ci.yml

name: CI

on:
  push:
    branches: ["main", "develop"]
  pull_request:
    branches: ["main", "develop"]
  workflow_dispatch:

# Cancel an in-progress CI run when a new push hits the same branch/PR
concurrency:
  group: ci-${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

permissions:
  contents: read

env:
  NODE_VERSION: "22"

jobs:
  build-and-test:
    name: Lint, Typecheck, Build & Test
    runs-on: ubuntu-latest
    timeout-minutes: 20

    # Service containers for DB-dependent tests (Prisma / integration)
    services:
      postgres:
        image: postgres:16
        env:
          POSTGRES_USER: msk
          POSTGRES_PASSWORD: msk
          POSTGRES_DB: msk_forms_test
        ports:
          - 5432:5432
        options: >-
          --health-cmd "pg_isready -U msk"
          --health-interval 10s
          --health-timeout 5s
          --health-retries 5
      redis:
        image: redis:7
        ports:
          - 6379:6379
        options: >-
          --health-cmd "redis-cli ping"
          --health-interval 10s
          --health-timeout 5s
          --health-retries 5

    env:
      DATABASE_URL: "postgresql://msk:msk@localhost:5432/msk_forms_test?schema=public"
      REDIS_URL: "redis://localhost:6379"

    steps:
      - name: Checkout
        uses: actions/checkout@v7

      - name: Setup pnpm
        # Version is read from the "packageManager" field in package.json.
        # (action-setup@v6 also forbids passing the "version" input.)
        uses: pnpm/action-setup@v6

      - name: Setup Node.js
        uses: actions/setup-node@v7
        with:
          node-version: ${{ env.NODE_VERSION }}
          cache: "pnpm"

      - name: Install dependencies
        run: pnpm install --frozen-lockfile

      - name: Prisma generate & validate
        run: |
          pnpm prisma generate
          pnpm prisma validate

      - name: Apply migrations to test DB
        run: pnpm prisma migrate deploy

      - name: Lint
        run: pnpm run lint

      - name: Typecheck
        run: pnpm run typecheck

      - name: Unit & Integration Tests
        run: pnpm run test

      - name: Build
        run: pnpm run build