ci: publish proto module to BSR on push #72

	---
	name: CI

	on:
	pull_request:
	push:
	branches: [main, ci/buf-push]
	release:
	types: [created]

	permissions:
	contents: read

	jobs:
	test:
	name: Go tests (SQLite)
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4
	with:
	persist-credentials: false

	- uses: actions/setup-go@v5
	with:
	go-version-file: go.mod
	cache: true

	- name: Run tests
	run: make test

	smoke:
	name: Release smoke (GraphQL + REST + gRPC + MCP)
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4
	with:
	persist-credentials: false
	- uses: actions/setup-go@v5
	with:
	go-version-file: go.mod
	cache: true
	# Black-box end-to-end pass over every public API surface against the
	# freshly built binary (see internal/e2e/smoke_test.go).
	- name: Run smoke tests
	run: make smoke

	buf-push:
	name: Publish proto to BSR
	runs-on: ubuntu-latest
	# Only publish on real pushes (main), never on PRs.
	if: github.event_name == 'push'
	steps:
	- uses: actions/checkout@v4
	with:
	persist-credentials: false
	- uses: bufbuild/buf-setup-action@v1
	with:
	github_token: ${{ secrets.GITHUB_TOKEN }}
	- name: buf push
	env:
	BUF_TOKEN: ${{ secrets.BUF_TOKEN }}
	run: buf push proto --create --create-visibility public

Provide feedback