docker.yml

# Docker guard: proves the complete production image surface on a Docker-capable
# runner every PR. Separate from ci.yml (Local Gates) because it needs a Docker
# daemon and is slower.
name: Docker

on:
  pull_request:
  push:
    branches: [main]

jobs:
  docker-self-dogfood:
    name: Complete Docker self-dogfood
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: actions/setup-node@v4
        with:
          node-version: 24
      - name: Enable pnpm
        run: |
          corepack enable
          corepack prepare pnpm@11.7.0 --activate
      # Builds once, proves domain/transport/auth/persistence behavior, then
      # reuses the image for the HA and edge child gates.
      - name: Run complete Docker self-dogfood
        run: pnpm dogfood:docker-self