name: CI

on:
  pull_request:
  push:
    branches: [master]

permissions:
  contents: read

jobs:
  test:
    runs-on: ubuntu-latest
    timeout-minutes: 10
    steps:
      - uses: actions/checkout@v4
      - uses: actions/setup-node@v4
        with:
          node-version: "20.19.5"
          cache: npm
      - name: Install locked dependencies
        run: npm ci
      - name: Lint, format, and type check
        run: npm run check
      - name: Run tests
        run: npm test
      - name: Build bundled distribution
        run: npm run build
      - name: Verify package contents
        run: npm pack --dry-run
      - name: Audit bundled dependency graph
        run: npm audit --audit-level=high