name: CI - Lint, Typecheck & Test

on:
  pull_request:

concurrency:
  group: deploy-pipeline
  cancel-in-progress: true

jobs:
  quality-assurance:
    runs-on: docker
    container:
      image: catthehacker/ubuntu:act-latest
    steps:
      - name: Checkout repository
        uses: actions/checkout@v4

      - name: Setup pnpm
        uses: pnpm/action-setup@v3
        with:
          version: 10

      - name: Setup Node.js
        uses: actions/setup-node@v4
        with:
          node-version: 20

      - name: 🔍 Secret Diagnostics
        run: |
          echo "Checking available secrets..."
          [ -n "${{ secrets.NPM_TOKEN }}" ] && echo "✅ NPM_TOKEN is set" || echo "❌ NPM_TOKEN is empty"
          [ -n "${{ secrets.GITEA_PAT }}" ] && echo "✅ GITEA_PAT is set" || echo "❌ GITEA_PAT is empty"
          [ -n "${{ secrets.MINTEL_PRIVATE_TOKEN }}" ] && echo "✅ MINTEL_PRIVATE_TOKEN is set" || echo "❌ MINTEL_PRIVATE_TOKEN is empty"
          [ -n "${{ secrets.MINTEL_REGISTRY_TOKEN }}" ] && echo "✅ MINTEL_REGISTRY_TOKEN is set" || echo "❌ MINTEL_REGISTRY_TOKEN is empty"

      - name: 🔐 Registry Auth
        env:
          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
          GITEA_PAT: ${{ secrets.GITEA_PAT }}
          MINTEL_PRIVATE_TOKEN: ${{ secrets.MINTEL_PRIVATE_TOKEN }}
          MINTEL_REGISTRY_TOKEN: ${{ secrets.MINTEL_REGISTRY_TOKEN }}
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        run: bash scripts/registry-auth.sh

      - name: Install dependencies
        run: pnpm install --no-frozen-lockfile

      - name: 🧪 QA Checks
        env:
          TURBO_TELEMETRY_DISABLED: "1"
        run: npx turbo run lint typecheck test --cache-dir=".turbo"

      - name: 🏗️ Build
        run: pnpm build