name: Nix

on:
  pull_request:
    branches: [main]
    paths:
      - "nix/**"
      - "flake.nix"
      - "flake.lock"
      - "package.json"
      - "package-lock.json"
      - "packages/highlight/**"
      - "packages/server/**"
      - "packages/relay/**"
      - "packages/cli/**"
      - "scripts/update-nix.sh"
      - "scripts/fix-lockfile.mjs"
      - ".github/workflows/nix.yml"

permissions:
  contents: read

jobs:
  build:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
        with:
          ref: ${{ github.event.pull_request.head.sha }}

      - uses: actions/setup-node@v4
        with:
          node-version: "22"
          cache: "npm"

      - uses: cachix/install-nix-action@v31
        with:
          nix_path: nixpkgs=channel:nixos-unstable

      - name: Update lockfile + Nix hash if stale
        run: ./scripts/update-nix.sh

      - name: Build Nix package
        run: nix build .#default -o result