ci.yml

name: CI Quality Gate

on:
  push:
    branches: [main]
  pull_request:
    branches: [main]
  workflow_dispatch:

concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

jobs:
  python-test:
    name: Python Edge Daemons & Tests
    runs-on: ubuntu-latest
    steps:
      - name: Checkout repository
        uses: actions/checkout@v4

      - name: Set up Python
        uses: actions/setup-python@v5
        with:
          python-version: "3.11"

      - name: Install dependencies
        run: |
          python -m pip install --upgrade pip
          pip install pytest requests

      - name: Run Python Test Suite
        run: |
          python -m pytest tests/ -v

  web-check:
    name: Web Portal Build & Typecheck
    runs-on: ubuntu-latest
    defaults:
      run:
        working-directory: source
    steps:
      - name: Checkout repository
        uses: actions/checkout@v4

      - name: Set up Node.js
        uses: actions/setup-node@v4
        with:
          node-version: "20"
          cache: "npm"
          cache-dependency-path: source/package-lock.json

      - name: Install dependencies
        run: npm install --legacy-peer-deps

      - name: TypeScript Verification
        run: npx tsc --noEmit

      - name: Production Next.js Build
        run: npm run build
        env:
          NODE_ENV: production
          JWT_SECRET: ci-test-token-secret-must-be-at-least-32-chars-long