ci.yml

name: CI

on:
  push:
    branches:
      - dev
    paths:
      - "apps/backend/**"
      - "packages/drf-std-response/**"
      - "docs/contributors/**"
      - "docs/alienmark/**"
      - "docs/users/**"
      - "apps/alienmark/**"
      - "apps/frontend/**"
      - "packages/alienmark/**"
      - "LICENSE"
      - "COPYING.md"
      - "branding/LICENSE"
      - ".github/assets/**"
      - "scripts/check-licenses.mjs"
      - "package.json"
      - "pnpm-lock.yaml"
      - "pnpm-workspace.yaml"
      - "knip.jsonc"
      - "turbo.json"
      - "vite.config.ts"
      - "make/node.mk"
      - "make/docker.mk"
      - "infra/**"
      - "env/.env.proxy.example"
      - "pyproject.toml"
      - "uv.lock"
      - ".github/workflows/ci.yml"
  pull_request:
    branches:
      - dev
    paths:
      - "apps/backend/**"
      - "packages/drf-std-response/**"
      - "docs/contributors/**"
      - "docs/alienmark/**"
      - "docs/users/**"
      - "apps/alienmark/**"
      - "apps/frontend/**"
      - "packages/alienmark/**"
      - "LICENSE"
      - "COPYING.md"
      - "branding/LICENSE"
      - ".github/assets/**"
      - "scripts/check-licenses.mjs"
      - "package.json"
      - "pnpm-lock.yaml"
      - "pnpm-workspace.yaml"
      - "knip.jsonc"
      - "turbo.json"
      - "vite.config.ts"
      - "make/node.mk"
      - "make/docker.mk"
      - "infra/**"
      - "env/.env.proxy.example"
      - "pyproject.toml"
      - "uv.lock"
      - ".github/workflows/ci.yml"

permissions:
  contents: read

jobs:
  changes:
    runs-on: ubuntu-latest
    permissions:
      contents: read
      pull-requests: read
    outputs:
      backend: ${{ steps.filter.outputs.backend }}
      docs-contributors: ${{ steps.filter.outputs.docs-contributors }}
      docs-alienmark: ${{ steps.filter.outputs.docs-alienmark }}
      docs-users: ${{ steps.filter.outputs.docs-users }}
      node: ${{ steps.filter.outputs.node }}
      infra: ${{ steps.filter.outputs.infra }}
      workflow: ${{ steps.filter.outputs.workflow }}

    steps:
      - name: Checkout repository
        uses: actions/checkout@v7

      - name: Detect changed CI areas
        id: filter
        uses: dorny/paths-filter@v4
        with:
          filters: |
            backend:
              - 'apps/backend/**'
              - 'packages/drf-std-response/**'
              - 'pyproject.toml'
              - 'uv.lock'
            docs-contributors:
              - 'docs/contributors/**'
              - 'pyproject.toml'
              - 'uv.lock'
            docs-alienmark:
              - 'docs/alienmark/**'
              - 'pyproject.toml'
              - 'uv.lock'
            docs-users:
              - 'docs/users/**'
              - 'pyproject.toml'
              - 'uv.lock'
            node:
              - 'apps/alienmark/**'
              - 'apps/frontend/**'
              - 'packages/alienmark/**'
              - 'LICENSE'
              - 'COPYING.md'
              - 'branding/LICENSE'
              - '.github/assets/**'
              - 'scripts/check-licenses.mjs'
              - 'package.json'
              - 'pnpm-lock.yaml'
              - 'pnpm-workspace.yaml'
              - 'knip.jsonc'
              - 'turbo.json'
              - 'vite.config.ts'
              - 'make/node.mk'
            infra:
              - 'infra/**'
              - 'make/docker.mk'
              - 'env/.env.proxy.example'
            workflow:
              - '.github/workflows/ci.yml'

  backend-lint:
    runs-on: ubuntu-latest
    needs: changes
    if: needs.changes.outputs.backend == 'true' || needs.changes.outputs.workflow == 'true'

    defaults:
      run:
        working-directory: apps/backend

    steps:
      - name: Checkout repository
        uses: actions/checkout@v7

      - name: Set up Python
        uses: actions/setup-python@v7
        with:
          python-version: "3.14"

      - name: Install uv
        uses: astral-sh/setup-uv@v7
        with:
          version: "0.11.23"
          enable-cache: true
          working-directory: .
          cache-suffix: backend-lint

      - name: Install lint dependencies
        run: uv sync --project ../.. --locked --dev --package aliencommons-backend

      - name: Run Ruff
        run: >
          uv run --project ../.. --package aliencommons-backend ruff check
          articles
          bookmarks
          comments
          backend
          core
          logs
          notifications
          posts
          reactions
          reports
          tasks
          users
          manage.py

  backend-tests:
    runs-on: ubuntu-latest
    needs: changes
    if: needs.changes.outputs.backend == 'true' || needs.changes.outputs.workflow == 'true'

    defaults:
      run:
        working-directory: apps/backend

    steps:
      - name: Checkout repository
        uses: actions/checkout@v7

      - name: Set up Python
        uses: actions/setup-python@v7
        with:
          python-version: "3.14"

      - name: Install uv
        uses: astral-sh/setup-uv@v7
        with:
          version: "0.11.23"
          enable-cache: true
          working-directory: .
          cache-suffix: backend-tests

