refactor: reorganize CI workflows and actions

- Removed deprecated ci-setup action and replaced it with setup-bun for better clarity and modularity.
- Updated CI workflow to utilize the new setup-bun action for Bun environment setup.
- Introduced a new setup-node action for Node.js environment setup.
- Added a preview release workflow triggered by successful CI runs.
- Enhanced release workflow to handle pre-releases and improved tagging logic.
- Deleted obsolete test workflow.

Author: Zendrex

.github/actions/ci-setup/action.yml

@@ -0,0 +1,20 @@
+name: Setup Bun
+description: Setup Bun environment
+
+inputs:
+    bun-version:
+        description: Bun version
+        required: false
+        default: latest
+
+runs:
+    using: composite
+    steps:
+        - name: Setup Bun ${{ inputs.bun-version }}
+          uses: oven-sh/setup-bun@v2
+          with:
+              bun-version: ${{ inputs.bun-version }}
+
+        - name: Install dependencies
+          shell: bash
+          run: bun install --frozen-lockfile

.github/actions/setup-bun/action.yml

@@ -0,0 +1,21 @@
+name: Setup Node
+description: Setup Node.js environment
+
+inputs:
+    node-version:
+        description: Node version
+        required: false
+        default: lts/*
+    registry-url:
+        description: npm registry URL
+        required: false
+        default: https://registry.npmjs.org
+
+runs:
+    using: composite
+    steps:
+        - name: Setup Node ${{ inputs.node-version }}
+          uses: actions/setup-node@v6
+          with:
+              node-version: ${{ inputs.node-version }}
+              registry-url: ${{ inputs.registry-url }}

.github/actions/setup-node/action.yml

@@ -1,40 +1,36 @@
 name: CI
 
 on:
-  pull_request:
-  push:
-    branches: [main]
+    pull_request:
+    push:
+        branches: [main]
 
 permissions:
-  contents: read
+    contents: read
 
 concurrency:
-  group: ci-${{ github.ref }}
-  cancel-in-progress: true
+    group: ci-${{ github.ref }}
+    cancel-in-progress: true
 
 jobs:
-  typecheck:
-    name: Typecheck
-    runs-on: ubuntu-latest
-    timeout-minutes: 20
-    steps:
-      - uses: actions/checkout@v6
-      - uses: ./.github/actions/ci-setup
-        with:
-          bun-version: latest
-
-      - name: Typecheck
-        run: bun run check-types
-
-
-  lint:
-    name: Lint & Format
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v6
-      - uses: ./.github/actions/ci-setup
-        with:
-          bun-version: latest
-
-      - name: Run Ultracite
-        run: bunx ultracite check
+    typecheck:
+        name: Typecheck
+        runs-on: ubuntu-latest
+        timeout-minutes: 5
+        steps:
+            - uses: actions/checkout@v6
+            - uses: ./.github/actions/setup-bun
+
+            - name: Typecheck
+              run: bun run check-types
+
+    lint:
+        name: Lint & Format
+        runs-on: ubuntu-latest
+        timeout-minutes: 5
+        steps:
+            - uses: actions/checkout@v6
+            - uses: ./.github/actions/setup-bun
+
+            - name: Run Ultracite
+              run: bunx ultracite check

