ci.yml

name: CI

on:
  push:
    branches: [main]
  pull_request:

permissions:
  contents: read

concurrency:
  group: ci-${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

jobs:
  verify:
    runs-on: ubuntu-24.04
    timeout-minutes: 15

    services:
      postgres:
        image: postgres:16-alpine
        env:
          POSTGRES_USER: library_app
          POSTGRES_PASSWORD: local-ci-password
          POSTGRES_DB: library-app
        ports:
          - 5432:5432
        options: >-
          --health-cmd "pg_isready -U library_app -d library-app"
          --health-interval 5s
          --health-timeout 5s
          --health-retries 10

    env:
      DBURL: localhost:5432
      DBNAME: library-app
      DBUSERNAME: library_app
      DBPASSWORD: local-ci-password

    steps:
      - name: Check out fork
        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7

      - name: Set up Java 17
        uses: actions/setup-java@03ad4de0992f5dab5e18fcb136590ce7c4a0ac95 # v5
        with:
          distribution: temurin
          java-version: "17"
          cache: maven

      - name: Test and package
        run: ./mvnw --batch-mode --no-transfer-progress verify

      - name: Validate API proof asset
        run: |
          test -s docs/library-api-error-proof.jpg
          python3 - <<'PY'
          from pathlib import Path

          proof = Path("docs/library-api-error-proof.jpg").read_bytes()
          assert proof[:2] == b"\xff\xd8", "proof asset is not a JPEG"

          offset = 2
          dimensions = None
          start_of_frame = {0xC0, 0xC1, 0xC2, 0xC3, 0xC5, 0xC6, 0xC7, 0xC9, 0xCA, 0xCB, 0xCD, 0xCE, 0xCF}
          while offset < len(proof):
              assert proof[offset] == 0xFF, "invalid JPEG marker"
              marker = proof[offset + 1]
              offset += 2
              if marker in {0xD8, 0xD9}:
                  continue
              length = int.from_bytes(proof[offset:offset + 2], "big")
              if marker in start_of_frame:
                  height = int.from_bytes(proof[offset + 3:offset + 5], "big")
                  width = int.from_bytes(proof[offset + 5:offset + 7], "big")
                  dimensions = (width, height)
                  break
              offset += length

          assert dimensions == (1280, 720), "proof asset must be 1280x720"
          PY

      - name: Validate Compose contract
        run: docker compose --env-file .env.example config --quiet

      - name: Build Java 17 container
        run: docker build --tag library-app-spring-boot:ci .