name: CI
on:
  push:
    branches: [main]
  pull_request:

env:
  PIP_INDEX_URL: https://mirrors.aliyun.com/pypi/simple/
  PIP_TRUSTED_HOST: mirrors.aliyun.com
  NPM_CONFIG_REGISTRY: https://registry.npmmirror.com

jobs:
  test:
    runs-on: agenteval-ci
    steps:
      # 不用 actions/checkout（依赖 GitHub，国内不可达）。手动 clone：
      # secrets.GITHUB_TOKEN 由 Gitea 自动注入，仅对本仓库有效的临时 token。
      - name: Checkout (manual git clone, no actions/checkout)
        shell: bash
        run: |
          set -euo pipefail
          git clone "https://x-access-token:${{ secrets.GITHUB_TOKEN }}@git.solahqb22.cn/${{ github.repository }}.git" .
          git checkout --detach "$GITHUB_SHA"
          git --no-pager log -1 --oneline

      - name: Install backend deps
        run: pip install --no-cache-dir -e ".[dev]"

      - name: Install frontend deps
        working-directory: frontend/web
        run: npm ci --no-audit --no-fund

      # 唯一检查入口：版本一致性 → ruff → pytest → tsc（node_modules 已装，不会跳过）
      - name: CI checks (version / ruff / pytest / tsc)
        run: scripts/ci-check.sh