name: ci

on:
  push:
    branches: [main]
  pull_request:
    types: [opened, synchronize, reopened]
  workflow_dispatch:

permissions:
  contents: read

concurrency:
  group: ${{ github.workflow }}-${{ github.event_name }}-${{ github.event.pull_request.number || github.ref }}
  cancel-in-progress: true

jobs:
  workflow-lint:
    runs-on: ubuntu-26.04
    timeout-minutes: 5
    steps:
      - uses: actions/checkout@v4
        with:
          persist-credentials: false
      - name: Check GitHub Actions workflows
        uses: docker://rhysd/actionlint:1.7.12
        with:
          args: -color
  rust:
    runs-on: ubuntu-26.04
    timeout-minutes: 25
    steps:
      - uses: actions/checkout@v4
        with:
          persist-credentials: false
      - name: Prepare reference environment
        run: scripts/setup-dev.sh --system
      - uses: Swatinem/rust-cache@v2
      - run: scripts/verify.sh full --output "$RUNNER_TEMP/signaltty-evidence"
      - uses: actions/upload-artifact@v4
        if: always()
        with:
          name: verification
          path: ${{ runner.temp }}/signaltty-evidence
          if-no-files-found: warn
  minimum-rust:
    runs-on: ubuntu-26.04
    timeout-minutes: 20
    steps:
      - uses: actions/checkout@v4
        with:
          persist-credentials: false
      - run: scripts/setup-dev.sh --system
      - uses: dtolnay/rust-toolchain@1.92.0
      - uses: Swatinem/rust-cache@v2
        with:
          key: msrv
      - run: cargo +1.92.0 check --workspace --all-targets --locked