dc/.gitea/workflows/lighthouse.yaml

name: Lighthouse Checks
run-name: Running Lighthouse Performance and Accessibility Checks on Pull Request
on: [pull_request]

env:
  # the server the mocked services and app tests run against - bump deliberately
  SASJS_SERVER_VERSION: '3.6.2'
  NODE_VERSION: '24.15.0'

jobs:
  lighthouse:
    runs-on: ubuntu-latest

    steps:
      - uses: actions/checkout@v4

      - name: Use Node.js ${{ env.NODE_VERSION }}
        uses: actions/setup-node@v4
        with:
          node-version: ${{ env.NODE_VERSION }}

      - name: Install Google Chrome
        run: |
          apt-get update
          wget https://dl.google.com/linux/direct/google-chrome-stable_current_amd64.deb
          apt install -y ./google-chrome*.deb

      - name: Install global packages
        run: npm i -g pm2 @sasjs/cli wait-on

      - name: Cache the npm downloads
        # The server is installed from npm at a pinned version, so the tarball is
        # immutable and the key never needs invalidating by hand: a hit skips
        # the 10.7MB download, a miss costs exactly what the zip cost before.
        # continue-on-error, because a runner without cache support should still
        # run the pipeline - this step only ever saves time.
        continue-on-error: true
        uses: actions/cache@v4
        with:
          path: ~/.npm
          key: npm-sasjs-server-${{ env.SASJS_SERVER_VERSION }}

      - name: Setup and start SASjs server
        run: |
          touch .env
          echo RUN_TIMES=js >> .env
          echo NODE_PATH=node >> .env
          echo CORS=enable >> .env
          echo WHITELIST=http://localhost:4200 >> .env
          echo HTTP_PORT=5000 >> .env
          # The server refuses to run as root unless RUN_AS names an account
          # (a security change in the recent releases). This job runs as root
          # in a throwaway container, so opt in explicitly.
          echo RUN_AS=root >> .env
          cat .env
          pm2 start npx --name sasjs-server -- --yes @sasjs/server@${{ env.SASJS_SERVER_VERSION }}
          # `pm2 start` returns before the app is listening, and the next step
          # hits :5000 immediately. Wait for the server to answer, and dump its
          # log if it never does.
          for i in $(seq 1 60); do
            if curl -sf -o /dev/null http://localhost:5000/; then
              echo "SASjs server answered on attempt ${i}"
              exit 0
            fi
            sleep 2
          done
          echo "SASjs server did not come up within 120s"
          pm2 list
          pm2 logs sasjs-server --lines 100 --nostream
          exit 1

      - name: Write .npmrc file
        run: echo "$NPMRC" > client/.npmrc
        shell: bash
        env:
          NPMRC: ${{ secrets.NPMRC}}

      - name: Install npm dependencies
        run: |
          cd client
          # Decrypt and Install sheet
          echo "${{ secrets.SHEET_PWD }}" | \
            gpg --batch --yes --passphrase-fd 0 \
            --output ./libraries/sheet-crypto.tgz \
            --decrypt ./libraries/sheet-crypto.tgz.gpg
          npm ci
          npm install -g replace-in-files-cli

      - name: Update appLoc in index.html
        run: |
          cd client
          replace-in-files --regex='appLoc=".*?"' --replacement='appLoc="/proj/sasjs/genesis-mocks"' ./src/index.html

      - name: Build Frontend
        run: |
          cd client
          npm run build

      - name: Deploy JS mocked services and frontend to the local SASjs Server instance
        run: |
          cd sas/mocks
          npm ci
          sasjs cbd -t server-ci

      - name: Start frontend server
        run: |
          cd client
          npx ng serve --host 0.0.0.0 --port 4200 &
          wait-on http://localhost:4200

      - name: Run Lighthouse CI
        run: |
          cd client
          npx lhci autorun

      - name: Lighthouse Result Artifacts
        if: always()
        uses: actions/upload-artifact@v3
        with:
          name: Lighthouse results
          path: client/lighthouse-reports
          include-hidden-files: true