ci.yml

name: CI

# pull_request: validates every PR branch. push: only default branches — avoids duplicate
# runs when both fire for the same change (push to feat/* also opens/syncs a PR).
on:
  pull_request:
  push:
    branches:
      - master
      - main

concurrency:
  group: ci-${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

jobs:
  test-lint-build:
    runs-on: ubuntu-latest
    timeout-minutes: 15
    env:
      DATABASE_URL: postgresql://user:password@example.com/clawproxy
      ENCRYPTION_KEY: '0000000000000000000000000000000000000000000000000000000000000000'
    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Setup Node.js
        uses: actions/setup-node@v4
        with:
          node-version: 22

      - name: Enable Corepack (Yarn from packageManager)
        run: corepack enable

      - name: Install dependencies
        run: yarn install --immutable

      - name: Run tests with coverage
        run: yarn test:coverage

      - name: Run linter
        run: yarn lint

      - name: Run production build
        run: yarn build

  docker-build:
    runs-on: ubuntu-latest
    timeout-minutes: 15
    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3

      - name: Build Docker image
        uses: docker/build-push-action@v6
        with:
          context: .
          push: false
          build-args: |
            DATABASE_URL=postgresql://user:password@example.com/clawproxy
          cache-from: type=gha
          cache-to: type=gha,mode=max