From b6833f2b7bd68c3c05840e6c9e09ebe9f4be760c Mon Sep 17 00:00:00 2001
From: Herculino Trotta <hello@herculino.com>
Date: Sat, 24 Oct 2026 13:57:25 -0300
Subject: [PATCH 1/2] ci: run Django test suite on pull requests

---
 .github/workflows/tests.yml | 69 +++++++++++++++++++++++++++++++++++++
 1 file changed, 69 insertions(+)
 create mode 100644 .github/workflows/tests.yml

diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
new file mode 100644
index 00000000..fd1a247f
--- /dev/null
+++ b/.github/workflows/tests.yml
@@ -0,0 +1,69 @@
+name: Tests
+
+on:
+  pull_request:
+  push:
+    branches: [ main ]
+  workflow_dispatch:
+
+# Cancel superseded runs on the same PR/branch
+concurrency:
+  group: tests-${{ github.ref }}
+  cancel-in-progress: true
+
+permissions:
+  contents: read
+
+jobs:
+  django-tests:
+    runs-on: ubuntu-latest
+    timeout-minutes: 20
+
+    services:
+      db:
+        image: postgres:15
+        env:
+          POSTGRES_USER: wygiwyh
+          POSTGRES_PASSWORD: wygiwyh
+          POSTGRES_DB: wygiwyh
+        ports:
+          - 5432:5432
+        options: >-
+          --health-cmd "pg_isready -U wygiwyh"
+          --health-interval 5s
+          --health-timeout 5s
+          --health-retries 10
+
+    env:
+      SECRET_KEY: ci-only-not-secret
+      SQL_DATABASE: wygiwyh
+      SQL_USER: wygiwyh
+      SQL_PASSWORD: wygiwyh
+      SQL_HOST: localhost
+      SQL_PORT: 5432
+      # Emit dev-server script tags instead of reading the Vite manifest,
+      # so the frontend doesn't need to be built to render templates
+      DJANGO_VITE_DEV_MODE: "true"
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Install uv
+        uses: astral-sh/setup-uv@v5
+        with:
+          enable-cache: true
+
+      - name: Set up Python 3.14
+        run: uv python install 3.14
+
+      - name: Install dependencies
+        run: uv sync --frozen
+
+      - name: Check for missing migrations
+        working-directory: app
+        run: uv run python manage.py makemigrations --check --dry-run
+
+      - name: Run tests
+        working-directory: app
+        run: uv run python manage.py test --parallel auto --noinput

From 5468d17e209d99cf8e3b5a3584a5e7ba3209901d Mon Sep 17 00:00:00 2001
From: Herculino Trotta <hello@herculino.com>
Date: Sat, 24 Oct 2026 14:01:47 -0300
Subject: [PATCH 2/2] ci: provide container paths and a clean TMPDIR for tests

test(transactions): enable soft delete explicitly in the hard-delete attachment test
---
 .github/workflows/tests.yml                     | 10 ++++++++++
 app/apps/transactions/tests/test_attachments.py |  1 +
 2 files changed, 11 insertions(+)

diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
index fd1a247f..2a704fa5 100644
--- a/.github/workflows/tests.yml
+++ b/.github/workflows/tests.yml
@@ -60,10 +60,20 @@ jobs:
       - name: Install dependencies
         run: uv sync --frozen
 
+      # Import code reads/writes the Docker image's paths directly
+      - name: Create container paths used by the app
+        run: |
+          sudo mkdir -p /usr/src/app/temp /usr/src/app/import_presets
+          sudo chown -R "$(id -u):$(id -g)" /usr/src/app
+
       - name: Check for missing migrations
         working-directory: app
         run: uv run python manage.py makemigrations --check --dry-run
 
       - name: Run tests
         working-directory: app
+        env:
+          # Some tests point STATIC_ROOT at the temp dir; the runner's /tmp
+          # holds root-only systemd dirs that WhiteNoise can't scan
+          TMPDIR: ${{ runner.temp }}
         run: uv run python manage.py test --parallel auto --noinput
diff --git a/app/apps/transactions/tests/test_attachments.py b/app/apps/transactions/tests/test_attachments.py
index 52f118a1..338361e6 100644
--- a/app/apps/transactions/tests/test_attachments.py
+++ b/app/apps/transactions/tests/test_attachments.py
@@ -193,6 +193,7 @@ class TransactionAttachmentTests(TestCase):
             TransactionAttachment.objects.filter(id=attachment.id).exists()
         )
 
+    @override_settings(ENABLE_SOFT_DELETE=True)
     def test_hard_deleting_transaction_deletes_attachment_files(self):
         attachment = TransactionAttachment.objects.create(
             transaction=self.transaction,