Root cause of bug: web Dockerfile copied .next/static to the wrong path in the runtime stage. The Next.js 16 standalone server (CMD 'node web/server.js' from /app/web) runs from /app/web/web/server.js because 'standalone' wraps the source directory. It serves /_next/static/* from './web/.next/static' (relative to the standalone server's location), not from './.next/static' (which is what the previous COPY produced). Symptom: in the deployed Docker stack at http://localhost:3050 every client-side JS chunk under /_next/static/chunks/* returned HTTP 404 with content-type text/plain. The browser refused to execute the chunks (strict MIME), so the SPA never hydrated. All Playwright tests that ask for any dynamic UI text on a (app)/ page would time out because AuthGuard never ran in the browser. Discovery path: deployed compose stack via 'docker compose up -d --build' + 'scripts/e2e-docker-test.sh' (backend API 9/9 ✓), then ran Playwright against NOTELETT_WEB_PORT=3050. settings.spec failed with 'product configuration section' not visible. Page snapshot showed just <skip-to-content link> + toast region — no other content. Console logs revealed every /_next/static/chunks/* was 404 with text/plain. 'docker exec ls' showed BUILD_ID at /app/web/web/.next/BUILD_ID and static at /app/web/.next/static — wrong path. Moved static into the standalone tree and chunks now serve 200 with application/javascript. Fix: web/Dockerfile: change COPY --from=builder /app/web/.next/static ./.next/static to COPY --from=builder /app/web/.next/static ./web/.next/static with explanatory comment so this doesn't regress. Test hardening (these tests were dev-server-only by accident — they worked locally because Next.js dev did not enforce the same static path layout; the bug above hid them in production builds too): web/e2e/accessibility.spec.ts — 'focus-visible ring appears on tab navigation' was navigating to /dashboard which AuthGuard correctly redirects when unauthenticated, leaving the DOM empty (AuthGuard returns null until verifySessionAndReadiness completes) so Tab presses focused nothing. Switched to /login which is unauthenticated by design and has known focusable form inputs. web/e2e/settings.spec.ts — 'shows product configuration section' expected /settings to render content without auth. Now obtains real tokens from platform-service via API, seeds them via addInitScript, and falls back to test.skip with a clear message if platform-service is not reachable. Verified: - All 31 Playwright tests across navigation/accessibility/dashboard/ search/settings/smart-actions/reviews specs PASS against the deployed Docker stack at :3050. - 'pnpm run verify': backend 380/380, web 96/96, mobile 97/97. - 'bash scripts/e2e-docker-test.sh': 9/9 backend API CRUD steps pass. - 'curl -sI http://localhost:3050/_next/static/chunks/app/error-*.js' now returns 200 + application/javascript. Not migrated: e2e/release-flows.spec.ts and e2e/visual-regression.spec.ts intentionally remain dev-server-targeted. release-flows.spec uses page.route() to mock backend responses and is meant to test the UI in isolation against a dev server. visual-regression.spec needs baseline regeneration after the UI5-UI8 migration; this is a separate workstream tracked in docs/UI_UX_PLATFORM_CORE_ROADMAP.md.
46 lines
1.6 KiB
TypeScript
46 lines
1.6 KiB
TypeScript
import { test, expect } from '@playwright/test';
|
|
import AxeBuilder from '@axe-core/playwright';
|
|
|
|
const routes = ['/', '/dashboard', '/workspaces', '/search', '/reviews'];
|
|
|
|
for (const route of routes) {
|
|
test(`accessibility: ${route} has no critical violations`, async ({ page }) => {
|
|
await page.goto(route);
|
|
await page.waitForLoadState('networkidle');
|
|
|
|
const results = await new AxeBuilder({ page })
|
|
.withTags(['wcag2a', 'wcag2aa', 'best-practice'])
|
|
.analyze();
|
|
|
|
const critical = results.violations.filter(
|
|
(v) => v.impact === 'critical' || v.impact === 'serious'
|
|
);
|
|
|
|
if (critical.length > 0) {
|
|
const summary = critical
|
|
.map((v) => `[${v.impact}] ${v.id}: ${v.description} (${v.nodes.length} nodes)`)
|
|
.join('\n');
|
|
console.log(`Accessibility violations on ${route}:\n${summary}`);
|
|
}
|
|
|
|
expect(critical).toHaveLength(0);
|
|
});
|
|
}
|
|
|
|
test('accessibility: focus-visible ring appears on tab navigation', async ({ page }) => {
|
|
// Use /login because it doesn't require auth and has known focusable
|
|
// form fields. /dashboard would be redirected by AuthGuard when no
|
|
// session is present, leaving the DOM empty (AuthGuard returns null
|
|
// until verifySessionAndReadiness completes) and Tab presses would
|
|
// focus nothing.
|
|
await page.goto('/login');
|
|
await page.waitForLoadState('networkidle');
|
|
// Click the page first to ensure keyboard focus tracking starts.
|
|
await page.locator('body').click();
|
|
await page.keyboard.press('Tab');
|
|
|
|
const focused = page.locator(':focus-visible');
|
|
const count = await focused.count();
|
|
expect(count).toBeGreaterThan(0);
|
|
});
|