      - name: Install backend dependencies
        run: uv sync --project ../.. --locked --dev --package aliencommons-backend

      - name: Run Backend tests
        env:
          DJANGO_SETTINGS_MODULE: backend.settings.test
        run: uv run --project ../.. --package aliencommons-backend python manage.py test

  node:
    runs-on: ubuntu-latest
    needs: changes
    if: needs.changes.outputs.node == 'true' || needs.changes.outputs.workflow == 'true'

    steps:
      - name: Checkout repository
        uses: actions/checkout@v7

      - name: Set up pnpm
        uses: pnpm/action-setup@v6
        with:
          run_install: false

      - name: Set up Node.js
        uses: actions/setup-node@v7
        with:
          node-version: "24"
          cache: "pnpm"
          cache-dependency-path: pnpm-lock.yaml

      - name: Enable Corepack
        run: corepack enable

      - name: Install workspace dependencies
        run: pnpm install --frozen-lockfile

      - name: Run Node checks
        run: pnpm run check

      - name: Audit repository licenses
        run: pnpm run license:check

  infra:
    runs-on: ubuntu-latest
    needs: changes
    if: needs.changes.outputs.infra == 'true' || needs.changes.outputs.workflow == 'true'

    steps:
      - name: Checkout repository
        uses: actions/checkout@v7

      - name: Prepare non-secret Compose validation environments
        run: |
          cp env/.env.dev env/.env.stg
          cp env/.env.dev env/.env.pro

      - name: Validate proxy Compose configuration
        env:
          TRAEFIK_ACME_EMAIL: ci@aliencommons.invalid
        run: docker compose -f infra/compose/docker-compose.proxy.yml config --quiet

      - name: Validate staging Compose configuration
        env:
          GRAFANA_ADMIN_PASSWORD: ci-only
        run: >-
          docker compose --env-file env/.env.stg
          -f infra/compose/docker-compose.base.yml
          -f infra/compose/docker-compose.stg.yml
          config --quiet

      - name: Validate production Compose configuration
        env:
          GRAFANA_ADMIN_PASSWORD: ci-only
        run: >-
          docker compose --env-file env/.env.pro
          -f infra/compose/docker-compose.base.yml
          -f infra/compose/docker-compose.pro.yml
          config --quiet

  docs-contributors:
    runs-on: ubuntu-latest
    needs: changes
    if: needs.changes.outputs.docs-contributors == 'true' || needs.changes.outputs.workflow == 'true'

    defaults:
      run:
        working-directory: docs/contributors

    steps:
      - name: Checkout repository
        uses: actions/checkout@v7

      - name: Set up Python
        uses: actions/setup-python@v7
        with:
          python-version: "3.14"

      - name: Install uv
        uses: astral-sh/setup-uv@v7
        with:
          version: "0.11.23"
          enable-cache: true
          working-directory: .
          cache-suffix: docs-validate-contributors

      - name: Install documentation dependencies
        run: uv sync --project ../.. --locked --package aliencommons-contributor-docs

      - name: Build and validate English Zensical site
        run: uv run --project ../.. --package aliencommons-contributor-docs zensical build --strict

      - name: Build and validate Chinese Zensical site
        run: uv run --project ../.. --package aliencommons-contributor-docs zensical build --strict --config-file zensical.zh.toml

  docs-alienmark:
    runs-on: ubuntu-latest
    needs: changes
    if: needs.changes.outputs.docs-alienmark == 'true' || needs.changes.outputs.workflow == 'true'

    defaults:
      run:
        working-directory: docs/alienmark

    steps:
      - name: Checkout repository
        uses: actions/checkout@v7

      - name: Set up Python
        uses: actions/setup-python@v7
        with:
          python-version: "3.14"

      - name: Install uv
        uses: astral-sh/setup-uv@v7
        with:
          version: "0.11.23"
          enable-cache: true
          working-directory: .
          cache-suffix: docs-validate-alienmark

      - name: Install documentation dependencies
        run: uv sync --project ../.. --locked --package alienmark-docs

      - name: Build and validate English Zensical site
        run: uv run --project ../.. --package alienmark-docs zensical build --strict

      - name: Build and validate Chinese Zensical site
        run: uv run --project ../.. --package alienmark-docs zensical build --strict --config-file zensical.zh.toml

  docs-users:
    runs-on: ubuntu-latest
    needs: changes
    if: needs.changes.outputs.docs-users == 'true' || needs.changes.outputs.workflow == 'true'

    defaults:
      run:
        working-directory: docs/users

    steps:
      - name: Checkout repository
        uses: actions/checkout@v7

      - name: Set up Python
        uses: actions/setup-python@v7
        with:
          python-version: "3.14"

      - name: Install uv
        uses: astral-sh/setup-uv@v7
        with:
          version: "0.11.23"
          enable-cache: true
          working-directory: .
          cache-suffix: docs-validate-users

      - name: Install documentation dependencies
        run: uv sync --project ../.. --locked --package aliencommons-user-guide

      - name: Build and validate English Zensical site
        run: uv run --project ../.. --package aliencommons-user-guide zensical build --strict

      - name: Build and validate Chinese Zensical site
        run: uv run --project ../.. --package aliencommons-user-guide zensical build --strict --config-file zensical.zh.toml