ci.yml

name: CI

on:
  push:
    branches: ["main"]
  pull_request:
  workflow_dispatch:

concurrency:
  group: ci-${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

jobs:
  checks:
    runs-on: ubuntu-latest
    strategy:
      fail-fast: false
      matrix:
        node-version: ["22"]
    env:
      DATABASE_URL: "postgresql://postgres:postgres@localhost:5432/postgres"
      BETTER_AUTH_SECRET: "ci_dummy_secret_change_me"
      BETTER_AUTH_URL: "http://localhost:3000"
      NEXT_PUBLIC_APP_URL: "http://localhost:3000"
      ENCRYPTION_KEY: "0000000000000000000000000000000000000000000000000000000000000000"
    steps:
      - name: Checkout
        uses: actions/checkout@v6

      - name: Setup Node
        uses: actions/setup-node@v6
        with:
          node-version: ${{ matrix.node-version }}
          cache: "npm"

      - name: Install
        run: npm ci

      - name: Generate
        run: npm run generate

      - name: Type check
        run: npm run type-check

      - name: Lint
        run: npm run lint

      - name: Security policy checks
        run: npm run security:check-api

      - name: Build
        run: npm run build