ci.yml

name: CI

on:
  push:
    branches: [main]
  pull_request:
    branches: [main]

jobs:
  quality:
    runs-on: ubuntu-latest

    services:
      postgres:
        image: pgvector/pgvector:pg16
        env:
          POSTGRES_USER: test
          POSTGRES_PASSWORD: test
          POSTGRES_DB: test
        options: >-
          --health-cmd pg_isready
          --health-interval 10s
          --health-timeout 5s
          --health-retries 5
        ports:
          - 5432:5432

    env:
      DATABASE_URL: postgresql://test:test@localhost:5432/test
      BETTER_AUTH_SECRET: ci-test-secret-minimum-32-characters-long
      GOOGLE_API_KEY: ci-placeholder-key
      SKIP_ENV_VALIDATION: 'true'

    steps:
      - uses: actions/checkout@v7

      - uses: pnpm/action-setup@v4
        with:
          version: 10

      - uses: actions/setup-node@v4
        with:
          node-version: '20'
          cache: 'pnpm'

      - name: Install dependencies
        run: pnpm install --frozen-lockfile

      - name: Generate Prisma client
        run: pnpm exec prisma generate

      - name: Run migrations
        run: pnpm exec prisma migrate deploy

      - name: Lint
        run: pnpm lint

      - name: Audit dependencies
        run: pnpm audit --audit-level=high
        continue-on-error: true

      - name: Typecheck
        run: pnpm exec vue-tsc --noEmit

      - name: Unit tests with coverage
        run: pnpm test:coverage

      - name: Eval harness (schema)
        run: pnpm eval

      - name: Build
        run: pnpm build