lasuite-messages/.github/workflows/messages.yml

name: Lint and tests

"on":
  push:
    branches:
      - main
  pull_request:
    branches:
      - '*'

# Default to least-privilege at the workflow scope. Jobs that need
# more (e.g. opening / editing comments) opt in explicitly.
permissions:
  contents: read

env:
  COMPOSE_BAKE: true

jobs:

  lint-back:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout repository
        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
        with:
          persist-credentials: false
      - name: Create env files
        run: make create-env-files
      - name: Run linting checks
        run: make lint-back


  typecheck-jmap-email:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout repository
        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
        with:
          persist-credentials: false
      - name: Create env files
        run: make create-env-files
      - name: Run pyright (strict) on the jmap-email library
        run: make typecheck-jmap-email


  lint-jmap-email:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout repository
        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
        with:
          persist-credentials: false
      - name: Create env files
        run: make create-env-files
      - name: Run ruff + pylint on the jmap-email library
        run: make lint-jmap-email


  test-jmap-email:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout repository
        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
        with:
          persist-credentials: false
      - name: Create env files
        run: make create-env-files
      - name: Run jmap-email tests
        run: make test-jmap-email


  fuzz-jmap-email:
    runs-on: ubuntu-latest
    env:
      # `-m fuzz` is excluded from the default selection, so it only ever
      # runs here. Full sweep on main; a lighter one on pull requests to
      # keep the job to a few minutes.
      FUZZ_EXAMPLES: ${{ github.event_name == 'pull_request' && '2000' || '10000' }}
    steps:
      - name: Checkout repository
        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
        with:
          persist-credentials: false
      - name: Create env files
        run: make create-env-files
      - name: Run the jmap-email Hypothesis fuzz suite
        run: make fuzz-jmap-email


  test-back:
    runs-on: ubuntu-latest
    env:
      DOCKER_USER: 1001
    steps:
      - name: Checkout repository
        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
        with:
          persist-credentials: false
      - name: Create env files
        run: make create-env-files
      - name: Setup data directories
        run: |
          mkdir -p data/static
          chown -R 1001:1001 data
      - name: Collect static files
        run: make collectstatic
      - name: Create object storage buckets
        run: make create-buckets
      - name: Run backend tests
        run: make test-back-parallel

  test-front:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout repository
        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
        with:
          persist-credentials: false
      - name: Create env files
        run: make create-env-files
      - name: Install frontend dependencies
        run: make install-frozen-front
      - name: Run frontend tests
        run: make test-front

  test-e2e:
    runs-on: ubuntu-latest
    env:
      DOCKER_USER: 1001
      PW_TEST_HTML_REPORT_OPEN: 'never'
    steps:
      - name: Checkout repository
        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
        with:
          persist-credentials: false
      - name: Create env files
        run: make create-env-files
      - name: Run E2E tests only for Chromium browser to speed up the tests
        run: make test-e2e-ci args="--project chromium"

  test-mta-in:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout repository
        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
        with:
          persist-credentials: false
      - name: Create env files
        run: make create-env-files
      - name: Run mta-in (Postfix milter) tests
        run: make test-mta-in

  test-mta-in-py:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout repository
        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
        with:
          persist-credentials: false
      - name: Create env files
        run: make create-env-files
      - name: Run mta-in pymta (aiosmtpd) tests
        run: make test-mta-in-py

  lint-front:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout repository
        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
        with:
          persist-credentials: false
      - name: Create env files
        run: make create-env-files
      - name: Install frontend dependencies
        run: make install-frozen-front
      - name: Run frontend linting
        run: make lint-front
      - name: Run frontend check
        run: make typecheck-front

  build-front:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout repository
        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
        with:
          persist-credentials: false
      - name: Create env files
        run: make create-env-files
      - name: Install frontend dependencies
        run: make install-frozen-front
      - name: Build frontend
        run: make build-front

  test-front-distroless:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout repository
        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
        with:
          persist-credentials: false
      - name: Build and smoke-test the frontend production image
        run: make test-front-distroless

  check-api-state:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout repository
        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
        with:
          persist-credentials: false
      - name: Create env files
        run: make create-env-files
      - name: Install frontend dependencies
        run: make install-frozen-front
      - name: Run API update
        run: make api-update
      - name: Check for changes
        run: |
          git diff --quiet || \
          (echo "API changes detected. Please run 'make api-update' then commit the changes." && exit 1)