ci.yml

# SPDX-License-Identifier: AGPL-3.0-or-later
#
# Lean CI — single job, shared build cache.
# Binary distribution handled by plasmidBin CI/CD (auto-harvest.yml).
# This workflow validates code quality only.

name: CI

on:
  push:
    branches: [main]
  pull_request:
    branches: [main]

concurrency:
  group: ci-${{ github.ref }}
  cancel-in-progress: true

permissions:
  contents: read

env:
  CARGO_TERM_COLOR: always
  CARGO_INCREMENTAL: 0

jobs:
  check:
    runs-on: ubuntu-latest
    timeout-minutes: 20
    steps:
      - uses: actions/checkout@v5

      - uses: dtolnay/rust-toolchain@stable
        with:
          components: rustfmt, clippy

      - uses: Swatinem/rust-cache@v2

      - name: Format
        run: cargo fmt --all -- --check

      - name: Clippy
        run: cargo clippy --workspace --all-targets --all-features -- -D warnings

      - name: Deny
        run: |
          cargo install --locked cargo-deny@0.16 || true
          cargo deny check bans

      - name: Test
        run: cargo test --workspace --all-features