Repository navigation

chore: add bf31af5 to fork-sync-ignore (applied as e289d8f) #3

	name: CI

	on:
	push:
	branches: [main]
	pull_request:
	branches: [main]

	concurrency:
	group: ci-${{ github.workflow }}-${{ github.event.pull_request.number \|\| github.ref }}
	cancel-in-progress: true

	permissions:
	contents: read

	jobs:
	test:
	name: Test + coverage gate
	runs-on: ubuntu-latest
	steps:
	- name: Checkout repository
	uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4

	- name: Setup Bun
	uses: oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6 # v2
	with:
	bun-version: 1.3.13

	- name: Install dependencies
	run: bun install --frozen-lockfile

	- name: Run tests with coverage gate
	# Coverage thresholds live in vitest.config.ts (baseline ratchet -> 70%).
	# This step fails the build if coverage drops below the current watermark.
	run: bun run test:coverage

	- name: Verify coverage baseline is committed
	# autoUpdate may only strengthen the ratchet through a committed change.
	run: git diff --exit-code -- vitest.config.ts

	- name: Build project
	run: bun run build

	- name: Upload coverage report
	if: always()
	uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
	with:
	name: coverage
	path: coverage/
	if-no-files-found: ignore