ci: run tests and typecheck for real

The test step was a no-op stub. CI now installs at the repo root (where
bun.lock and bunfig.toml live), builds via the root script, typechecks,
and runs bun test. Adds 'just verify' as the same local gate (tests +
typecheck + build). Full lint stays out of the gate until the planned
feature stripping lands.

2 files changed, 14 insertions, 6 deletions

diff --git a/.github/workflows/bun-ci.yml b/.github/workflows/bun-ci.yml
index 386b42bc..8f702f72 100644
--- a/.github/workflows/bun-ci.yml
+++ b/.github/workflows/bun-ci.yml
@@ -65,17 +65,17 @@ jobs:
         uses: actions/cache@v4

         with:

           path: ~/.bun/install/cache

-          key: ${{ runner.os }}-bun-1.2.18-${{ hashFiles('apps/web/bun.lock') }}

+          key: ${{ runner.os }}-bun-1.2.18-${{ hashFiles('bun.lock') }}

 

       - name: Install dependencies

-        working-directory: apps/web

         run: bun install

 

       - name: Build

+        run: bun build:web

+

+      - name: Typecheck

         working-directory: apps/web

-        run: bun run build

+        run: bunx tsc --noEmit

 

       - name: Run tests

-        working-directory: apps/web

-        run: echo "No tests implemented yet"

-        continue-on-error: true

+        run: bun test

diff --git a/justfile b/justfile
index c7b65dc8..9c264b8a 100644
--- a/justfile
+++ b/justfile
@@ -44,6 +44,14 @@ typecheck:
 format:
     cd apps/web && bun run format
 
+# Full local quality gate: tests, typecheck, production build.
+# Full lint is NOT part of the gate yet (~112 pre-existing upstream errors);
+# lint the files you touched with `just lint`.
+verify:
+    bun test
+    cd apps/web && bunx tsc --noEmit
+    bun build:web
+
 # Build the Rust WASM package (run ./script/setup-rust once first)
 wasm:
     bun build:wasm