add Ci gate, add llm-judgetest

2026-06-30 15:11:57 +09:00
parent 07ac1bdcdd
commit 8793087171
7 changed files with 1137 additions and 85 deletions
@@ -0,0 +1,69 @@
+name: CI
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+    branches: [main]
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  test-backend:
+    name: Backend Tests
+    runs-on: ubuntu-latest
+    defaults:
+      run:
+        working-directory: AINative_OKR_CASAN5/backend
+    env:
+      DATABASE_URL: file:./test.db
+      JWT_SECRET: test-secret
+      # ANTHROPIC_API_KEY enables the LLM-judge gate; tests skip gracefully when absent
+      ANTHROPIC_API_KEY: ${{ secrets.ANTHROPIC_API_KEY }}
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/setup-node@v4
+        with:
+          node-version: '22'
+          cache: npm
+          cache-dependency-path: AINative_OKR_CASAN5/package-lock.json
+
+      - name: Install dependencies
+        working-directory: AINative_OKR_CASAN5
+        run: npm ci
+
+      - name: Setup test database
+        run: npm run db:setup
+
+      - name: Seed test database
+        run: npx prisma db seed
+
+      # Run test files sequentially (--test-concurrency=1) to prevent shared-DB
+      # conflicts between e2e tests that mutate state and services tests that rely on it.
+      - name: Run unit + e2e + LLM-judge tests
+        run: node --import tsx --test-concurrency=1 --test "test/**/*.test.ts"
+
+  test-frontend:
+    name: Frontend Type Check
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/setup-node@v4
+        with:
+          node-version: '22'
+          cache: npm
+          cache-dependency-path: AINative_OKR_CASAN5/package-lock.json
+
+      - name: Install dependencies
+        working-directory: AINative_OKR_CASAN5
+        run: npm ci
+
+      - name: Type check
+        working-directory: AINative_OKR_CASAN5/frontend
+        run: npm test
@@ -0,0 +1,45 @@
+name: Deploy
+
+# Triggers only after CI passes on main — this is the gate
+on:
+  workflow_run:
+    workflows: [CI]
+    branches: [main]
+    types: [completed]
+
+jobs:
+  deploy:
+    name: Deploy to Production
+    runs-on: ubuntu-latest
+    environment: production
+    # Only deploy when CI succeeded — not on failure or cancel
+    if: github.event.workflow_run.conclusion == 'success'
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/setup-node@v4
+        with:
+          node-version: '22'
+          cache: npm
+          cache-dependency-path: AINative_OKR_CASAN5/package-lock.json
+
+      - name: Install dependencies
+        working-directory: AINative_OKR_CASAN5
+        run: npm ci
+
+      - name: Build backend
+        working-directory: AINative_OKR_CASAN5/backend
+        run: npm run build
+
+      - name: Build frontend
+        working-directory: AINative_OKR_CASAN5/frontend
+        run: npm run build
+
+      # TODO: replace with your actual deploy command, e.g.:
+      #   - rsync -av dist/ user@server:/var/www/app/
+      #   - fly deploy
+      #   - vercel --prod
+      #   - aws s3 sync frontend/dist/ s3://your-bucket
+      - name: Deploy
+        run: echo "All tests passed — add deploy commands here"