test.yaml

name: Test

on:
  push:
    branches: [main]
  pull_request:
    branches: [main]
  workflow_dispatch:

jobs:
  test:
    runs-on: ubuntu-latest
    permissions:
      contents: read

    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Set up Bun
        # Pin to the version in package.json `packageManager` so the
        # lockfile format matches and `bun install --frozen-lockfile`
        # never trips on bun-version drift. Bump intentionally.
        uses: oven-sh/setup-bun@v2
        with:
          bun-version: "1.2.21"

      - name: Install dependencies
        run: bun install --frozen-lockfile

      - name: Format check
        run: bun run format:check

      # Package build comes before typecheck so the demo workspace can
      # resolve `@onkernel/managed-auth-react`'s emitted .d.ts. Locally
      # this is invisible because dist/ already exists from prior runs;
      # in CI we get a fresh checkout.
      - name: Build package
        run: bun run --filter '@onkernel/managed-auth-react' build

      - name: Typecheck
        run: bun run typecheck

      # Dry-run npm pack so we catch missing files / bad exports BEFORE a
      # tagged release tries to publish. Exits non-zero if e.g. dist/ is
      # missing from `files` or an export points at a non-existent path.
      - name: Verify publishable package
        working-directory: packages/managed-auth-react
        run: npm pack --dry-run