Testing infrastructure, fix truncating of dataURLs (#26)

* feat: implement comprehensive testing infrastructure

- Fix image dataURL truncation bug in security.ts with configurable size limits
- Add backend integration tests (22 tests) with Vitest for API validation
- Add frontend unit tests (11 tests) for JSON serialization
- Implement browser-based E2E tests (8 tests) with Playwright
- Create Docker setup for repeatable E2E testing environment
- Add GitHub Actions CI workflow for automated testing
- Update .gitignore for test artifacts and temporary files

Testing Infrastructure:
- Backend: Vitest + Supertest for API integration tests
- Frontend: Vitest + Testing Library for component tests
- E2E: Playwright with Chromium for full browser automation
- CI/CD: GitHub Actions with parallel test execution

Security Improvements:
- Make dataURL size limit configurable (default: 10MB)
- Enhanced validation for image dataURLs
- Block malicious content (javascript:, script tags)

All tests pass: 41 total (22 backend + 11 frontend + 8 E2E)

* feat(tests): add comprehensive E2E tests for dashboard workflows and image persistence
chore(env): update environment variables for consistent API URL usage
fix(api): centralize API request helpers for drawing and collection management
style(DrawingCard): enhance accessibility with ARIA attributes and data-testid for testing

* cleanup/revise documentation

* cleanup/revise documentation

* Add end-to-end tests for drawing CRUD, export/import, search/sort, and theme toggle functionalities

- Implemented E2E tests for drawing creation, editing, and deletion in `drawing-crud.spec.ts`.
- Added tests for export and import features, including JSON and SQLite formats in `export-import.spec.ts`.
- Created tests for searching and sorting drawings by name and date in `search-and-sort.spec.ts`.
- Developed tests for theme toggle functionality to ensure persistence across sessions in `theme-toggle.spec.ts`.

* fix: exclude test files from production build to fix Docker build

* feat: implement comprehensive testing infrastructure (#19)

* bump version 0.1.7

* feat: implement comprehensive testing infrastructure

- Fix image dataURL truncation bug in security.ts with configurable size limits
- Add backend integration tests (22 tests) with Vitest for API validation
- Add frontend unit tests (11 tests) for JSON serialization
- Implement browser-based E2E tests (8 tests) with Playwright
- Create Docker setup for repeatable E2E testing environment
- Add GitHub Actions CI workflow for automated testing
- Update .gitignore for test artifacts and temporary files

Testing Infrastructure:
- Backend: Vitest + Supertest for API integration tests
- Frontend: Vitest + Testing Library for component tests
- E2E: Playwright with Chromium for full browser automation
- CI/CD: GitHub Actions with parallel test execution

Security Improvements:
- Make dataURL size limit configurable (default: 10MB)
- Enhanced validation for image dataURLs
- Block malicious content (javascript:, script tags)

All tests pass: 41 total (22 backend + 11 frontend + 8 E2E)

* feat(tests): add comprehensive E2E tests for dashboard workflows and image persistence
chore(env): update environment variables for consistent API URL usage
fix(api): centralize API request helpers for drawing and collection management
style(DrawingCard): enhance accessibility with ARIA attributes and data-testid for testing

* Add end-to-end tests for drawing CRUD, export/import, search/sort, and theme toggle functionalities

- Implemented E2E tests for drawing creation, editing, and deletion in `drawing-crud.spec.ts`.
- Added tests for export and import features, including JSON and SQLite formats in `export-import.spec.ts`.
- Created tests for searching and sorting drawings by name and date in `search-and-sort.spec.ts`.
- Developed tests for theme toggle functionality to ensure persistence across sessions in `theme-toggle.spec.ts`.

* Update backend/src/__tests__/testUtils.ts

---------

Co-authored-by: Zimeng Xiong <zxzimeng@gmail.com>
* version bump 0.1.8

* fix(ci): consolidate E2E server startup to prevent shell isolation issues

Background processes started with & in separate GitHub Actions run steps
can terminate when those steps complete because each step creates a new
shell. This caused the backend and frontend servers to die before the
E2E tests could run.

Fixed by consolidating server startup and test execution into a single
shell step with:
- Proper PID tracking for cleanup
- Health check loops instead of fixed sleep times
- All processes run in the same shell session

* fix(ci): use absolute database path for E2E tests

* fix(backend): use resolved DATABASE_URL path for export/import endpoints

---------

Co-authored-by: Adrian Acala <adrianacala017@gmail.com>

e2e/playwright.config.ts

@@ -0,0 +1,101 @@
+import { defineConfig, devices } from "@playwright/test";
+
+// Centralized test environment URLs
+const FRONTEND_PORT = 5173;
+const BACKEND_PORT = 8000;
+const FRONTEND_URL = process.env.BASE_URL || `http://localhost:${FRONTEND_PORT}`;
+const BACKEND_URL = process.env.API_URL || `http://localhost:${BACKEND_PORT}`;
+
+/**
+ * Playwright configuration for E2E browser testing
+ * 
+ * Environment variables:
+ * - BASE_URL: Frontend URL (default: http://localhost:5173)
+ * - API_URL: Backend API URL (default: http://localhost:8000)
+ * - HEADED: Run in headed mode (default: false)
+ * - NO_SERVER: Skip starting servers (default: false)
+ */
+export default defineConfig({
+  testDir: "./tests",
+  
+  // Run tests in parallel
+  fullyParallel: true,
+  
+  // Fail the build on test.only() in CI
+  forbidOnly: !!process.env.CI,
+  
+  // Retry on CI only
+  retries: process.env.CI ? 2 : 0,
+  
+  // Limit parallel workers in CI
+  workers: process.env.CI ? 1 : undefined,
+  
+  // Reporter configuration
+  reporter: [
+    ["list"],
+    ["html", { outputFolder: "playwright-report" }],
+  ],
+  
+  // Output folder for test artifacts
+  outputDir: "test-results",
+  
+  // Global timeout for each test
+  timeout: 60000,
+  
+  // Expect timeout
+  expect: {
+    timeout: 10000,
+  },
+  
+  use: {
+    // Base URL for page.goto()
+    baseURL: FRONTEND_URL,
+    
+    // Collect trace on first retry
+    trace: "on-first-retry",
+    
+    // Screenshot on failure
+    screenshot: "only-on-failure",
+    
+    // Video on failure
+    video: "on-first-retry",
+    
+    // Headed mode based on env var
+    headless: process.env.HEADED !== "true",
+  },
+
+  projects: [
+    {
+      name: "chromium",
+      use: { 
+        ...devices["Desktop Chrome"],
+        // Viewport for consistent screenshots
+        viewport: { width: 1280, height: 720 },
+      },
+    },
+  ],
+
+  // Run local dev servers before tests (skip if NO_SERVER or CI)
+  webServer: (process.env.CI || process.env.NO_SERVER) ? undefined : [
+    {
+      command: "cd ../backend && npm run dev",
+      url: `${BACKEND_URL}/health`,
+      reuseExistingServer: true,
+      timeout: 120000,
+      stdout: "pipe",
+      stderr: "pipe",
+      env: {
+        DATABASE_URL: "file:./prisma/dev.db",
+        FRONTEND_URL,
+      },
+    },
+    {
+      command: "cd ../frontend && npm run dev -- --host",
+      url: FRONTEND_URL,
+      reuseExistingServer: true,
+      timeout: 120000,
+      stdout: "pipe",
+      stderr: "pipe",
+    },
+  ],
+});