name: CI

on:
  push:
    branches: [main]
  pull_request:
    branches: [main]

jobs:
  ci:
    runs-on: ubuntu-latest
    container:
      image: git.librete.ch/public/runner-image:v0.1.0@sha256:9d1e204fe8e06b7d16cdc8da0c7077fa4171daef62099cc8c09993834e576ca5
    timeout-minutes: 10
    steps:
      - uses: actions/checkout@v4

      - name: Cache npm
        uses: actions/cache@v4
        with:
          path: ~/.npm
          key: npm-${{ hashFiles('package-lock.json') }}
          restore-keys: npm-

      - name: Install
        run: npm ci --no-audit --no-fund

      - name: Test
        run: npm test

      - name: Build (sanity)
        env:
          # Build needs VITE_* injected at compile time. Use placeholders
          # for CI sanity build — real values are passed at deploy time.
          VITE_SUPABASE_URL: https://example.invalid
          VITE_SUPABASE_ANON_KEY: ci-placeholder
        run: npm run build