Add temporary logging for Supabase container in Test action workflow, add actions lint step and script

Author: webstackdev

.github/dependabot.yml

@@ -5,11 +5,20 @@ updates:
     versioning-strategy: "increase"
     schedule:
       interval: "weekly"
-    open-pull-requests-limit: 4
+    open-pull-requests-limit: 1
     labels:
       - "type: dependencies 🔗"
       - "automerge 🤞"
+    groups:
+      npm-dependencies:
+        patterns:
+          - "*"
   - package-ecosystem: "github-actions"
     directory: "/"
     schedule:
       interval: "weekly"
+    open-pull-requests-limit: 1
+    groups:
+      github-actions:
+        patterns:
+          - "*"

.github/workflows/branch-protection.yml

@@ -10,8 +10,10 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Check branch naming convention
+        env:
+          BRANCH_NAME: ${{ github.head_ref }}
         run: |
-          BRANCH_NAME="${{ github.head_ref }}"
+          : "${BRANCH_NAME:?github.head_ref is required}"
 
           # Valid patterns: bugfix/, hotfix/, feature/, infrastructure/, maintenance/, content/
           if [[ ! $BRANCH_NAME =~ ^(bugfix|hotfix|feature|infrastructure|maintenance|content)/[a-z0-9-]+$ ]]; then
@@ -36,8 +38,10 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Ensure PR targets main
+        env:
+          TARGET_BRANCH: ${{ github.base_ref }}
         run: |
-          TARGET_BRANCH="${{ github.base_ref }}"
+          : "${TARGET_BRANCH:?github.base_ref is required}"
 
           if [[ "$TARGET_BRANCH" != "main" ]]; then
             echo "⚠️  Warning: PR is targeting '$TARGET_BRANCH' instead of 'main'"

.github/workflows/test.yml

@@ -10,9 +10,85 @@ on:
       - main
 
 jobs:
-  test:
-    name: Test Suite
+  lint:
+    name: Lint
     runs-on: ubuntu-latest
+    if: ${{ !startsWith(github.head_ref || github.ref_name, 'hotfix/') }}
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: '22.x'
+          cache: 'npm'
+
+      - name: Install dependencies
+        run: npm ci --legacy-peer-deps
+
+      - name: Sync Astro types
+        run: npm run sync
+
+      - name: Run Astro check
+        run: npm run check
+
+      - name: Run lint
+        run: npm run lint:base
+
+      - name: Run Actions lint
+        run: npm run lint:actions
+
+  unit-test:
+    name: Unit Tests
+    runs-on: ubuntu-latest
+    needs: lint
+    if: ${{ !startsWith(github.head_ref || github.ref_name, 'hotfix/') }}
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: '22.x'
+          cache: 'npm'
+
+      - name: Install dependencies
+        run: npm ci --legacy-peer-deps
+
+      - name: Sync Astro types
+        run: npm run sync
+
+      - name: Run Astro check
+        run: npm run check
+
+      - name: Run unit tests (Vitest — coverage with GitHub Actions reporter)
+        id: vitest
+        run: npm run test:coverage
+
+      - name: Report Coverage
+        if: steps.vitest.outcome == 'success' && hashFiles('coverage/coverage-summary.json') != ''
+        uses: davelosert/vitest-coverage-report-action@v2.9.0
+        with:
+          json-summary-path: './coverage/coverage-summary.json'
+          json-final-path: './coverage/coverage-final.json'
+
+      - name: Upload test coverage
+        if: always() && hashFiles('coverage/coverage-summary.json') != ''
+        uses: actions/upload-artifact@v5
+        with:
+          name: test-coverage
+          path: coverage/
+          retention-days: 30
+
+  e2e-test:
+    name: E2E Tests
+    runs-on: ubuntu-latest
+    needs: unit-test
+    if: ${{ !startsWith(github.head_ref || github.ref_name, 'hotfix/') }}
 
     env:
       CONVERTKIT_API_KEY: ${{ secrets.CONVERTKIT_API_KEY }}
@@ -38,79 +114,32 @@ jobs:
       - name: Checkout repository
         uses: actions/checkout@v4
 
-      - name: Determine hotfix skip
-        id: branch-filter
-        shell: bash
-        run: |
-          ref="${GITHUB_HEAD_REF:-${GITHUB_REF#refs/heads/}}"
-          if [[ "$ref" == hotfix/* ]]; then
-            echo "skip_tests=true" >> "$GITHUB_OUTPUT"
-          else
-            echo "skip_tests=false" >> "$GITHUB_OUTPUT"
-          fi
-
-      - name: Skip notice for hotfix branch
-        if: steps.branch-filter.outputs.skip_tests == 'true'
-        run: |
-          echo "hotfix/* branch detected; skipping lint and test steps."
-
       - name: Setup Node.js
-        if: steps.branch-filter.outputs.skip_tests != 'true'
         uses: actions/setup-node@v4
         with:
           node-version: '22.x'
           cache: 'npm'
 
