🗳️ ci: Codegraph E2E Vote Runs on Dev Merges (Observe-Only) (#14947)

.github/workflows/codegraph-e2e-votes.yml

@@ -0,0 +1,192 @@
+# Codegraph e2e VOTES — observe-only, post-merge, time-boxed.
+#
+# Playwright never runs on pushes to dev, so evidence for the e2e skip election would
+# otherwise wait on rare organic PR spec failures. This workflow runs EXACTLY the skippable
+# tier the merged PR's selection computed — every merge becomes a direct trial of "would
+# skipping these specs have missed a failure". A green run is a confirmation vote; a failing
+# spec here is a tier-miss vote counted AGAINST enabling skipping. The shadow evaluator on
+# the codegraph droplet harvests these runs and attributes them back to the merged PR.
+#
+# It cannot fail the branch: the tier lookup exits 0 on every path and the test step is
+# continue-on-error. The newest merge cancels older vote runs. The whole campaign switches
+# off by setting repo variable CODEGRAPH_E2E_VOTES=off once the election passes.
+name: Codegraph E2E Votes
+
+on:
+  push:
+    branches:
+      - dev
+    paths:
+      - '**'
+      - '!**.md'
+      - '!.github/workflows/**'
+
+permissions:
+  contents: read
+
+concurrency:
+  group: codegraph-e2e-votes
+  cancel-in-progress: true
+
+env:
+  NODE_OPTIONS: '--max-old-space-size=6144'
+  PLAYWRIGHT_SKIP_BROWSER_DOWNLOAD: '1'
+
+jobs:
+  vote:
+    name: vote (skippable tier)
+    if: vars.CODEGRAPH_E2E_VOTES != 'off'
+    runs-on: ubuntu-latest
+    timeout-minutes: 30
+    env:
+      CI: 'true'
+      E2E_CHROMIUM_CHANNEL: chrome
+      E2E_STREAM_STORE: memory
+    steps:
+      - uses: actions/checkout@v5
+
+      - name: Ask codegraph for this merge's skippable tier
+        id: tiers
+        env:
+          URL: ${{ secrets.CODEGRAPH_URL }}
+          TOKEN: ${{ secrets.CODEGRAPH_TOKEN }}
+          GH_TOKEN: ${{ github.token }}
+        run: |
+          set +e
+          N=0
+          if [ -n "$URL" ] && [ -n "$TOKEN" ]; then
+            gh api "repos/${{ github.repository }}/commits/${{ github.sha }}" \
+              --jq '[.files[] | {path: .filename, status: .status}]' > files.json 2>/dev/null
+            if [ -s files.json ]; then
+              jq -c '{files: .}' files.json > body.json
+              RESP=$(curl -sS -m 45 -H "Authorization: Bearer $TOKEN" \
+                -H 'content-type: application/json' --data-binary @body.json "$URL/v1/select")
+              if ! echo "$RESP" | jq -e '.e2e.skippable' >/dev/null 2>&1; then
+                echo "codegraph unavailable or no tiers; skipping"
+              elif echo "$RESP" | jq -e '.e2e.fail_open == true' >/dev/null 2>&1; then
+                echo "decision was fail-open; tiers untrusted for this merge; skipping"
+              else
+                echo "$RESP" | jq -r '.e2e.skippable[]' | sed 's|^e2e/||' > skippable.txt
+                N=$(wc -l < skippable.txt | tr -d ' ')
+              fi
+            else
+              echo "could not read merge commit files; skipping"
+            fi
+          else
+            echo "no codegraph config; skipping"
+          fi
+          echo "codegraph-votes: running $N skippable specs"
+          echo "count=$N" >> "$GITHUB_OUTPUT"
+          exit 0
+
+      - name: Use Node.js 24.16.0
+        if: steps.tiers.outputs.count != '0'
+        uses: actions/setup-node@v5
+        with:
+          node-version: '24.16.0'
+
+      - name: Restore node_modules cache
+        if: steps.tiers.outputs.count != '0'
+        id: cache-node-modules
+        uses: actions/cache@v5
+        with:
+          path: |
+            node_modules
+            client/node_modules
+            packages/client/node_modules
+            packages/data-provider/node_modules
+            packages/data-schemas/node_modules
+            packages/api/node_modules
+            api/node_modules
+          key: node-modules-e2e-${{ runner.os }}-24.16.0-${{ hashFiles('package-lock.json') }}
+
+      - name: Install dependencies
+        if: steps.tiers.outputs.count != '0' && steps.cache-node-modules.outputs.cache-hit != 'true'
+        run: npm ci
+
+      - name: Restore data-provider build cache
+        if: steps.tiers.outputs.count != '0'
+        id: cache-data-provider
+        uses: actions/cache@v5
+        with:
+          path: packages/data-provider/dist
+          key: build-data-provider-${{ runner.os }}-${{ hashFiles('package.json', 'package-lock.json', 'packages/data-provider/src/**', 'packages/data-provider/tsconfig*.json', 'packages/data-provider/tsdown.config.mjs', 'packages/data-provider/package.json') }}
+
+      - name: Build data-provider
