thepraandClaude Opus 5.5
011bafb6af
tests/e2e (Playwright for .NET 1.61.0 on xunit v3, the Chromium 1228 already cached, never downloaded, never in CI) runs the published app against SocialPub's pasture and its town: run.sh publishes it with the Pasture environment (wwwroot/appsettings.Pasture.json, published only then; the deploy fails if it ever ships) and serves it as https://decepub.test. The tests sign in through the real login page and persona chooser, check that every request goes only to decepub.test and privapub.test with the right credential on the right API, render one post of each kind from each platform as its author wrote it, and check every action on the other side of the wire (town.sh stored): favourites, boosts and replies with their undoing, follows from a profile, votes, reactions. Each test is also a cell of the town's report (out/client.jsonl). They found two PrivaPub bugs fixed there (a blocked author's status answered null; sensitive remote media invented a content warning) and a reply addressed to nobody. New in the app, all checked by those tests: - profiles at /account/{id}: header, bio, fields, counts, the account's posts as posts, posts and replies, or media, and follow, unfollow, cancel a request, mute and block (AccountService); post authors and notifications open them in the app; - search at /search: accounts, posts and hashtags, a handle or an address resolved by PrivaPub; - poll voting on the card, and emoji reactions shown and given with one tap; before a persona's first reaction or vote it is told once that both are public (PublicNoticeService, the owner's decision); - follow requests answered from their notification. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01LsXgEaXee4GCU1hwYgPJXw
83 lines
3.5 KiB
YAML
83 lines
3.5 KiB
YAML
name: Deploy
|
|
|
|
on:
|
|
workflow_dispatch:
|
|
push:
|
|
tags:
|
|
- 'v*'
|
|
|
|
env:
|
|
WEB_ROOT: /var/www/decepub.thepra.dev
|
|
BACKUPS: /var/backups/decepub.thepra.dev
|
|
PUBLIC_URL: https://decepub.thepra.dev
|
|
|
|
jobs:
|
|
site:
|
|
name: decepub.thepra.dev
|
|
runs-on: build
|
|
steps:
|
|
# A plain fetch from this Gitea rather than actions/checkout, which the runner would download from github.com.
|
|
- name: Check out this commit
|
|
env:
|
|
READ_TOKEN: ${{ secrets.THEPRA_READ_TOKEN }}
|
|
run: |
|
|
rm -rf decePubClient
|
|
git init -q decePubClient
|
|
git -C decePubClient -c http.extraHeader="Authorization: token $READ_TOKEN" fetch -q --depth 1 \
|
|
"$GITHUB_SERVER_URL/$GITHUB_REPOSITORY.git" "$GITHUB_SHA"
|
|
git -C decePubClient checkout -q FETCH_HEAD
|
|
|
|
- name: Fetch PrivaPub's client models beside it
|
|
env:
|
|
READ_TOKEN: ${{ secrets.THEPRA_READ_TOKEN }}
|
|
run: |
|
|
rm -rf SocialPub
|
|
git -c http.extraHeader="Authorization: token $READ_TOKEN" clone -q --depth 1 \
|
|
https://git.thepra.dev/thepra/SocialPub.git SocialPub
|
|
|
|
- name: Resolve the build identity
|
|
run: |
|
|
echo "BUILD_COMMIT=$(echo "$GITHUB_SHA" | cut -c1-8)" >> "$GITHUB_ENV"
|
|
echo "BUILD_REF=${GITHUB_REF_NAME:-master}" >> "$GITHUB_ENV"
|
|
echo "BUILD_TIME=$(date -u +%Y-%m-%dT%H:%M:%SZ)" >> "$GITHUB_ENV"
|
|
|
|
- name: Publish
|
|
run: |
|
|
rm -rf "$GITHUB_WORKSPACE/publish"
|
|
dotnet publish decePubClient/decePubClient.csproj -c Release -o "$GITHUB_WORKSPACE/publish"
|
|
printf '{"commit":"%s","buildRef":"%s","builtAt":"%s"}\n' "$BUILD_COMMIT" "$BUILD_REF" "$BUILD_TIME" \
|
|
> "$GITHUB_WORKSPACE/publish/wwwroot/build.json"
|
|
|
|
- name: Assert the publish actually produced a site
|
|
run: |
|
|
W="$GITHUB_WORKSPACE/publish/wwwroot"
|
|
for f in index.html appsettings.json build.json _framework/blazor.webassembly.js css/app.css css/app.css.gz js/theme.js; do
|
|
[ -e "$W/$f" ] || { echo "::error::publish output is missing $f"; exit 1; }
|
|
done
|
|
ls "$W/_framework" | grep -q '\.wasm$' || { echo "::error::no .wasm in _framework"; exit 1; }
|
|
for f in appsettings.Development.json appsettings.Pasture.json; do
|
|
[ ! -e "$W/$f" ] || { echo "::error::publish output holds $f, which points the app at a test server"; exit 1; }
|
|
done
|
|
echo "publish OK, $(du -sh "$W" | cut -f1)"
|
|
|
|
- name: Snapshot the live directory
|
|
run: |
|
|
STAMP=$(date +%Y%m%d-%H%M%S)
|
|
rsync -a "$WEB_ROOT/" "$BACKUPS/site-$STAMP/"
|
|
echo "SNAPSHOT=$BACKUPS/site-$STAMP" >> "$GITHUB_ENV"
|
|
ls -1dt "$BACKUPS"/site-* 2>/dev/null | tail -n +4 | xargs -r rm -rf || true
|
|
|
|
- name: Sync
|
|
run: rsync -a --delete "$GITHUB_WORKSPACE/publish/wwwroot/" "$WEB_ROOT/"
|
|
|
|
- name: Verify what is being served, roll back on failure
|
|
run: |
|
|
served=$(curl -fsS "$PUBLIC_URL/build.json" | python3 -c "import json,sys; print(json.load(sys.stdin).get('commit',''))" || true)
|
|
code=$(curl -s -o /dev/null -w '%{http_code}' "$PUBLIC_URL/some/client/route")
|
|
if [ "$served" != "$BUILD_COMMIT" ] || [ "$code" != "200" ]; then
|
|
echo "::error::served build '$served' (expected '$BUILD_COMMIT'), fallback route answered $code - rolling back"
|
|
rsync -a --delete "$SNAPSHOT/" "$WEB_ROOT/"
|
|
exit 1
|
|
fi
|
|
echo "::notice::serving $served"
|