       - name: Install dependencies
-        if: steps.branch-filter.outputs.skip_tests != 'true'
         run: npm ci --legacy-peer-deps
 
-      - name: Sync Astro types
-        if: steps.branch-filter.outputs.skip_tests != 'true'
-        run: npm run sync
-
-      - name: Run Astro check
-        if: steps.branch-filter.outputs.skip_tests != 'true'
-        run: npm run check
-
-      - name: Run lint
-        if: steps.branch-filter.outputs.skip_tests != 'true'
-        run: npm run lint
-
-      - name: Run unit tests (Vitest — coverage with GitHub Actions reporter)
-        if: steps.branch-filter.outputs.skip_tests != 'true'
-        id: vitest
-        run: |
-          npm run test:coverage
-
-      - name: Report Coverage
-        if: steps.branch-filter.outputs.skip_tests != 'true' && steps.vitest.outcome == 'success' && hashFiles('coverage/coverage-summary.json') != ''
-        uses: davelosert/vitest-coverage-report-action@v2.9.0
-        with:
-          json-summary-path: './coverage/coverage-summary.json'
-          json-final-path: './coverage/coverage-final.json'
-
       - name: Install Playwright browsers
-        if: steps.branch-filter.outputs.skip_tests != 'true'
         run: npx playwright install --with-deps
 
       - name: Set up Docker Buildx
-        if: steps.branch-filter.outputs.skip_tests != 'true'
         uses: docker/setup-buildx-action@v3.11.1
 
       - name: Build Upstash mock image
-        if: steps.branch-filter.outputs.skip_tests != 'true'
         run: docker buildx build --load -t wb/upstash-redis-local:test test/containers/upstash/local-proxy
 
       - name: Generate container env file
-        if: steps.branch-filter.outputs.skip_tests != 'true'
         shell: bash
         run: |
           set -euo pipefail
           mkdir -p test/containers
           : "${SUPABASE_SERVICE_ROLE_KEY:?SUPABASE_SERVICE_ROLE_KEY secret is required}"
 
-          cat <<EOF > test/containers/.env
+          cat <<EOF_ENV > test/containers/.env
           COMPOSE_PROJECT_NAME=wb-e2e
           CONVERTKIT_HTTP_PORT=9010
           RESEND_HTTP_PORT=9011
@@ -120,32 +149,93 @@ jobs:
           SUPABASE_HEALTH_TIMEOUT=${SUPABASE_HEALTH_TIMEOUT:-240}
           SUPABASE_URL=${SUPABASE_URL:-http://127.0.0.1:54321}
           SUPABASE_SERVICE_ROLE_KEY=${SUPABASE_SERVICE_ROLE_KEY}
-          EOF
+          EOF_ENV
 
       - name: Start mock containers
-        if: steps.branch-filter.outputs.skip_tests != 'true'
         run: npm run containers:up
 
       - name: Wait for mock services
-        if: steps.branch-filter.outputs.skip_tests != 'true'
         run: npm run containers:wait
 
       - name: Start Supabase stack
-        if: steps.branch-filter.outputs.skip_tests != 'true'
         run: npm run containers:supabase:start
 
       - name: Apply Supabase migrations (local container)
-        if: steps.branch-filter.outputs.skip_tests != 'true'
-        run: npm run containers:supabase:db-push
+        run: |
+          set -euo pipefail
+
+          echo "::group::Supabase migrations"
+          npm run containers:supabase:db-push
+          echo "::endgroup::"
+
+          echo "::group::Supabase schema snapshot"
+          FORCE_COLOR=1 dotenv -e test/containers/.env -- bash -c 'npx supabase db dump --local --schema-only --workdir suprabase' > /tmp/supabase-schema.sql
+          head -n 200 /tmp/supabase-schema.sql || true
+          echo "(full schema saved to /tmp/supabase-schema.sql)"
+          echo "::endgroup::"
+
+          echo "::group::Restart Supabase REST container"
+          bash -euo pipefail -c '
+            project_id=$(grep -m1 "^project_id" suprabase/config.toml | awk -F '"' "{print \$2}")
+            if [ -z "${project_id}" ]; then
+              echo "Unable to determine Supabase project_id" >&2
+              exit 1
+            fi
+            sanitize() {
+              echo "$1" | tr "[:upper:]" "[:lower:]" | sed "s/[^a-z0-9]/-/g"
+            }
+            for candidate in "${project_id}" "$(sanitize "${project_id}")"; do
+              rest_container=$(docker ps --filter "label=com.docker.compose.project=${candidate}" --format "{{.ID}} {{.Names}}" | grep -E "rest" | head -n 1 || true)
+              if [ -n "${rest_container}" ]; then
+                container_id=$(echo "${rest_container}" | awk "{print \$1}")
+                container_name=$(echo "${rest_container}" | awk "{print \$2}")
+                echo "Restarting ${container_name} (${container_id}) to refresh schema cache"
+                docker restart "${container_id}"
+                break
+              fi
+            done
+            if [ -z "${rest_container:-}" ]; then
+              echo "Supabase REST container not found; skipping restart" >&2
+            fi
+          '
+          echo "::endgroup::"
+
+          echo "::group::Supabase container logs (last 200 lines)"
+          bash -euo pipefail -c '
+            project_id=$(grep -m1 "^project_id" suprabase/config.toml | awk -F '"' "{print \$2}")
+            if [ -z "${project_id}" ]; then
+              echo "Unable to determine Supabase project_id" >&2
+              exit 1
+            fi
+            sanitize() {
+              echo "$1" | tr "[:upper:]" "[:lower:]" | sed "s/[^a-z0-9]/-/g"
+            }
+            containers=""
+            for candidate in "${project_id}" "$(sanitize "${project_id}")"; do
+              containers=$(docker ps --filter "label=com.docker.compose.project=${candidate}" --format "{{.ID}} {{.Names}}" || true)
+              if [ -n "${containers}" ]; then
+                break
+              fi
+            done
+            if [ -z "${containers}" ]; then
+              echo "No Supabase containers found" >&2
+              exit 0
+            fi
+            echo "Capturing logs for project ${project_id}"
+            echo "${containers}" | while read -r container_id container_name; do
+              [ -z "${container_id}" ] && continue
+              echo "--- ${container_name} (tail -n 200) ---"
+              docker logs --tail 200 "${container_id}" || true
+            done
+          '
+          echo "::endgroup::"
 
