Repository navigation

Keep the demo video script out of the repository #2

	name: ci

	on:
	push:
	branches: [main]
	pull_request:

	jobs:
	no-secrets:
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4
	- name: Refuse certificates, private keys and proxy CA material
	run: \|
	if git ls-files \| grep -iE '\.(pem\|crt\|cer\|der\|key\|p12\|pfx\|jks\|keystore\|csr)$\|ca[-_]bundle'; then
	echo "certificate or key file tracked"; exit 1; fi
	if git grep -IE -e '-----BEGIN [A-Z ]*(CERTIFICATE\|PRIVATE KEY)-----'; then
	echo "certificate or private key content tracked"; exit 1; fi

	backend:
	runs-on: ubuntu-latest
	defaults:
	run:
	working-directory: backend
	steps:
	- uses: actions/checkout@v4
	- uses: astral-sh/setup-uv@v6
	- run: uv sync --frozen
	- run: uv run ruff check . ../spikes ../eval ../scripts
	- run: uv run ruff format --check .
	- run: uv run pytest -q
	- name: Perfect-transcript evaluation (tuning and held-out scenarios)
	run: uv run python ../eval/run_text_eval.py

	frontend:
	runs-on: ubuntu-latest
	defaults:
	run:
	working-directory: frontend
	steps:
	- uses: actions/checkout@v4
	- uses: pnpm/action-setup@v4
	with:
	version: 11
	- uses: actions/setup-node@v4
	with:
	node-version: 22
	cache: pnpm
	cache-dependency-path: frontend/pnpm-lock.yaml
	- run: pnpm install --frozen-lockfile
	- run: pnpm build

	image:
	runs-on: ubuntu-latest
	needs: [backend, frontend]
	steps:
	- uses: actions/checkout@v4
	- uses: docker/setup-buildx-action@v3
	- uses: docker/build-push-action@v6
	with:
	context: .
	push: false
	tags: codeloop:ci