ci.yml

name: CI

on:
  push:
    branches:
      - main
  pull_request:

permissions:
  contents: read

env:
  NODE_VERSION: "24.19.0"

jobs:
  # Parallel to `test` so lint and test failures surface on the same run; type checking lives in Build.
  lint:
    name: Lint
    runs-on: ubuntu-latest
    steps:
      - name: Check out repository
        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
        with:
          persist-credentials: false

      # Ahead of setup-node, which shells out to `pnpm store path` to find the directory it caches.
      - name: Enable Corepack
        run: corepack enable

      - name: Set up Node.js
        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
        with:
          node-version: ${{ env.NODE_VERSION }}
          cache: pnpm

      - name: Install dependencies
        run: pnpm install --frozen-lockfile

      - name: Lint
        run: pnpm lint:check

  test:
    name: Build and test
    runs-on: ubuntu-latest
    # Install, build and test together take ~2.5 minutes. Without an explicit cap a wedged test
    # process (a spawned child that outlives its reap keeps `node --test` alive forever) burns the
    # 6-hour default instead of failing, on every run of the branch.
    timeout-minutes: 20
    steps:
      - name: Check out repository
        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
        with:
          persist-credentials: false

      # Ahead of setup-node, which shells out to `pnpm store path` to find the directory it caches.
      - name: Enable Corepack
        run: corepack enable

      - name: Set up Node.js
        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
        with:
          node-version: ${{ env.NODE_VERSION }}
          cache: pnpm

      - name: Install dependencies
        run: pnpm install --frozen-lockfile

      # Codegen, the frontend/SPA bundles, and the repo's single type check (`types:check` aliases this).
      - name: Build
        run: pnpm build

      - name: Test
        run: pnpm test