       - name: Start Astro dev server
-        if: steps.branch-filter.outputs.skip_tests != 'true'
         run: |
           npm run dev -- --host 0.0.0.0 > /tmp/astro-dev.log 2>&1 &
           echo $! > /tmp/astro-dev.pid
 
       - name: Wait for dev server
-        if: steps.branch-filter.outputs.skip_tests != 'true'
         run: |
           for attempt in $(seq 1 60); do
             if curl -fsS http://127.0.0.1:4321 >/dev/null; then
@@ -162,41 +252,41 @@ jobs:
           exit 1
 
       - name: Run Playwright E2E tests
-        if: steps.branch-filter.outputs.skip_tests != 'true'
         run: npx playwright test
         env:
           CI: '1'
           FORCE_COLOR: '1'
           E2E_MOCKS: '1'
 
       - name: Stop Astro dev server
-        if: always() && steps.branch-filter.outputs.skip_tests != 'true'
+        if: always()
         run: |
           if [ -f /tmp/astro-dev.pid ]; then
             kill $(cat /tmp/astro-dev.pid) || true
             rm /tmp/astro-dev.pid
           fi
 
       - name: Upload Playwright report
-        if: always() && steps.branch-filter.outputs.skip_tests != 'true'
+        if: always()
         uses: actions/upload-artifact@v4
         with:
           name: playwright-report
           path: playwright-report/
           retention-days: 30
 
-      - name: Upload test coverage
-        if: always() && steps.branch-filter.outputs.skip_tests != 'true'
-        uses: actions/upload-artifact@v5
-        with:
-          name: test-coverage
-          path: coverage/
-          retention-days: 30
-
       - name: Stop Supabase stack
-        if: always() && steps.branch-filter.outputs.skip_tests != 'true'
+        if: always()
         run: npm run containers:supabase:stop || true
 
       - name: Stop mock containers
-        if: always() && steps.branch-filter.outputs.skip_tests != 'true'
+        if: always()
         run: npm run containers:down || true
+
+  hotfix-bypass:
+    name: Hotfix Bypass Notice
+    runs-on: ubuntu-latest
+    if: ${{ startsWith(github.head_ref || github.ref_name, 'hotfix/') }}
+
+    steps:
+      - name: Skip testing for hotfix branch
+        run: echo "hotfix/* branch detected; skipping lint, unit, and e2e workflows but allowing deployments."

_TODO.md

@@ -1,12 +1,6 @@
 <!-- markdownlint-disable-file -->
 # TODO
 
-Inspect the built HTML for /testing/carousel and the home page to confirm the inline `<script type="module">` blocks that call register{Carousel,Testimonials}WebComponent() are still present after bundling. If they're getting tree-shaken or deferred incorrectly, the custom elements would never hydrate, which matches the data-carousel-ready hang.
-
-Capture console output during one stress-run slice (e.g., testimonials.spec.ts in Chromium) to see if the Embla modules or our error handler are throwing—any runtime exception inside initialize() would tear down the element and prevent the ready flag. I'll focus on the [TestimonialsCarouselElement] initialize log path.
-
-For the service-worker suite, verify that PwaPage.enableServiceWorkerForE2E() actually overrides window.__disableServiceWorkerForE2E after each navigation by logging the flag inside registerServiceWorker() before the early-return, and make sure our init scripts run in the right order when multiple addInitScript calls are stacked.
-
 ## Pause and Play
 
 Next, I'd like to add a "pause" and "play" icon to src/components/Animations/Computers