${RUNNER_NAME:-unknown}}}"
          echo "runner_hostname_env=${HOSTNAME:-unknown}"
          echo "runner_uname_n=$(uname -n 2>/dev/null || echo unknown)"
          echo "runner_etc_hostname=$(cat /etc/hostname 2>/dev/null || echo unknown)"
          echo "runner_os=${RUNNER_OS:-unknown}"
          echo "runner_arch=${RUNNER_ARCH:-unknown}"
          echo "timestamp_utc=$(date -u +%Y-%m-%dT%H:%M:%SZ)"

      - *configure_registry_host_step
      - *ensure_cicd_image_step
      - name: Run E2E tests
        env:
          HEAD_SHA: ${{ needs.setup.outputs.head_sha }}
        run: |
          docker run --rm -e CI=true "${GITEA_REGISTRY}/darkhelm.org/plex-playlist-cicd:${HEAD_SHA}" bash -c "
            cd /workspace/frontend &&
            if [ -d 'tests/e2e' ] || grep -q 'playwright' package.json; then
              yarn playwright --version &&
              timeout 300 yarn playwright install chromium &&
              yarn test:e2e --reporter=list --timeout=90000
            else
              echo 'No E2E tests found'
            fi
          "