+        if: steps.tiers.outputs.count != '0' && steps.cache-data-provider.outputs.cache-hit != 'true'
+        run: npm run build:data-provider
+
+      - name: Restore data-schemas build cache
+        if: steps.tiers.outputs.count != '0'
+        id: cache-data-schemas
+        uses: actions/cache@v5
+        with:
+          path: packages/data-schemas/dist
+          key: build-data-schemas-${{ runner.os }}-${{ hashFiles('package.json', 'package-lock.json', 'packages/data-schemas/src/**', 'packages/data-schemas/tsconfig*.json', 'packages/data-schemas/tsdown.config.mjs', 'packages/data-schemas/package.json', 'packages/data-provider/src/**', 'packages/data-provider/tsconfig*.json', 'packages/data-provider/tsdown.config.mjs', 'packages/data-provider/package.json') }}
+
+      - name: Build data-schemas
+        if: steps.tiers.outputs.count != '0' && steps.cache-data-schemas.outputs.cache-hit != 'true'
+        run: npm run build:data-schemas
+
+      - name: Restore api build cache
+        if: steps.tiers.outputs.count != '0'
+        id: cache-api
+        uses: actions/cache@v5
+        with:
+          path: packages/api/dist
+          key: build-api-${{ runner.os }}-${{ hashFiles('package.json', 'package-lock.json', 'packages/api/src/**', 'packages/api/tsconfig*.json', 'packages/api/tsdown.config.mjs', 'packages/api/package.json', 'packages/data-provider/src/**', 'packages/data-provider/tsconfig*.json', 'packages/data-provider/tsdown.config.mjs', 'packages/data-provider/package.json', 'packages/data-schemas/src/**', 'packages/data-schemas/tsconfig*.json', 'packages/data-schemas/tsdown.config.mjs', 'packages/data-schemas/package.json') }}
+
+      - name: Build api
+        if: steps.tiers.outputs.count != '0' && steps.cache-api.outputs.cache-hit != 'true'
+        run: npm run build:api
+
+      - name: Restore client-package build cache
+        if: steps.tiers.outputs.count != '0'
+        id: cache-client-package
+        uses: actions/cache@v5
+        with:
+          path: packages/client/dist
+          key: build-client-package-${{ runner.os }}-${{ hashFiles('package.json', 'package-lock.json', 'packages/client/src/**', 'packages/client/tsconfig*.json', 'packages/client/tsdown.config.mjs', 'packages/client/package.json', 'packages/data-provider/src/**', 'packages/data-provider/tsconfig*.json', 'packages/data-provider/tsdown.config.mjs', 'packages/data-provider/package.json') }}
+
+      - name: Build client-package
+        if: steps.tiers.outputs.count != '0' && steps.cache-client-package.outputs.cache-hit != 'true'
+        run: npm run build:client-package
+
+      - name: Restore client app build cache
+        if: steps.tiers.outputs.count != '0'
+        id: cache-client-app
+        uses: actions/cache@v5
+        with:
+          path: client/dist
+          key: build-client-app-e2e-${{ runner.os }}-${{ hashFiles('package.json', 'package-lock.json', 'client/src/**', 'client/public/**', 'client/scripts/post-build.cjs', 'client/index.html', 'client/package.json', 'client/vite.config.*', 'client/tsconfig*.json', 'client/tailwind.config.*', 'client/postcss.config.*', 'packages/client/src/**', 'packages/client/tailwind.preset.cjs', 'packages/client/tsconfig*.json', 'packages/client/tsdown.config.mjs', 'packages/client/package.json', 'packages/data-provider/src/**', 'packages/data-provider/tsconfig*.json', 'packages/data-provider/tsdown.config.mjs', 'packages/data-provider/package.json') }}
+
+      - name: Build client app
+        if: steps.tiers.outputs.count != '0' && steps.cache-client-app.outputs.cache-hit != 'true'
+        run: npm run build:client
+
+      - name: Verify Chrome is present
+        if: steps.tiers.outputs.count != '0'
+        run: google-chrome --version
+
+      # ffmpeg for retry video — see the note in playwright-mock.yml.
+      - name: Install Playwright ffmpeg (best effort)
+        if: steps.tiers.outputs.count != '0'
+        timeout-minutes: 3
+        continue-on-error: true
+        run: timeout -k 10 90 npx playwright install ffmpeg
+
+      # Optional fonts only — see the note in playwright-mock.yml.
+      - name: Install optional Playwright font dependencies (best effort)
+        if: steps.tiers.outputs.count != '0'
+        timeout-minutes: 4
+        continue-on-error: true
+        run: .github/scripts/install-playwright-fonts.sh
+
+      - name: Vote — run the skippable tier (cannot fail the branch)
+        if: steps.tiers.outputs.count != '0'
+        continue-on-error: true
+        run: npx playwright test --config=e2e/playwright.config.mock.ts $(tr '\n' ' ' < skippable.txt)
+
+      - name: Done
+        if: always()
+        run: echo "codegraph-votes: complete"