name: MobilityOps browser canary

on:
  schedule:
    - cron: "37 4 * * *"
  workflow_dispatch:

concurrency:
  group: mobilityops-browser-canary
  cancel-in-progress: true

permissions:
  contents: read

jobs:
  chromium:
    runs-on: linux-validation
    timeout-minutes: 15
    steps:
      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
        with:
          node-version: 22
          cache: npm
          cache-dependency-path: frontend/package-lock.json
      - name: Install locked Chromium runtime
        working-directory: frontend
        run: |
          npm ci --no-audit --no-fund
          npx playwright install --with-deps chromium
      - name: Run non-destructive production canary
        working-directory: frontend
        env:
          MOBILITYOPS_PUBLIC_URL: https://fleetops.itworx.tech
        run: npx playwright test --config=playwright.live.config.ts --project=chromium
      - name: Upload failure evidence
        if: failure()
        uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3; Gitea-compatible artifact protocol
        with:
          name: browser-canary-failure
          path: |
            frontend/playwright-live-report
            frontend/test-results
          if-no-files-found: ignore