ci.yml

name: CI

on:
  push:
    branches:
      - main
      - staging
      - experiment
  pull_request:
    branches:
      - main
      - staging

concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

jobs:
  build-and-test:
    name: Build and Test
    runs-on: ubuntu-latest

    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Setup pnpm
        uses: pnpm/action-setup@v4
        with:
          version: 9.15.3

      - name: Setup Node.js
        uses: actions/setup-node@v4
        with:
          node-version: 22

      - name: Get pnpm store directory
        id: pnpm-cache
        run: echo "store=$(pnpm store path)" >> $GITHUB_OUTPUT

      - name: Cache pnpm store
        uses: actions/cache@v4
        with:
          path: ${{ steps.pnpm-cache.outputs.store }}
          key: pnpm-store-${{ runner.os }}-${{ hashFiles('**/pnpm-lock.yaml') }}
          restore-keys: pnpm-store-${{ runner.os }}-

      - name: Install dependencies
        run: pnpm install --no-frozen-lockfile

      - name: Build packages
        run: pnpm --filter './packages/*' run build

      - name: Test packages
        run: pnpm --filter './packages/*' run test --passWithNoTests

      # The gateway fronts every /v1/* request and decides what is reachable
      # without a credential, but nothing here used to exercise it — a broken
      # public-route list reached production unnoticed. Staging cannot catch
      # this either: it has no gateway in front of it.
      - name: Test API gateway
        run: pnpm --filter commons-api-gateway run test