api-pr.yaml

name: API PR CI

on:
  pull_request:
    branches:
      - main
      - develop
  workflow_dispatch:

permissions:
  contents: read

env:
  NODE_VERSION: '20.x'
  DEV_API_URL: https://dev.api.dfx.swiss

jobs:
  verify-dev-deployment:
    name: Verify DEV Deployment
    if: github.base_ref == 'main' && github.head_ref == 'develop'
    runs-on: ubuntu-latest
    steps:
      - name: Wait for DEV deployment
        timeout-minutes: 15
        run: |
          EXPECTED=${{ github.event.pull_request.head.sha }}
          echo "Expected commit: $EXPECTED"

          if [ -z "$EXPECTED" ] || [ "$EXPECTED" == "null" ]; then
            echo "::error::Could not determine expected commit SHA"
            exit 1
          fi

          for i in {1..30}; do
            if RESPONSE=$(curl -sf ${{ env.DEV_API_URL }}/version 2>&1); then
              ACTUAL=$(echo "$RESPONSE" | jq -r '.commit')
              echo "Attempt $i: DEV running $ACTUAL"

              if [ "$EXPECTED" == "$ACTUAL" ]; then
                echo "DEV is running the latest develop commit"
                exit 0
              fi
            else
              echo "Attempt $i: DEV API not reachable"
            fi

            sleep 30
          done

          echo "::error::DEV is not running the latest develop commit after 15 minutes"
          exit 1

  build:
    name: Build and test
    if: github.head_ref != 'develop'
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Use Node.js ${{ env.NODE_VERSION }}
        uses: actions/setup-node@v4
        with:
          node-version: ${{ env.NODE_VERSION }}
          cache: 'npm'

      - name: Install packages
        uses: nick-fields/retry@v3
        with:
          timeout_minutes: 10
          max_attempts: 3
          retry_on: error
          command: npm ci

      - name: Run linter
        run: npm run lint

      - name: Format check
        run: npm run format:check

      - name: Build code
        run: npm run build

      - name: Run tests
        run: npm run test

      - name: Security audit
        run: npm audit --audit-level=high
        continue-on-error: true