ci.yml

name: ci

on:
  push:
    branches: [main]
  pull_request:

jobs:
  build:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v5
      - uses: actions/setup-node@v5
        with:
          node-version: "22"
          cache: npm
      - run: npm install
      - run: npm run build
      - run: npm test
      - run: npm run build:docs
      - name: CLI smoke (enforcement)
        run: npm run smoke
        env:
          KNOW_CODE_ATTEST_PASSPHRASE: ci-smoke-attest-passphrase
          KNOW_CODE_ATTEST_HOME: ${{ runner.temp }}/know-code-attest

      - name: CLI smoke (CI verify, no local seals)
        run: npm run smoke:verify
        env:
          KNOW_CODE_ATTEST_PASSPHRASE: ci-smoke-verify-passphrase
          KNOW_CODE_ATTEST_HOME: ${{ runner.temp }}/know-code-verify-attest