ci.yml

name: CI

on:
  push:
    branches: [main]
  pull_request:
    branches: [main]

permissions:
  contents: read

concurrency:
  group: ci-${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

jobs:
  frontend-test:
    name: Frontend tests
    runs-on: ubuntu-latest
    defaults:
      run:
        working-directory: frontend
    steps:
      - uses: actions/checkout@v7

      - uses: actions/setup-node@v6
        with:
          node-version: "20"
          cache: yarn
          cache-dependency-path: frontend/yarn.lock

      - name: Install dependencies
        run: yarn install --frozen-lockfile

      - name: Run Jest (CI)
        run: yarn test:ci

  backend-test:
    name: Backend tests
    runs-on: ubuntu-latest
    services:
      mongo:
        image: mongo:7
        ports:
          - 27017:27017
        options: >-
          --health-cmd "mongosh --eval 'db.adminCommand({ ping: 1 })'"
          --health-interval 10s
          --health-timeout 5s
          --health-retries 5
      redis:
        image: redis:7-alpine
        ports:
          - 6379:6379
        options: >-
          --health-cmd "redis-cli ping"
          --health-interval 10s
          --health-timeout 5s
          --health-retries 5
    env:
      REACT_APP_BACKEND_URL: http://127.0.0.1:8000
    defaults:
      run:
        working-directory: backend
    steps:
      - uses: actions/checkout@v7

      - uses: actions/setup-python@v6
        with:
          python-version: "3.12"
          cache: pip
          cache-dependency-path: backend/requirements.txt

      - name: Install dependencies
        run: pip install -r requirements.txt

      - name: Write CI .env
        run: |
          cat > .env <<'EOF'
          MONGO_URL=mongodb://127.0.0.1:27017/?directConnection=true
          DB_NAME=ssc-ci
          JWT_SECRET=ci-only-jwt-secret-not-for-production
          CONTACT_GRAPH_PEPPER=ci-only-contact-graph-pepper
          REDIS_URL=redis://localhost:6379/0
          ENV=development
          LOG_LEVEL=WARNING
          EOF

      - name: Run pytest with live API
        run: |
          uvicorn server:app --host 127.0.0.1 --port 8000 &
          for i in $(seq 1 60); do
            if curl -sf http://127.0.0.1:8000/api/health >/dev/null; then
              echo "API ready"
              break
            fi
            if [ "$i" -eq 60 ]; then
              echo "API failed to start"
              exit 1
            fi
            sleep 2
          done
          python -m pytest tests/ -q --timeout=120