ci.yml

name: CI

on:
  push:
    branches: [main]
  pull_request:
    branches: [main]

permissions:
  contents: read

# ROADMAP §1.7.1 originally specified `make lint test build` in CI. We
# invoke the underlying Go commands directly so the matrix runs on
# Windows without a separate `make` install step. The Makefile remains
# the local-dev entry point.

jobs:
  test:
    name: Test (${{ matrix.os }})
    runs-on: ${{ matrix.os }}
    strategy:
      fail-fast: false
      matrix:
        os: [ubuntu-latest, macos-latest, windows-latest]
    steps:
      - uses: actions/checkout@v4
      - uses: actions/setup-go@v5
        with:
          go-version: '1.25'
          cache: true
      - name: Build
        run: go build ./...
      - name: Test
        run: go test ./...

  lint:
    name: Lint
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: actions/setup-go@v5
        with:
          go-version: '1.25'
          cache: true
      - uses: golangci/golangci-lint-action@v8
        with:
          version: latest

  i18n-deadkey-check:
    # UC-25: catch dead catalog keys before they pile up. The script
    # exits non-zero on the first unreferenced en key; tr stays in
    # parity via release-check.sh, so this single check guards both.
    name: i18n dead-key check
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - run: bash scripts/i18n-deadkey-check.sh

  spdx-check:
    # ADR-0012: every Go source must carry the per-file SPDX header.
    # This guard fails the build on any new file that drops it, keeping
    # the 100% coverage reached in v0.9.0 from regressing.
    name: SPDX header check
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - run: bash scripts/spdx-check.sh