ci: split verification workflow checks

Closes #33

Author: ubugeeei

.github/README.md

@@ -6,6 +6,7 @@
 - Keep third-party actions pinned to full commit SHAs. Preserve the upstream version comment next to each SHA so reviews can see the intended release line.
 - Keep workflow permissions scoped per job. Prefer top-level read-only permissions, or `permissions: {}` when every job declares its own permissions.
 - Keep `timeout-minutes` on each job to avoid stuck runners consuming the Actions queue.
+- Keep cheap validation jobs ahead of heavier build jobs so obvious failures stop before package and app builds start.
 
 ## Dependency Updates
 

.github/workflows/ci.yml

@@ -12,19 +12,37 @@ permissions:
 
 env:
   FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: "true"
+  RUST_TOOLCHAIN: 1.93.0
 
 concurrency:
   group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
   cancel-in-progress: true
 
 jobs:
-  verify:
-    name: Verify
+  web-check:
+    name: Web Check
     runs-on: ubuntu-24.04
-    timeout-minutes: 30
+    timeout-minutes: 10
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+
+      - name: Set up Vite+
+        uses: voidzero-dev/setup-vp@ca1c46663915d6c1042ae23bd39ab85718bfb0fa # v1.10.0
+        with:
+          node-version: 22
+          cache: true
+          run-install: |
+            args: ["--frozen-lockfile"]
 
-    env:
-      RUST_TOOLCHAIN: 1.93.0
+      - name: Run web checks
+        run: vp run web:check
+
+  rust-check:
+    name: Rust Check
+    runs-on: ubuntu-24.04
+    timeout-minutes: 20
 
     steps:
       - name: Checkout
@@ -42,12 +60,43 @@ jobs:
         run: |
           rustup toolchain install "$RUST_TOOLCHAIN" --profile minimal --component clippy
           rustup default "$RUST_TOOLCHAIN"
+
+      - name: Run Rust checks
+        run: vp run rust:check
+
+      - name: Run Rust tests
+        run: cargo test --workspace
+
+  build:
+    name: Build Packages and Apps
+    runs-on: ubuntu-24.04
+    timeout-minutes: 30
+    needs:
+      - web-check
+      - rust-check
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+
+      - name: Set up Vite+
+        uses: voidzero-dev/setup-vp@ca1c46663915d6c1042ae23bd39ab85718bfb0fa # v1.10.0
+        with:
+          node-version: 22
+          cache: true
+          run-install: |
+            args: ["--frozen-lockfile"]
+
+      - name: Install Rust toolchain
+        run: |
+          rustup toolchain install "$RUST_TOOLCHAIN" --profile minimal
+          rustup default "$RUST_TOOLCHAIN"
           rustup target add wasm32-unknown-unknown --toolchain "$RUST_TOOLCHAIN"
 
       - name: Install WebAssembly linker
         run: |
           sudo apt-get update
           sudo apt-get install --no-install-recommends --yes lld
 
-      - name: Run workspace CI
-        run: vp run ci
+      - name: Build workspace packages and apps
+        run: vp run workspace:build