Merge pull request #71 from wg-lux/erc

.envrc

@@ -1,5 +1,4 @@
-#!/usr/bin/env bash
 
+# Original devenv direnvrc sourcing
 eval "$(devenv direnvrc)"
-
 use devenv

.github/workflows/ci-cd.yml

@@ -3,7 +3,7 @@ name: CI/CD
 on:
   push:
     branches:
-      - '**'
+      - "**"
   pull_request:
   workflow_dispatch:
 
@@ -14,6 +14,50 @@ concurrency:
   group: ci-cd-${{ github.ref }}
   cancel-in-progress: true
 
+env:
+  PYTHON_VERSION: "3.12"
+  NODE_VERSION: "22"
+  DJANGO_SETTINGS_MODULE: lx_annotate.settings.settings_test
+  DJANGO_SETTINGS_MODULE_PRODUCTION: ${{ vars.DJANGO_SETTINGS_MODULE_PRODUCTION || 'lx_annotate.settings.settings_prod' }}
+  DJANGO_ENV: ${{ vars.DJANGO_ENV || 'production' }}
+  DJANGO_DEBUG: ${{ vars.DJANGO_DEBUG || 'False' }}
+  DJANGO_STATIC_ROOT: ${{ github.workspace }}/staticfiles
+  DJANGO_HOST: ${{ vars.DJANGO_HOST || '127.0.0.1' }}
+  DJANGO_PORT: ${{ vars.DJANGO_PORT || '8000' }}
+  DJANGO_ALLOWED_HOSTS: ${{ vars.DJANGO_ALLOWED_HOSTS || 'localhost,127.0.0.1' }}
+  DJANGO_CSRF_TRUSTED_ORIGINS: ${{ vars.DJANGO_CSRF_TRUSTED_ORIGINS || 'http://127.0.0.1' }}
+  DJANGO_CORS_ALLOWED_ORIGINS: ${{ vars.DJANGO_CORS_ALLOWED_ORIGINS || 'http://127.0.0.1' }}
+  DJANGO_DB_ENGINE: ${{ vars.DJANGO_DB_ENGINE || 'django.db.backends.sqlite3' }}
+  DJANGO_DB_NAME: ${{ vars.DJANGO_DB_NAME || ':memory:' }}
+  DJANGO_DB_USER: ${{ vars.DJANGO_DB_USER || 'lx_annotate' }}
+  DJANGO_DB_HOST: ${{ vars.DJANGO_DB_HOST || 'localhost' }}
+  DJANGO_DB_PORT: ${{ vars.DJANGO_DB_PORT || '5432' }}
+  DJANGO_SECRET_KEY: ${{ secrets.DJANGO_SECRET_KEY }}
+  DJANGO_DB_PASSWORD: ${{ secrets.DJANGO_DB_PASSWORD }}
+  OIDC_RP_CLIENT_ID: ${{ vars.OIDC_RP_CLIENT_ID || 'lx-annotate-frontend' }}
+  OIDC_RP_CLIENT_SECRET: ${{ secrets.OIDC_RP_CLIENT_SECRET }}
+  HTTP_PROTOCOL: ${{ vars.HTTP_PROTOCOL || 'https' }}
+  BASE_URL: ${{ vars.BASE_URL || 'http://127.0.0.1:8000' }}
+  STATIC_URL: ${{ vars.STATIC_URL || '/static/' }}
+  MEDIA_URL: ${{ vars.MEDIA_URL || '/media/' }}
+  TIME_ZONE: ${{ vars.TIME_ZONE || 'UTC' }}
+  CENTER_NAME: ${{ vars.CENTER_NAME || 'LX Annotate' }}
+  WORKING_DIR: ${{ github.workspace }}
+  HOME_DIR: ${{ github.workspace }}
+  STORAGE_DIR: ${{ github.workspace }}/storage
+  EXPORT_OUTPUT_DIR: ${{ github.workspace }}/exports
+  ASSET_DIR: ${{ github.workspace }}/assets
+  ENFORCE_AUTH: ${{ vars.ENFORCE_AUTH || '0' }}
+  RUN_VIDEO_TESTS: ${{ vars.RUN_VIDEO_TESTS || '0' }}
+  SKIP_EXPENSIVE_TESTS: ${{ vars.SKIP_EXPENSIVE_TESTS || '1' }}
+  VITE_API_BASE_URL: ${{ vars.VITE_API_BASE_URL || 'http://127.0.0.1:8000' }}
+  VITE_API_PREFIX: ${{ vars.VITE_API_PREFIX || 'api/' }}
+  VITE_FINDINGS_BACKEND: ${{ vars.VITE_FINDINGS_BACKEND || 'endoreg' }}
+  VITE_ENABLE_DEBUG: ${{ vars.VITE_ENABLE_DEBUG || 'false' }}
+  VITE_KEYCLOAK_URL: ${{ vars.VITE_KEYCLOAK_URL || 'https://keycloak.endo-reg.net' }}
+  VITE_KEYCLOAK_REALM: ${{ vars.VITE_KEYCLOAK_REALM || 'lx-realm' }}
+  VITE_KEYCLOAK_CLIENT_ID: ${{ vars.VITE_KEYCLOAK_CLIENT_ID || 'lx-annotate-frontend' }}
+
 jobs:
   backend-tests:
     name: Backend Tests
@@ -29,17 +73,20 @@ jobs:
       - name: Set up Python
         uses: actions/setup-python@v5
         with:
-          python-version: '3.12'
+          python-version: ${{ env.PYTHON_VERSION }}
 
