ci.yml

name: CI

on:
  push:
    branches: [main, dev]
    paths:
      - 'packages/**'
      - 'examples/**'
      - 'scripts/**'
      - '!examples/stackwright-docs/content/**'
  pull_request:
    paths:
      - 'packages/**'
      - 'examples/**'
      - 'scripts/**'
      - '!examples/stackwright-docs/content/**'

permissions:
  contents: read
env:
  # Turborepo remote cache (Vercel)
  TURBO_TOKEN: ${{ secrets.TURBO_TOKEN }}
  TURBO_TEAM: ${{ vars.TURBO_TEAM }}
  TURBO_REMOTE_CACHE: ${{ vars.TURBO_REMOTE_CACHE || 'false' }}

jobs:
  lint-and-format:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: ./.github/actions/setup-stackwright

      - name: Setup Turborepo
        uses: actions/cache@v5
        with:
          path: .turbo
          key: ${{ runner.os }}-turbo-${{ github.sha }}
          restore-keys: |
            ${{ runner.os }}-turbo-

      - name: Dependency vulnerability audit
        run: pnpm audit --audit-level=high

      - run: pnpm turbo:format
      - run: pnpm turbo:lint

  audit:
    runs-on: ubuntu-latest
    needs: [lint-and-format]
    steps:
      - uses: actions/checkout@v4
      - uses: ./.github/actions/setup-stackwright

      - name: Dependency vulnerability audit
        run: pnpm audit --audit-level=high

  test:
    runs-on: ubuntu-latest
    needs: [lint-and-format]
    steps:
      - uses: actions/checkout@v4
      - uses: ./.github/actions/setup-stackwright
        with:
          build: true

      - name: Setup Turborepo
        uses: actions/cache@v5
        with:
          path: .turbo
          key: ${{ runner.os }}-turbo-${{ github.sha }}
          restore-keys: |
            ${{ runner.os }}-turbo-

      - run: pnpm test

  scaffold-smoke-test:
    runs-on: ubuntu-latest
    needs: [lint-and-format]
    steps:
      - uses: actions/checkout@v4
      - uses: ./.github/actions/setup-stackwright
        with:
          build: true

      - name: Setup Turborepo
        uses: actions/cache@v5
        with:
          path: .turbo
          key: ${{ runner.os }}-turbo-${{ github.sha }}
          restore-keys: |
            ${{ runner.os }}-turbo-

      - name: Build workspace packages with turbo
        run: pnpm turbo:build --filter='!./examples/**'

      - name: Pack workspace packages as tarballs
        run: |
          mkdir -p /tmp/stackwright-tarballs
          for pkg in types themes icons collections core nextjs build-scripts ui-shadcn cli sbom-generator; do
            pnpm --filter "@stackwright/$pkg" pack --pack-destination /tmp/stackwright-tarballs
          done

      - name: Scaffold a test project
        run: node packages/cli/dist/cli.js scaffold /tmp/test-site --title "Test Site" --theme default --json

      - name: Override scaffold deps with local tarballs
        run: |
          node -e "
            const fs = require('fs');
            const pkg = JSON.parse(fs.readFileSync('./package.json', 'utf8'));
            const tarballs = fs.readdirSync('/tmp/stackwright-tarballs');
            const names = ['types','themes','icons','collections','core','nextjs','build-scripts','ui-shadcn','cli','sbom-generator'];
            const overrides = {};
            for (const name of names) {
              const tarball = tarballs.find(t => t.startsWith('stackwright-' + name + '-'));
              if (tarball) overrides['@stackwright/' + name] = '/tmp/stackwright-tarballs/' + tarball;
            }
            for (const section of ['dependencies', 'devDependencies']) {
              for (const dep of Object.keys(pkg[section] || {})) {
                if (overrides[dep]) pkg[section][dep] = overrides[dep];
              }
            }
            pkg.pnpm = { overrides };
            fs.writeFileSync('./package.json', JSON.stringify(pkg, null, 2) + '\n');
          "
        working-directory: /tmp/test-site

      - name: Install scaffold dependencies
        run: pnpm install --no-frozen-lockfile
        working-directory: /tmp/test-site

      - name: Build scaffold output
        run: pnpm build
        working-directory: /tmp/test-site

  check-agent-docs:
    runs-on: ubuntu-latest
    needs: [lint-and-format]
    steps:
      - uses: actions/checkout@v4
      - uses: ./.github/actions/setup-stackwright
        with:
          build: true

      - name: Setup Turborepo
        uses: actions/cache@v5
        with:
          path: .turbo
          key: ${{ runner.os }}-turbo-${{ github.sha }}
          restore-keys: |
            ${{ runner.os }}-turbo-

      - name: Regenerate AGENTS.md tables
        run: node packages/cli/dist/cli.js generate-agent-docs

      - name: Fail if AGENTS.md is out of sync with schemas
        run: |
          git diff --exit-code AGENTS.md || \
          (echo "AGENTS.md is out of sync. Run 'pnpm stackwright -- generate-agent-docs' and commit the result." && exit 1)

  e2e:
    runs-on: ubuntu-latest
    needs: [lint-and-format]
    steps:
      - uses: actions/checkout@v4
      - uses: ./.github/actions/setup-stackwright
        with:
          build: true
          relink-bins: true

      - name: Setup Turborepo
        uses: actions/cache@v5
        with:
          path: .turbo
          key: ${{ runner.os }}-turbo-${{ github.sha }}
          restore-keys: |
            ${{ runner.os }}-turbo-

      - name: Install Playwright browsers
        run: pnpm --filter @stackwright/e2e exec playwright install --with-deps chromium

      - name: Run E2E tests
        # Visual regression baselines are generated locally. In CI, --update-snapshots
        # makes visual tests act as render-smoke-tests (verify components render without
        # crashing) rather than pixel comparisons, since font rendering differs across
        # platforms. Pixel-perfect comparison runs locally where baselines were generated.
        #
        # a11y and performance tests are excluded here — they have dedicated workflows
        # (accessibility.yml, performance.yml) with their own reporting and thresholds.
        # NOTE: Do NOT add extra -- before 'test' - it breaks --project filtering
        run: >-
          pnpm --filter @stackwright/e2e exec playwright
          test
          tests/smoke.spec.ts
          tests/visual.spec.ts
          tests/render-tools.spec.ts
          tests/e2e/
          tests/edge-cases/
          --project=chromium
          --update-snapshots

      - name: Upload Playwright report
        uses: actions/upload-artifact@v4
        if: failure()
        with:
          name: playwright-report
          path: packages/e2e/playwright-report/
          retention-days: 14

  check-schemas:
    runs-on: ubuntu-latest
    needs: [lint-and-format]
    steps:
      - uses: actions/checkout@v4
      - uses: ./.github/actions/setup-stackwright
        with:
          build: true

      - name: Setup Turborepo
        uses: actions/cache@v5
        with:
          path: .turbo
          key: ${{ runner.os }}-turbo-${{ github.sha }}
          restore-keys: |
            ${{ runner.os }}-turbo-

      - name: Regenerate JSON schemas
        run: cd packages/types && pnpm generate-schemas

      - name: Fail if JSON schemas are out of sync with types
        run: |
          git diff --exit-code packages/types/schemas/ || \
          (echo "JSON schemas are out of sync. Run 'cd packages/types && pnpm generate-schemas' and commit the result." && exit 1)

  check-template-sync:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout monorepo
        uses: actions/checkout@v4

      - name: Checkout template repo
        uses: actions/checkout@v4
        with:
          repository: Per-Aspera-LLC/stackwright-template-nextjs
          path: _template-repo

      - name: Compare bundled templates with template repo
        run: |
          TEMPLATE_SRC="packages/cli/templates/scaffold-template"
          DIFFS=""

          # Compare all files in the bundled template against the template repo
          while IFS= read -r -d '' file; do
            rel="${file#$TEMPLATE_SRC/}"
            if [ ! -f "_template-repo/$rel" ]; then
              DIFFS="${DIFFS}Only in bundled: $rel\n"
            elif ! diff -q "$file" "_template-repo/$rel" > /dev/null 2>&1; then
              DIFFS="${DIFFS}Changed: $rel\n"
            fi
          done < <(find "$TEMPLATE_SRC" -type f -print0)

          # Check for files in template repo not in bundled (excluding README.md, .git)
          while IFS= read -r -d '' file; do
            rel="${file#_template-repo/}"
            if [ ! -f "$TEMPLATE_SRC/$rel" ]; then
              DIFFS="${DIFFS}Only in template repo: $rel\n"
            fi
          done < <(find _template-repo -type f -not -path '*/.git/*' -not -name 'README.md' -print0)

          if [ -n "$DIFFS" ]; then
            echo "::warning::Template repo is out of sync with bundled templates (informational — not blocking)"
            echo -e "$DIFFS"
            echo ""
            echo "The sync-template-repo workflow will update the template repo automatically when this PR merges to dev."
            echo "If you need to sync manually, copy packages/cli/templates/scaffold-template/ to the template repo."
          else
            echo "Template repo is in sync with bundled templates."
          fi