name: CI

on:
  push:
    branches: [main]
  pull_request:
    branches: [main]

jobs:
  lint:
    name: Lint
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Setup Bun
        uses: oven-sh/setup-bun@v2
        with:
          bun-version: latest

      - name: Install dependencies
        run: bun install --frozen-lockfile

      - name: Run ESLint
        run: bun run lint

  build:
    name: Build
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Setup Bun
        uses: oven-sh/setup-bun@v2
        with:
          bun-version: latest

      - name: Install dependencies
        run: bun install --frozen-lockfile

      - name: Build
        run: bun run build
        env:
          # provide dummy values for build-time env vars
          # actual secrets are set in cloudflare dashboard
          WORKOS_CLIENT_ID: ${{ secrets.WORKOS_CLIENT_ID || 'client_dummy' }}
          WORKOS_API_KEY: ${{ secrets.WORKOS_API_KEY || 'sk_dummy' }}
          WORKOS_COOKIE_PASSWORD: ${{ secrets.WORKOS_COOKIE_PASSWORD || 'a]pK7&mQ#9vL2$wR5!nX8@cY4%hB6*jF' }}