.github/workflows/ci.yml

 name: CI

 # Runs on every push/PR -- typecheck + build, the same two gates the

 # release workflow runs again before actually publishing. Catches a

 # broken build long before it's ever a tagged release.

 on:

  push:

  branches: [main]

  pull_request:

 jobs:

  check:

  runs-on: ubuntu-latest

  defaults:

  run:

  working-directory: app

  steps:

  - uses: actions/checkout@v4

  - uses: actions/setup-node@v4

  with:

  node-version: 22

  cache: npm

  cache-dependency-path: app/package-lock.json

  - run: npm ci

  - run: npx tsc --noEmit -p .

  - run: npm run build