ci.yml

name: CI

on:
  push:
    branches: [main]
    paths:
      - 'src/**'
      - 'content/**'
      - 'scripts/**'
      - 'index.html'
      - 'package.json'
      - 'package-lock.json'
      - 'tsconfig*.json'
      - 'vite.config.ts'
      - 'tailwind.config.js'
      - 'postcss.config.js'
      - 'eslint.config.js'
      - '.github/workflows/ci.yml'
  pull_request:
    paths:
      - 'src/**'
      - 'content/**'
      - 'scripts/**'
      - 'index.html'
      - 'package.json'
      - 'package-lock.json'
      - 'tsconfig*.json'
      - 'vite.config.ts'
      - 'tailwind.config.js'
      - 'postcss.config.js'
      - 'eslint.config.js'
      - '.github/workflows/ci.yml'

jobs:
  build:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v7
      - uses: actions/setup-node@v7
        with:
          node-version-file: '.nvmrc'
          cache: npm
      - name: Install dependencies
        run: npm ci
      - name: Check the app config mirrors the model (no drift from the docs)
        run: node scripts/check-app-config.mjs
      - name: Validate content (schema + primary sources + related_advisor ↔ frozen model)
        run: npm run content:validate
      - name: Lint
        run: npm run lint
      - name: Unit tests (scoring engine + exporters)
        run: npm run test
      - name: Production build
        run: npm run build
      - name: Bundle-size budget (gzip JS/CSS)
        run: npm run size
      - name: Audit production dependencies (high/critical)
        run: npm run audit:prod