name: qa-required

on:
  push:
    branches:
      - main
  pull_request:

jobs:
  qa-required:
    name: qa-required
    runs-on: ubuntu-latest

    # Phase 1: workflow is present and runnable, but branch protection does not
    # require this check yet. Enable required checks in Phase 2.
    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Create .env for CI
        run: cp .env.example .env

      - name: Install Composer dependencies
        run: |
          docker run --rm \
            -v "$(pwd):/app" \
            -w /app \
            composer:2 install --no-dev --no-interaction --prefer-dist --optimize-autoloader

      - name: Start project services
        run: |
          docker compose down --remove-orphans 2>/dev/null || true
          docker compose up -d --force-recreate php db memcached
          sleep 10

      - name: Run required QA gates
        run: bin/qa-required.sh