ci.yml

name: CI

on:
  push:
    branches: [main]
  pull_request:
    branches: [main]
  workflow_dispatch: # manual run button

# least privilege: checkout, build, no write scopes.
permissions:
  contents: read

# cancel superseded runs on the same ref.
concurrency:
  group: ci-${{ github.ref }}
  cancel-in-progress: true

jobs:
  check:
    runs-on: ubuntu-latest

    # ephemeral Postgres for gated DB integration: claim/flush/dedup, money writes, goal deltas.
    # this keeps money correctness checked on every push.
    services:
      postgres:
        image: postgres:16-alpine
        env:
          POSTGRES_PASSWORD: postgres
          POSTGRES_DB: andy_test
        ports:
          - 5432:5432
        options: >-
          --health-cmd pg_isready
          --health-interval 5s
          --health-timeout 5s
          --health-retries 10

    steps:
      - uses: actions/checkout@v4

      - name: Setup Rust
        uses: dtolnay/rust-toolchain@stable
        with:
          components: rustfmt, clippy

      - name: Rust CI gate
        run: cargo xtask ci
        env:
          TEST_DATABASE_URL: postgres://postgres:postgres@localhost:5432/andy_test