From ad38fcf69cca28710615016ff56fc72f9057d6d6 Mon Sep 17 00:00:00 2001
From: "Mateo (OpenClaw)" <mateo@openclaw.local>
Date: Sat, 7 Feb 2026 09:34:19 +0000
Subject: [PATCH] ci: wire Clerk env vars into frontend CI steps

---
 .github/workflows/ci.yml | 38 ++++++++++++++++++++++++++++++++++----
 1 file changed, 34 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 7401f9e..35d3213 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -45,11 +45,41 @@ jobs:
           cache: npm
           cache-dependency-path: frontend/package-lock.json
 
-      - name: Install dependencies
-        run: make setup
+      - name: Install backend dependencies
+        run: make backend-sync
 
-      - name: Run checks
+      - name: Install frontend dependencies
+        run: make frontend-sync
+
+      - name: Run backend checks
         env:
           # Keep CI builds deterministic and secretless.
           NEXT_TELEMETRY_DISABLED: "1"
-        run: make check
+        run: |
+          make backend-lint
+          make backend-typecheck
+          make backend-coverage
+
+      - name: Run frontend checks
+        env:
+          # Keep CI builds deterministic.
+          NEXT_TELEMETRY_DISABLED: "1"
+          # Clerk env (wired from repo settings; values are not printed).
+          CLERK_SECRET_KEY: ${{ secrets.CLERK_SECRET_KEY }}
+          NEXT_PUBLIC_CLERK_PUBLISHABLE_KEY: ${{ vars.NEXT_PUBLIC_CLERK_PUBLISHABLE_KEY }}
+          CLERK_JWKS_URL: ${{ vars.CLERK_JWKS_URL }}
+        run: |
+          make frontend-lint
+          make frontend-typecheck
+          make frontend-test
+          make frontend-build
+
+      - name: Upload coverage artifacts
+        if: always()
+        uses: actions/upload-artifact@v4
+        with:
+          name: coverage
+          if-no-files-found: ignore
+          path: |
+            backend/coverage.xml
+            frontend/coverage/**