proxy_integration_tests.yml

# Integration tests against a real proxy (PROXY_URL). Add repository secret PROXY_URL
# under Settings → Secrets and variables → Actions, then mark this workflow as a required
# status check under branch protection (pull_request events only receive secrets for PRs
# from the same repository, not from forks).

name: Proxy integration tests

on:
  pull_request:

permissions:
  contents: read
  # Required for setup-node npm cache save under restricted GITHUB_TOKEN scopes.
  actions: write

jobs:
  integration:
    runs-on: ubuntu-latest

    steps:
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
        with:
          persist-credentials: false

      - name: Set up Node
        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
        with:
          node-version: "22"
          cache: npm

      - name: Install dependencies
        run: npm ci

      - name: Run unit tests
        run: npm run test:unit

      - name: Require PROXY_URL Actions secret
        env:
          PROXY_URL: ${{ secrets.PROXY_URL }}
        run: |
          if [ -z "${PROXY_URL}" ]; then
            echo "::error::PROXY_URL is not set. Add a repository (or environment) secret named PROXY_URL under Settings → Secrets and variables → Actions."
            exit 1
          fi

      - name: Run JavaScript integration tests
        env:
          PROXY_URL: ${{ secrets.PROXY_URL }}
        run: npm test

      - name: Run TypeScript integration tests
        env:
          PROXY_URL: ${{ secrets.PROXY_URL }}
        run: npm run test:ts