common-build.yml

name: Common CI build

on:
  workflow_call:

permissions:
  id-token: write
  contents: write

env:
  node_version: 24

jobs:
  lint:
    name: lint & typecheck
    runs-on: ubuntu-latest
    environment: ${{ inputs.environment }}
    steps:
      - uses: actions/checkout@v4
      - uses: actions/setup-node@v4
        with:
          node-version: ${{ env.node_version }}
          cache: 'npm'
      - name: Install NPM dependencies
        run: npm ci
      - name: Typecheck
        run: |
          npm run typecheck
      - name: Lint
        run: |
          npx eslint .
      - name: Prettier
        run: |
          npx prettier --check .

  build:
    needs:
      - lint
    runs-on: ubuntu-latest
    concurrency:
      group: build
    steps:
      - uses: actions/checkout@v4
      - name: Use Node.js
        uses: actions/setup-node@v4
        with:
          node-version: ${{ env.node_version }}
          registry-url: 'https://registry.npmjs.org'
      - name: Install dependencies
        run: npm ci
      - name: Build
        run: npm run build
      - name: Configure AWS Credentials
        uses: aws-actions/configure-aws-credentials@v4
        with:
          aws-region: eu-west-1
          role-to-assume: ${{ secrets.AWS_ROLE }}
          role-session-name: GitHubActions
      - name: Bootstrap CDK
        # so I do not have to do it manually when CDK is updated
        run: npx cdk bootstrap aws://${{secrets.AWS_ACCOUNT_ID}}/eu-west-1
      - uses: actions/upload-artifact@v4
        with:
          name: dist
          path: dist
          retention-days: 1