e2e.yml

name: E2E

on:
  workflow_dispatch:
  # Nightly rather than per-PR: the suite is long and browser-heavy. Promote
  # to a PR trigger once it has a green track record.
  schedule:
    - cron: "17 3 * * *"

permissions:
  contents: read

jobs:
  test:
    name: test (${{ matrix.settings.name }})
    strategy:
      fail-fast: false
      matrix:
        settings:
          - name: linux
            host: ubuntu-latest
            playwright: bunx playwright install --with-deps
            workdir: .
            command: |
              bun turbo test
          # Windows e2e:local skipped — chronically failing since
          # 2026-04-28 across all PRs from all authors. Root cause is
          # the in-process Playwright/bun/Vite spawn chain not
          # propagating Basic-Auth credentials reliably on
          # windows-latest. Re-enable in a dedicated workflow-repair
          # PR with full audit context (see commits b47b779/d7ad855/
          # 21aae5d/6a9dcd0/0f1d7c1 for the diagnosis chain).
    runs-on: ${{ matrix.settings.host }}
    timeout-minutes: 60
    defaults:
      run:
        shell: bash
    steps:
      - name: Checkout repository
        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
        with:
          token: ${{ secrets.GITHUB_TOKEN }}

      - name: Setup Bun
        uses: ./.github/actions/setup-bun

      - name: Install Playwright browsers
        working-directory: frontend/workspace
        run: ${{ matrix.settings.playwright }}

      - name: Pin openscience server Basic-Auth password
        if: matrix.settings.name != 'windows'
        run: |
          # Pin OPENSCIENCE_SERVER_PASSWORD to a known value before booting
          # the in-process server, and broadcast the same value to
          # VITE_OPENSCIENCE_SERVER_PASSWORD so Playwright (via the
          # extraHTTPHeaders branch in playwright.config.ts) attaches a
          # matching Basic-Auth header on every browser request.
          # Without this, the auto-generated password is unknown to
          # Playwright and all browser-driven /session, /event, /provider
          # calls get 401 → home.spec "Open project" never appears.
          PASS="ci-$(openssl rand -hex 16)"
          {
            echo "OPENSCIENCE_SERVER_PASSWORD=$PASS"
            echo "VITE_OPENSCIENCE_SERVER_PASSWORD=$PASS"
          } >> "$GITHUB_ENV"
          # Vite reads VITE_* from .env.local at build time — the Playwright
          # webServer env-pass doesn't reach the bundle. Mirror e2e-local.ts
          # by writing the same .env.local frontend/workspace expects.
          cat > frontend/workspace/.env.local <<ENV
          VITE_OPENSCIENCE_SERVER_HOST=127.0.0.1
          VITE_OPENSCIENCE_SERVER_PORT=4096
          VITE_OPENSCIENCE_SERVER_USERNAME=openscience
          VITE_OPENSCIENCE_SERVER_PASSWORD=$PASS
          ENV

      - name: Set OS-specific paths
        run: |
          # shellcheck disable=SC2129
          if [ "${{ runner.os }}" = "Windows" ]; then
            printf '%s\n' "OPENSCIENCE_E2E_ROOT=${{ runner.temp }}\\openscience-e2e" >> "$GITHUB_ENV"
            printf '%s\n' "OPENSCIENCE_TEST_HOME=${{ runner.temp }}\\openscience-e2e\\home" >> "$GITHUB_ENV"
            printf '%s\n' "XDG_DATA_HOME=${{ runner.temp }}\\openscience-e2e\\share" >> "$GITHUB_ENV"
            printf '%s\n' "XDG_CACHE_HOME=${{ runner.temp }}\\openscience-e2e\\cache" >> "$GITHUB_ENV"
            printf '%s\n' "XDG_CONFIG_HOME=${{ runner.temp }}\\openscience-e2e\\config" >> "$GITHUB_ENV"
            printf '%s\n' "XDG_STATE_HOME=${{ runner.temp }}\\openscience-e2e\\state" >> "$GITHUB_ENV"
          else
            printf '%s\n' "OPENSCIENCE_E2E_ROOT=${{ runner.temp }}/openscience-e2e" >> "$GITHUB_ENV"
            printf '%s\n' "OPENSCIENCE_TEST_HOME=${{ runner.temp }}/openscience-e2e/home" >> "$GITHUB_ENV"
            printf '%s\n' "XDG_DATA_HOME=${{ runner.temp }}/openscience-e2e/share" >> "$GITHUB_ENV"
            printf '%s\n' "XDG_CACHE_HOME=${{ runner.temp }}/openscience-e2e/cache" >> "$GITHUB_ENV"
            printf '%s\n' "XDG_CONFIG_HOME=${{ runner.temp }}/openscience-e2e/config" >> "$GITHUB_ENV"
            printf '%s\n' "XDG_STATE_HOME=${{ runner.temp }}/openscience-e2e/state" >> "$GITHUB_ENV"
          fi

