fix: triple-review majors — ALERT-2 recovery bound (M3) + BANK-1 dedu… #49

	name: CI

	on:
	push:
	branches: ["**"]
	pull_request:

	jobs:
	test:
	name: build + test (Node 22)
	runs-on: ubuntu-latest

	steps:
	- name: Checkout
	uses: actions/checkout@v4

	- name: Set up Node
	uses: actions/setup-node@v4
	with:
	node-version: "22"
	cache: "npm"

	- name: Install dependencies
	run: npm ci

	- name: Backend tests
	run: npm test --workspace backend

	- name: Frontend tests
	run: npx vitest run
	working-directory: frontend

	- name: Frontend build
	run: npx vite build
	working-directory: frontend
	env:
	# CI build-check only — this bundle is never deployed. The build-config
	# guard (vite-plugin-build-config.ts) requires the password hashes + API
	# URL for any production build; provide placeholders so the compile-check
	# passes. Real deploys bake the real values from .env.deploy.local and the
	# guard aborts if they're missing.
	ADMIN_PASSWORD: ci-build-check-placeholder
	INVIGILATOR_PASSWORD: ci-build-check-placeholder
	API_URL: https://ci-build-check.invalid

Provide feedback