name: CI

on:
  push:
    branches:
      - main
      - "feat/**"
      - "fix/**"
  pull_request:
    branches:
      - main

jobs:
  check:
    runs-on: ubuntu-latest
    
    env:
      SKIP_ENV_VALIDATION: 1
      ARGON2_MEMORY_SIZE: 1024
      ARGON2_ITERATIONS: 1
      BCRYPT_ROUNDS: 4
      DATABASE_URL: "mysql://ci:dummy@127.0.0.1:3306/ci"

    steps:
      - name: Checkout code
        uses: actions/checkout@v4

      - name: Setup Node.js
        uses: actions/setup-node@v4
        with:
          node-version: 22

      - name: Setup PNPM
        uses: pnpm/action-setup@v4
        with:
          version: 10

      - name: Install dependencies
        run: pnpm install --frozen-lockfile

      - name: Generate Prisma Client
        run: pnpm prisma:generate

      - name: Security Audit
        run: pnpm audit --audit-level=high || echo "WARNING: pnpm audit found vulnerabilities"

      - name: Biome Linter
        run: pnpm biome:lint

      - name: TypeScript Typecheck
        run: pnpm typecheck

      - name: Run Tests
        run: pnpm test