      - name: Seed openscience data
        if: matrix.settings.name != 'windows'
        working-directory: backend/cli
        run: bun script/seed-e2e.ts
        env:
          OPENSCIENCE_DISABLE_SHARE: "true"
          OPENSCIENCE_DISABLE_LSP_DOWNLOAD: "true"
          OPENSCIENCE_DISABLE_DEFAULT_PLUGINS: "true"
          OPENSCIENCE_EXPERIMENTAL_DISABLE_FILEWATCHER: "true"
          OPENSCIENCE_TEST_HOME: ${{ env.OPENSCIENCE_TEST_HOME }}
          XDG_DATA_HOME: ${{ env.XDG_DATA_HOME }}
          XDG_CACHE_HOME: ${{ env.XDG_CACHE_HOME }}
          XDG_CONFIG_HOME: ${{ env.XDG_CONFIG_HOME }}
          XDG_STATE_HOME: ${{ env.XDG_STATE_HOME }}
          OPENSCIENCE_E2E_PROJECT_DIR: ${{ github.workspace }}
          OPENSCIENCE_E2E_SESSION_TITLE: "E2E Session"
          OPENSCIENCE_E2E_MESSAGE: "Seeded for UI e2e"
          OPENSCIENCE_E2E_MODEL: "synsci/gpt-5-nano"

      - name: Run openscience server
        if: matrix.settings.name != 'windows'
        working-directory: backend/cli
        run: bun dev -- --print-logs --log-level WARN serve --port 4096 --hostname 127.0.0.1 &
        env:
          OPENSCIENCE_DISABLE_SHARE: "true"
          OPENSCIENCE_DISABLE_LSP_DOWNLOAD: "true"
          OPENSCIENCE_DISABLE_DEFAULT_PLUGINS: "true"
          OPENSCIENCE_EXPERIMENTAL_DISABLE_FILEWATCHER: "true"
          OPENSCIENCE_TEST_HOME: ${{ env.OPENSCIENCE_TEST_HOME }}
          XDG_DATA_HOME: ${{ env.XDG_DATA_HOME }}
          XDG_CACHE_HOME: ${{ env.XDG_CACHE_HOME }}
          XDG_CONFIG_HOME: ${{ env.XDG_CONFIG_HOME }}
          XDG_STATE_HOME: ${{ env.XDG_STATE_HOME }}
          OPENSCIENCE_CLIENT: "app"

      - name: Wait for openscience server
        if: matrix.settings.name != 'windows'
        run: |
          for _ in $(seq 1 120); do
            curl -fsS "http://127.0.0.1:4096/global/health" > /dev/null && exit 0
            sleep 1
          done
          exit 1

      - name: run
        working-directory: ${{ matrix.settings.workdir }}
        run: ${{ matrix.settings.command }}
        env:
          CI: true
          OPENSCIENCE_DISABLE_SHARE: "true"
          OPENSCIENCE_DISABLE_LSP_DOWNLOAD: "true"
          OPENSCIENCE_DISABLE_DEFAULT_PLUGINS: "true"
          OPENSCIENCE_EXPERIMENTAL_DISABLE_FILEWATCHER: "true"
          OPENSCIENCE_TEST_HOME: ${{ env.OPENSCIENCE_TEST_HOME }}
          XDG_DATA_HOME: ${{ env.XDG_DATA_HOME }}
          XDG_CACHE_HOME: ${{ env.XDG_CACHE_HOME }}
          XDG_CONFIG_HOME: ${{ env.XDG_CONFIG_HOME }}
          XDG_STATE_HOME: ${{ env.XDG_STATE_HOME }}
          PLAYWRIGHT_SERVER_HOST: "127.0.0.1"
          PLAYWRIGHT_SERVER_PORT: "4096"
          VITE_OPENSCIENCE_SERVER_HOST: "127.0.0.1"
          VITE_OPENSCIENCE_SERVER_PORT: "4096"
          OPENSCIENCE_CLIENT: "app"
        timeout-minutes: 30

      - name: Upload Playwright artifacts
        if: failure()
        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
        with:
          name: playwright-${{ matrix.settings.name }}-${{ github.run_attempt }}
          if-no-files-found: ignore
          retention-days: 7
          path: |
            frontend/workspace/e2e/test-results
            frontend/workspace/e2e/playwright-report