name: CI

on:
  push:
    branches: [main]
  pull_request:
    branches: [main]
  workflow_dispatch:

concurrency:
  group: ci-${{ github.ref }}
  cancel-in-progress: true

jobs:
  build:
    name: Typecheck and build
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4

      - uses: pnpm/action-setup@v4
        with:
          version: 11

      - uses: actions/setup-node@v4
        with:
          node-version: 22
          cache: pnpm

      # Fails if pnpm-lock.yaml drifts from package.json, so dependency
      # overrides cannot silently stop applying.
      - name: Install dependencies
        run: pnpm install --frozen-lockfile

      # next.config.mjs skips type errors during builds, so check types here
      # where a regression actually fails the run.
      - name: Typecheck
        run: pnpm exec tsc --noEmit

      - name: Build
        run: pnpm run build