       - name: Set up uv
         uses: astral-sh/setup-uv@v5
 
+      - name: Install runtime system dependencies
+        run: |
+          sudo apt-get update
+          sudo apt-get install -y ffmpeg tesseract-ocr tesseract-ocr-deu libgl1 libglib2.0-0 libxcb1
+
       - name: Install backend dependencies
-        run: uv sync --dev
+        run: uv sync --frozen --extra dev
 
       - name: Run backend tests
-        env:
-          DJANGO_SETTINGS_MODULE: lx_annotate.settings.settings_test
         run: uv run pytest
 
   frontend-tests:
@@ -53,23 +100,81 @@ jobs:
       - name: Set up Node.js
         uses: actions/setup-node@v4
         with:
-          node-version: '20'
+          node-version: ${{ env.NODE_VERSION }}
           cache: npm
           cache-dependency-path: frontend/package-lock.json
 
+      - name: Install frontend dependencies
+        run: npm --prefix frontend ci
+
       - name: Run frontend unit tests
         run: npm --prefix frontend run test:unit -- --run
 
       - name: Run frontend type-check
         run: npm --prefix frontend run type-check
 
+  build-deployment:
+    name: Build Deployment Package
+    runs-on: ubuntu-latest
+    needs:
+      - backend-tests
+      - frontend-tests
+
+    steps:
+      - name: Check out repository
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+          submodules: recursive
+
+      - name: Set up Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: ${{ env.PYTHON_VERSION }}
+
+      - name: Set up Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: ${{ env.NODE_VERSION }}
+          cache: npm
+          cache-dependency-path: frontend/package-lock.json
+
+      - name: Set up uv
+        uses: astral-sh/setup-uv@v5
+
+      - name: Install runtime system dependencies
+        run: |
+          sudo apt-get update
+          sudo apt-get install -y ffmpeg tesseract-ocr tesseract-ocr-deu libgl1 libglib2.0-0 libxcb1
+
+      - name: Install backend dependencies
+        run: uv sync --frozen --extra dev
+
+      - name: Install frontend dependencies
+        run: npm --prefix frontend ci
+
+      - name: Build frontend staticfiles
+        run: npm --prefix frontend run build
+
+      - name: Verify Vite manifest
+        run: test -f staticfiles/.vite/manifest.json
+
+      - name: Build hatchling distribution
+        run: uv run python -m build
+
+      - name: Upload deployment artifacts
+        uses: actions/upload-artifact@v4
+        with:
+          name: lx-annotate-deployment-${{ github.sha }}
+          path: |
+            dist/*
+            staticfiles/**
 
   push-to-prototype:
     name: Push To prototype
     runs-on: ubuntu-latest
     needs:
-      - backend-tests
-      - frontend-tests
+      - build-deployment
     if: github.event_name == 'push' && github.ref_name != 'prototype' && github.actor != 'github-actions[bot]'
 
     steps: