name: Develop client security
on:
  pull_request:
    branches: [develop]
  push:
    branches: [develop]
permissions:
  contents: read
jobs:
  chromium:
    runs-on: ubuntu-24.04
    timeout-minutes: 10
    steps:
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
        with:
          persist-credentials: false
      - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1
        with:
          node-version: '22'
          cache: npm
          cache-dependency-path: tests/e2e/package-lock.json
      - name: Install locked browser tooling
        working-directory: tests/e2e
        run: |
          set -euo pipefail
          npm ci --ignore-scripts
          npx --no-install playwright install --with-deps chromium
      - name: Verify client behavior in Chromium
        working-directory: tests/e2e
        run: npx --no-install playwright test tests/develop-client-*.spec.ts tests/develop-menu-state.spec.ts tests/table-column-widths.spec.ts --project=chromium