test-suite-web-e2e-pw.yml

name: "[Test] suite-web playwright e2e"
# this action runs basic test suite for suite-web and and builds/deploys the web app to dev.suite.sldev.cz/suite-web/<branch-name>/web

permissions:
  id-token: write # for fetching the OIDC token
  contents: read # for actions/checkout

# run only if there are changes in suite or related libs paths
on:
  pull_request:
    branches:
      - develop
    paths-ignore:
      - "suite-native/**"
      - "packages/connect*/**"
      # - "packages/suite-desktop*/**"
      - "packages/react-native-usb/**"
      # ignore unrelated github workflows config files
      - ".github/workflows/connect-analytics"
      - ".github/workflows/connect-common"
      - ".github/workflows/connect-examples"
      - ".github/workflows/connect-explorer"
      - ".github/workflows/connect-iframe"
      - ".github/workflows/connect-mobile"
      - ".github/workflows/connect-plugin-*"
      - ".github/workflows/connect-popup"
      - ".github/workflows/connect-theme"
      - ".github/workflows/connect-ui"
      - ".github/workflows/connect-webextension"
      - ".github/workflows/suite-native*"
      - ".github/workflows/build-desktop*"
      - ".github/workflows/release*"
      - ".github/workflows/template*"
      - ".github/actions/release*/**"
  push:
    branches:
      - release/2*
  schedule:
    - cron: "0 0 * * *"
  workflow_dispatch:

concurrency:
  group: ${{ github.workflow }}-${{ github.head_ref || github.run_id }}
  cancel-in-progress: true

env:
  DEV_SERVER_URL: "https://dev.suite.sldev.cz"
  STAGING_SUITE_SERVER_URL: "https://staging-suite.trezor.io"

jobs:
  build-web:
    if: github.repository == 'trezor/trezor-suite'
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Configure aws credentials
        uses: aws-actions/configure-aws-credentials@v4
        with:
          role-to-assume: arn:aws:iam::538326561891:role/gh_actions_trezor_suite_dev_deploy
          aws-region: eu-central-1

      - name: Extract branch name
        id: extract_branch
        run: |
          echo "branch=${GITHUB_HEAD_REF:-${GITHUB_REF#refs/heads/}}" >> $GITHUB_OUTPUT

      - name: Setup node
        uses: actions/setup-node@v4
        with:
          node-version-file: ".nvmrc"
          cache: yarn

      - name: Install dependencies
        run: |
          echo -e "\nenableScripts: false" >> .yarnrc.yml
          echo -e "\nenableHardenedMode: false" >> .yarnrc.yml
          yarn workspaces focus @trezor/suite-web @trezor/connect-iframe @trezor/connect-web @trezor/suite-data @trezor/suite-build

      - name: Build suite-web
        env:
          ASSET_PREFIX: /suite-web/${{ steps.extract_branch.outputs.branch }}/web
          DESKTOP_APP_NAME: "Trezor-Suite"
        run: |
          yarn message-system-sign-config
          yarn workspace @trezor/suite-data build:lib
          yarn workspace @trezor/suite-web build
      # this step should upload build result to s3 bucket dev.suite.sldev.cz using awscli
      - name: Upload suite-web to dev.suite.sldev.cz
        env:
          DEPLOY_PATH: s3://dev.suite.sldev.cz/suite-web/${{ steps.extract_branch.outputs.branch }}
        run: |
          aws s3 sync --delete ./packages/suite-web/build ${DEPLOY_PATH}/web

  generate-e2e-matrix:
    runs-on: ubuntu-latest
    outputs:
      matrix: ${{ steps.set-matrix.outputs.matrix }}
    steps:
      - name: Set matrix
        id: set-matrix
        run: |
          matrix='[
            {"TEST_GROUP": "@group=suite"},
            {"TEST_GROUP": "@group=device-management"},
            {"TEST_GROUP": "@group=settings"},
            {"TEST_GROUP": "@group=metadata1"},
            {"TEST_GROUP": "@group=metadata2"},
            {"TEST_GROUP": "@group=other"},
            {"TEST_GROUP": "@group=wallet"}
          ]'

          if [ "${{ github.event_name }}" == "schedule" ]; then
            matrix=$(echo $matrix | jq '. += [{"TEST_GROUP": "@group=migrations"}]')
          fi
          echo "matrix={\"include\":$(echo $matrix)}" >> $GITHUB_OUTPUT

  e2e-test-suite-web:
    if: github.repository == 'trezor/trezor-suite'
    runs-on: ubuntu-latest
    needs:
      - build-web
      - generate-e2e-matrix
    strategy:
      fail-fast: false
      matrix: ${{ fromJson(needs.generate-e2e-matrix.outputs.matrix) }}

    steps:
      - name: Checkout
        uses: actions/checkout@v4
        with:
          ref: ${{github.event.after}}
          fetch-depth: 2

