ci.yml

name: CI

on:
  push:
    branches: [main]
  pull_request:
    branches: [main]

concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: ${{ github.ref != 'refs/heads/main' }}

permissions: {}

jobs:
  ci:
    name: Build, lint, typecheck, test
    # Skip on release commits - publish job already runs build/typecheck/test
    if: "!startsWith(github.event.head_commit.message || '', 'release:')"
    runs-on: ubuntu-latest
    timeout-minutes: 10

    permissions:
      contents: read

    steps:
      - name: Checkout
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
        with:
          persist-credentials: false

      - name: Setup
        uses: ./.github/actions/setup-bun

      - name: Build, lint, and typecheck
        run: |
          bun run lint &
          LINT_PID=$!
          bun run build || { echo "::error::Build failed"; exit 1; }
          wait $LINT_PID || { echo "::error::Lint failed"; exit 1; }
          bun run typecheck || { echo "::error::Typecheck failed"; exit 1; }

      - name: Test
        run: bun run test