proctor: BACKLOG — record Dependabot uuid fix + reproducible-build fo… #61

	name: CI

	on:
	push:
	branches: ["**"]
	pull_request:

	jobs:
	test:
	name: build + test (Node 22)
	runs-on: ubuntu-latest

	steps:
	- name: Checkout
	uses: actions/checkout@v4

	- name: Set up Node
	uses: actions/setup-node@v4
	with:
	node-version: "22"
	cache: "npm"

	- name: Install dependencies
	run: npm ci

	- name: Backend tests
	run: npm test --workspace backend

	- name: Frontend tests
	run: npx vitest run
	working-directory: frontend

	- name: Frontend build
	run: npx vite build
	working-directory: frontend
	env:
	# CI build-check only — this bundle is never deployed. The build-config
	# guard (vite-plugin-build-config.ts) requires the password hashes, the
	# backend API URL, AND the eval-service URL for any production build;
	# provide placeholders so the compile-check passes. Real deploys bake the
	# real values from .env.deploy.local and the guard aborts if they're
	# missing.
	ADMIN_PASSWORD: ci-build-check-placeholder
	INVIGILATOR_PASSWORD: ci-build-check-placeholder
	API_URL: https://ci-build-check.invalid
	# EVAL_API_URL must be https:// — the guard's evalUrlHttpsError rejects a
	# plaintext eval URL. Placeholder only; never reached at runtime in CI.
	EVAL_API_URL: https://ci-build-check.invalid

Provide feedback