ci.yml

name: ci

on:
  pull_request:
  push:
    branches: [main]

permissions:
  contents: read

jobs:
  check:
    runs-on: ubuntu-latest
    timeout-minutes: 15
    steps:
      - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6
      - uses: actions/setup-node@249970729cb0ef3589644e2896645e5dc5ba9c38 # v6
        with:
          node-version: '24'
          cache: npm
      - run: npm ci
      - name: typecheck
        run: npm run tsc
      - name: unit tests
        run: npm test
      - name: build
        run: npm run build

      # #199: the SPA's regression net — web/ has no unit tests, so this is
      # what notices a broken panel/tab/palette. Drives the real SPA against
      # smoke/stub.mjs in the runner's preinstalled Chrome (no playwright
      # browser download).
      - name: UI smoke
        run: npm run smoke:ui
      # End-to-end against the example project. No cloud creds in CI, so run.sh
      # takes the source-graph path (installs the example's chant, serves behold,
      # asserts /api/graph). The overlay path is exercised locally with creds.
      - name: e2e (offline)
        run: bash e2e/run.sh

      # Every step above runs against the LOCKFILE's chant. This one runs against
      # the floor `package.json` declares, which is what a consumer's plain
      # `npm install` may resolve to. Without it a wrong floor stays green
      # forever — see the script's header for the two times that happened
      # (#108, and the #98/#100 rollup that silently did nothing on ^0.32.0).
      # Last, and reinstalling chant, so it cannot perturb the steps above.
      - name: typecheck against the declared chant floor
        run: bash scripts/typecheck-floor.sh