ci.yml

# Continuous integration: lint, typecheck, tests, build, and a packaged-CLI
# smoke test. Runs fully offline (no provider credentials, no model calls).
name: ci

on:
  pull_request:
  push:
    branches: [main]
  workflow_dispatch:

permissions:
  contents: read

concurrency:
  group: ci-${{ github.ref }}
  cancel-in-progress: ${{ github.ref != 'refs/heads/main' }}

env:
  # Pinned Node version used by all product builds (see docs/release-process.md).
  NODE_VERSION: "22.13.1"

jobs:
  quality:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Setup Node.js (pinned)
        uses: actions/setup-node@v4
        with:
          node-version: ${{ env.NODE_VERSION }}
          cache: npm

      - name: Install dependencies (locked)
        run: npm ci

      - name: Lint
        run: npm run lint

      - name: Typecheck
        run: npm run typecheck

      - name: Test
        run: npm test

      - name: Build (tsc)
        run: npm run build

      - name: Build portable CLI bundle
        run: npm run build:cli

      - name: Smoke-test the portable CLI (outside the repository)
        run: node scripts/smoke-test.mjs --target dist/cli/agent-skill-verifier.cjs