ci.yml

name: CI

on:
  pull_request:
  push:
    branches:
      - main

permissions:
  contents: read

jobs:
  repository-policy:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: actions/setup-python@v5
        with:
          python-version: "3.12"
          cache: "pip"
      - name: Install dependencies
        run: python -m pip install --upgrade pip && pip install -r requirements-dev.txt
      - name: Run repository policy tests
        run: python -m pytest tests/test_repository.py

  quality:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: actions/setup-node@v4
        with:
          node-version: "22"
      - name: Install dependencies
        run: npm install
      - name: Check formatting
        run: npm run format:check
      - name: Lint source code
        run: npm run lint
      - name: Type-check source code
        run: npm run typecheck
      - name: Run unit and component tests
        run: npm run test
      - name: Build the application
        run: npm run build
      - name: Build API documentation
        run: npm run docs:api
      - name: Build documentation site
        run: npm run docs:site:build
      - name: Upload coverage
        uses: actions/upload-artifact@v4
        with:
          name: coverage-report
          path: coverage

  end-to-end:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: actions/setup-node@v4
        with:
          node-version: "22"
      - name: Install dependencies
        run: npm install
      - name: Build the application
        run: npm run build
      - name: Install Playwright browser
        run: npx playwright install --with-deps chromium
      - name: Run Playwright tests
        run: npm run test:e2e
      - name: Upload Playwright report
        if: always()
        uses: actions/upload-artifact@v4
        with:
          name: playwright-report
          path: playwright-report

  dependency-review:
    if: github.event_name == 'pull_request'
    runs-on: ubuntu-latest
    permissions:
      contents: read
      pull-requests: read
    steps:
      - uses: actions/checkout@v4
      - uses: actions/dependency-review-action@v4
        with:
          fail-on-severity: moderate