name: CI

# Pushes to main are covered by deploy.yaml, which runs this same check job
# before it builds an image.
on:
  pull_request:
  push:
    branches-ignore:
      - main

jobs:
  check:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4

      - uses: actions/setup-node@v4
        with:
          node-version: 20
          cache: npm

      - run: npm ci

      - run: npm run typecheck

      - run: npm run lint

      # PLANS_PAGES is deliberately unset here: getPlanPages() falls back to an
      # empty list, so the build succeeds without the secret and no pricing
      # codes are exposed to a PR build.
      - run: npm run build