      - name: Check previous runs
        id: check-previous-runs
        if: github.event_name == 'pull_request' && github.run_attempt == 1
        uses: "./.github/actions/check-previous-test-runs"
        with:
          github_token: ${{ secrets.TREZOR_BOT_TOKEN }}
          pr_branch: ${{ github.head_ref }}
          pr_created: ${{ github.event.pull_request.created_at }}
          repo: ${{ github.repository }}
          workflow_name: ${{ github.workflow }}
          job_name: "${{ github.job }} (${{ join(matrix.*, ', ') }})"

      - name: Setup node
        if: steps.check-previous-runs.outputs.skip_tests != 'true'
        uses: actions/setup-node@v4
        with:
          node-version-file: ".nvmrc"
          cache: yarn

      - name: Extract branch name
        if: steps.check-previous-runs.outputs.skip_tests != 'true'
        id: extract_branch
        run: |
          echo "branch=${GITHUB_HEAD_REF:-${GITHUB_REF#refs/heads/}}" >> $GITHUB_OUTPUT

      - name: Install dependencies and pull docker images
        if: steps.check-previous-runs.outputs.skip_tests != 'true'
        env:
          COMPOSE_FILE: ./docker/docker-compose.suite-ci-pw.yml
        run: |
          echo -e "\nenableScripts: false" >> .yarnrc.yml
          echo -e "\nenableHardenedMode: false" >> .yarnrc.yml
          yarn workspaces focus @trezor/suite-desktop-core
          npx playwright install --with-deps
          docker compose pull trezor-user-env-unix

      - name: Run Playwright e2e web tests
        if: steps.check-previous-runs.outputs.skip_tests != 'true'
        env:
          COMPOSE_FILE: ./docker/docker-compose.suite-ci-pw.yml
          BASE_URL: https://dev.suite.sldev.cz/suite-web/${{ steps.extract_branch.outputs.branch }}/web/
          GITHUB_ACTION: true
          CURRENTS_PROJECT_ID: Og0NOQ
          CURRENTS_RECORD_KEY: ${{ secrets.CURRENTS_RECORD_KEY }}
          CURRENTS_CI_BUILD_ID: pr-run-${{github.run_id}}
          PASSPHRASE: ${{ secrets.E2E_TEST_PASSPHRASE }}
        run: |
          docker compose up -d trezor-user-env-unix
          echo "Starting Playwright Web test group ${{ matrix.TEST_GROUP }}"
          yarn workspace @trezor/suite-desktop-core test:e2e:web --forbid-only --grep="(?=.*${{ matrix.TEST_GROUP }})(?=.*@webOnly)"

      - name: Extract Trezor-user-env and Regtest logs
        if: ${{ !cancelled() && steps.check-previous-runs.outputs.skip_tests != 'true' }}
        run: |
          docker cp docker-trezor-user-env-unix-1:/trezor-user-env/logs/debugging.log trezor-user-env-debugging.log || true
          docker cp docker-trezor-user-env-unix-1:/trezor-user-env/logs/emulator_bridge.log tenv-emulator-bridge-debugging.log || true
          docker cp docker-trezor-user-env-unix-1:/trezor-user-env/docker/version.txt trezor-user-env-version.txt || true
          docker logs docker-electrum-regtest-1 > electrum-regtest.txt || true

      - name: Upload Trezor-user-env and Regtest logs
        if: ${{ !cancelled() && steps.check-previous-runs.outputs.skip_tests != 'true' }}
        uses: actions/upload-artifact@v4
        with:
          name: emulator-logs-${{ matrix.TEST_GROUP }}
          path: |
            trezor-user-env-debugging.log
            tenv-emulator-bridge-debugging.log
            trezor-user-env-version.txt
            electrum-regtest.txt
          retention-days: 30

      - name: Docker compose down
        if: steps.check-previous-runs.outputs.skip_tests != 'true'
        env:
          COMPOSE_FILE: ./docker/docker-compose.suite-ci-pw.yml
        run: docker compose down