name: CI

on:
  pull_request:
    branches: ["**"]

jobs:
  check:
    name: nix flake check
    runs-on: [hive-ci]
    steps:
      - uses: actions/checkout@v3
      - name: lint tracker tags
        # Fast pre-check: flags hash-number tracker tags in source
        # (hive convention is prose, not tags — /knowledge/hive-rules.md).
        # Phase 1 is warn-only while the legacy backlog is cleaned up;
        # flip the arg to `deny` for a hard gate once the tree is clean.
        # See scripts/check-issue-refs.sh.
        run: sh scripts/check-issue-refs.sh warn
      - name: check
        # Runs all flake checks: formatting (treefmt+rustfmt), cargo test,
        # cargo clippy, and module evaluation. No --no-build: the checks
        # derivations are the canonical source of truth.
        run: nix flake check