name: CI
on:
  pull_request:
    branches: [main]
  merge_group:

permissions:
  contents: read

jobs:
  ci:
    uses: Sea-Haven-Industries/.github/.github/workflows/ci-python-sam.yaml@4a6cbfd362140a68810f0f46d338026863b8e827 # v1.0.10
    with:
      source-dirs: "lambdas tests scripts"
      run-tests: true
      # Deploy path is HCP Terraform; reusable name still covers Python lint/tests.
      run-cdk-synth: false
      run-sam-validate: false
  # The published OpenAPI contract must stay compliant with redocly.yaml;
  # this is the CI mirror of the local `npm run lint:api`.
  spec-lint:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
        with:
          node-version: 22
          cache: npm
      - run: npm ci
      - run: npm run lint:api