refactor: CI workflow to use node-matrix for backend, frontend, and analytics jobs

Author: cristianFleita

.github/workflows/ci.yml

@@ -25,6 +25,9 @@ on:
       - LICENSE
       - CODE_OF_CONDUCT.md
       - CONTRIBUTING.md
+  schedule:
+    # Nightly full CI run keeps the app checks fresh even without pushes.
+    - cron: "30 2 * * *"
 
 # Cancel any previous in-progress run for the same ref so we don't burn
 # runner minutes on superseded pushes while a PR is iterating.
@@ -80,94 +83,25 @@ jobs:
         run: cargo build --workspace --target wasm32-unknown-unknown --release
 
   backend:
-    name: Backend (NestJS)
-    runs-on: ubuntu-latest
-    defaults:
-      run:
-        working-directory: Backend
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v4
-
-      - name: Setup Node.js
-        uses: actions/setup-node@v4
-        with:
-          node-version-file: .nvmrc
-          cache: npm
-          cache-dependency-path: package-lock.json
-
-      - name: Install dependencies
-        run: npm ci
-
-      - name: Lint
-        run: npm run lint
-
-      - name: Unit tests
-        run: npm test -- --runInBand
-
-      # `nest build` invokes tsc, so this doubles as the typecheck step.
-      - name: Build
-        run: npm run build
+    uses: ./.github/workflows/node-matrix.yml
+    with:
+      app-name: Backend (NestJS)
+      working-directory: Backend
+      verification-command: npm test -- --runInBand
 
   frontend:
-    name: Frontend (Next.js)
-    runs-on: ubuntu-latest
-    defaults:
-      run:
-        working-directory: Frontend
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v4
-
-      - name: Setup Node.js
-        uses: actions/setup-node@v4
-        with:
-          node-version-file: .nvmrc
-          cache: npm
-          cache-dependency-path: package-lock.json
-
-      - name: Install dependencies
-        run: npm ci
-
-      - name: Lint
-        run: npm run lint
-
-      - name: Unit tests
-        run: npm run test
-
-      # Next.js's `build` runs the TypeScript compiler end-to-end, so this
-      # doubles as the typecheck step.
-      - name: Build
-        run: npm run build
+    uses: ./.github/workflows/node-matrix.yml
+    with:
+      app-name: Frontend (Next.js)
+      working-directory: Frontend
+      verification-command: npm run test
 
   analytics:
-    name: Analytics (Next.js)
-    runs-on: ubuntu-latest
-    defaults:
-      run:
-        working-directory: analytics
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v4
-
-      - name: Setup Node.js
-        uses: actions/setup-node@v4
-        with:
-          node-version-file: .nvmrc
-          cache: npm
-          cache-dependency-path: package-lock.json
-
-      - name: Install dependencies
-        run: npm ci
-
-      - name: Lint
-        run: npm run lint
-
-      - name: Typecheck
-        run: npm run typecheck
-
-      - name: Build
-        run: npm run build
+    uses: ./.github/workflows/node-matrix.yml
+    with:
+      app-name: Analytics (Next.js)
+      working-directory: analytics
+      verification-command: npm run typecheck
 
   terraform-fmt:
     name: Terraform fmt

.github/workflows/node-matrix.yml

@@ -0,0 +1,48 @@
+name: Node Matrix
+
+on:
+  workflow_call:
+    inputs:
+      app-name:
+        required: true
+        type: string
+      working-directory:
+        required: true
+        type: string
+      verification-command:
+        required: true
+        type: string
+
+permissions:
+  contents: read
+
+jobs:
+  node:
+    name: ${{ inputs.app-name }}
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version-file: ${{ inputs.working-directory }}/.nvmrc
+          cache: npm
+          cache-dependency-path: ${{ inputs.working-directory }}/package-lock.json
+
+      - name: Install dependencies
+        working-directory: ${{ inputs.working-directory }}
+        run: npm ci
+
+      - name: Lint
+        working-directory: ${{ inputs.working-directory }}
+        run: npm run lint
+
+      - name: Verify
+        working-directory: ${{ inputs.working-directory }}
+        run: ${{ inputs.verification-command }}
+
+      - name: Build
+        working-directory: ${{ inputs.working-directory }}
+        run: npm run build