# docs/operations/ci.md · stienswout/t3code

[View on GitCafe](https://git.cafe/stienswout/t3code/blob/refs%2Fheads%2Fcodex%2Ffix%2Ffix-codex-app-server-exit-diagnostics/docs/operations/ci.md)

Repository: [stienswout/t3code](https://git.cafe/stienswout/t3code)

Visibility: public

Requested revision: refs/heads/codex/fix/fix-codex-app-server-exit-diagnostics

Commit: 711ef97704eb2a6a6da1c5494c73077c8919da71

Blob: d030b446b6a436a5c29ab5b88414c171946d8c44

Size: 720 bytes

[Immutable source](https://git.cafe/stienswout/t3code/blob/711ef97704eb2a6a6da1c5494c73077c8919da71/docs/operations/ci.md?format=markdown)

```
# CI quality gates

- `.github/workflows/ci.yml` runs `bun run lint`, `bun run typecheck`, and `bun run test` on pull requests and pushes to `main`.
- `.github/workflows/release.yml` builds macOS (`arm64` and `x64`), Linux (`x64`), and Windows (`x64`) desktop artifacts from a single `v*.*.*` tag and publishes one GitHub release.
- The release workflow auto-enables signing only when platform credentials are present. macOS passkey builds additionally require `APPLE_TEAM_ID` and the `MACOS_PROVISIONING_PROFILE` secret; Windows uses Azure Trusted Signing. Without the core signing credentials, it still releases unsigned artifacts.
- See [Release Checklist](./release.md) for the full release/signing setup checklist.

```