ci.yml

name: CI

on:
  push:
    branches: [main]
  pull_request:
    branches: [main]

jobs:
  build:
    name: Build & Verify
    runs-on: ubuntu-latest

    services:
      mongo:
        image: mongo:7
        ports:
          - 27017:27017

    steps:
      - uses: actions/checkout@v4
        with:
          persist-credentials: false

      - uses: actions/setup-node@v4
        with:
          node-version: "22"

      - name: Configure private dep access
        env:
          TOKEN: ${{ secrets.HTMLTRUST_PKG_TOKEN }}
        run: |
          git config --global url."https://x-access-token:${TOKEN}@github.com/".insteadOf "https://github.com/"
          git config --global url."https://x-access-token:${TOKEN}@github.com/".insteadOf "ssh://git@github.com/"

      - name: Install dependencies
        run: npm ci

      - name: Verify server starts
        env:
          MONGO_URI: mongodb://localhost:27017/htmltrust-test
          PORT: "3000"
          GENERAL_API_KEY: test_general_key
          ADMIN_API_KEY: test_admin_key
          NODE_ENV: test
        run: |
          timeout 10 node src/server.js &
          sleep 3
          curl -sf http://localhost:3000/ > /dev/null && echo "Server started successfully"
          kill %1 2>/dev/null || true

      - name: Validate OpenAPI spec
        run: npx @redocly/cli lint openapi.yaml --skip-rule no-unused-components || true

      - uses: actions/upload-artifact@v4
        with:
          name: server-package
          path: |
            src/
            openapi.yaml
            package.json
            package-lock.json
            .env.example