name: ci
on:
  pull_request:
    branches:
      - main
  merge_group:

permissions:
  contents: read
  checks: write
  pull-requests: write

jobs:
  ci:
    uses: Sea-Haven-Industries/.github/.github/workflows/ci-typescript-cdk.yaml@e5691d8a7f96ac4d5a841a82975ff0a4354d53ac # v1.0.7
    with:
      node-version: '24'
      enable-qemu: true
      # Phase 2a adds the root cdk.json → infra/ app (sh-mcp-auth). The reusable
      # runs `npx cdk synth` at the repo root; aws-cdk is a root devDep so npx
      # resolves the pinned CLI rather than fetching a stray standalone.
      run-cdk-synth: true
    secrets: inherit