.github/workflows/ci.yml

@@ -0,0 +1,114 @@
+name: Preview Release
+
+on:
+    workflow_run:
+        workflows: [CI]
+        types: [completed]
+        branches-ignore: [main]
+
+permissions: {}
+
+concurrency:
+    group: preview-${{ github.event.workflow_run.head_sha }}
+    cancel-in-progress: true
+
+jobs:
+    preview:
+        name: Preview Release
+        if: >-
+            github.event.workflow_run.conclusion == 'success' &&
+            github.event.workflow_run.event == 'pull_request'
+        runs-on: ubuntu-latest
+        timeout-minutes: 5
+        permissions:
+            pull-requests: write
+            actions: read
+        steps:
+            - name: Check for source changes
+              id: check
+              uses: actions/github-script@v8
+              with:
+                  script: |
+                      const { data: prs } = await github.rest.repos.listPullRequestsAssociatedWithCommit({
+                        owner: context.repo.owner,
+                        repo: context.repo.repo,
+                        commit_sha: context.payload.workflow_run.head_sha,
+                      });
+                      const open = prs.find((pr) => pr.state === 'open');
+                      if (!open) {
+                        core.info('No open PR found — skipping');
+                        return;
+                      }
+                      core.setOutput('pr-number', String(open.number));
+
+                      const files = await github.paginate(github.rest.pulls.listFiles, {
+                        owner: context.repo.owner,
+                        repo: context.repo.repo,
+                        pull_number: open.number,
+                      });
+                      const hasCodeChanges = files.some((f) => f.filename.startsWith('src/'));
+                      core.setOutput('has-code-changes', String(hasCodeChanges));
+                      core.info(`Code changes detected: ${hasCodeChanges}`);
+
+            - uses: actions/checkout@v6
+              if: steps.check.outputs.has-code-changes == 'true'
+              with:
+                  ref: ${{ github.event.workflow_run.head_sha }}
+            - uses: ./.github/actions/setup-bun
+              if: steps.check.outputs.has-code-changes == 'true'
+
+            - name: Build
+              if: steps.check.outputs.has-code-changes == 'true'
+              run: bun run build
+
+            - name: Publish preview
+              if: steps.check.outputs.has-code-changes == 'true'
+              run: bunx pkg-pr-new publish --comment=off --json output.json --packageManager=bun
+
+            - name: Comment on PR
+              if: steps.check.outputs.has-code-changes == 'true'
+              uses: actions/github-script@v8
+              with:
+                  script: |
+                      const fs = require('fs');
+                      const output = JSON.parse(fs.readFileSync('output.json', 'utf8'));
+                      const url = output.packages[0].url;
+                      const prNumber = parseInt('${{ steps.check.outputs.pr-number }}', 10);
+                      const headSha = '${{ github.event.workflow_run.head_sha }}';
+                      const repoUrl = `https://github.com/${context.repo.owner}/${context.repo.repo}`;
+                      const commitUrl = `${repoUrl}/commit/${headSha}`;
+
+                      const body = [
+                        '**Preview published** — install with:',
+                        '',
+                        '**bun**',
+                        '```sh',
+                        `bun add ${url}`,
+                        '```',
+                        '',
+                        '**npm**',
+                        '```sh',
+                        `npm install ${url}`,
+                        '```',
+                        '',
+                        `<sub>Built from [${headSha.slice(0, 7)}](${commitUrl})</sub>`,
+                      ].join('\n');
+
+                      const identifier = '**Preview published**';
+                      const { data: comments } = await github.rest.issues.listComments({
+                        owner: context.repo.owner,
+                        repo: context.repo.repo,
+                        issue_number: prNumber,
+                      });
+                      const existing = comments.find((c) => c.body.includes(identifier));
+
+                      const params = {
+                        owner: context.repo.owner,
+                        repo: context.repo.repo,
+                      };
+
+                      if (existing) {
+                        await github.rest.issues.updateComment({ ...params, comment_id: existing.id, body });
+                      } else {
+                        await github.rest.issues.createComment({ ...params, issue_number: prNumber, body });
+                      }

.github/workflows/preview.yml

@@ -1,72 +1,90 @@
 name: Release
 
 on:
-  push:
-    branches: [main]
+    workflow_run:
+        workflows: [CI]
+        types: [completed]
+        branches: [main]
 
 concurrency:
-  group: release-${{ github.ref }}
-  cancel-in-progress: false
+    group: release
+    cancel-in-progress: false
 
 jobs:
-  release:
-    name: Release
-    runs-on: ubuntu-latest
-    permissions:
-      contents: write
-      pull-requests: write
-      id-token: write
-    steps:
-      - uses: actions/checkout@v6
-      - uses: ./.github/actions/ci-setup
-        with:
-          bun-version: latest
+    release:
+        name: Release
+        if: github.event.workflow_run.conclusion == 'success'
+        runs-on: ubuntu-latest
+        timeout-minutes: 5
+        permissions:
+            contents: write
+            pull-requests: write
+            id-token: write
+        steps:
+            - uses: actions/checkout@v6
+              with:
+                  ref: ${{ github.event.workflow_run.head_sha }}
+            - uses: ./.github/actions/setup-bun
 
-      - name: Create release PR
-        id: changesets
-        uses: changesets/action@v1
-        with:
-          version: bun run version
-          title: "chore: version packages"
-          commit: "chore: version packages"
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+            - name: Create release PR
+              id: changesets
+              uses: changesets/action@v1
+              with:
+                  version: bun run version
+                  title: "chore: version packages"
+                  commit: "chore: version packages"
+              env:
+                  GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
-      - name: Check if release needed
-        id: check-release
-        if: steps.changesets.outputs.hasChangesets == 'false'
-        run: |
-          VERSION=$(jq -r '.version' package.json)
-          TAG="v${VERSION}"
+            - name: Check if release needed
+              id: check-release
+              if: steps.changesets.outputs.hasChangesets == 'false'
+              run: |
+                  VERSION=$(jq -r '.version' package.json)
+                  TAG="v${VERSION}"
 
-          if git ls-remote --tags origin "$TAG" | grep -q "$TAG"; then
-            echo "Tag $TAG already exists on remote, skipping"
-            echo "should-release=false" >> "$GITHUB_OUTPUT"
-          else
-            echo "should-release=true" >> "$GITHUB_OUTPUT"
-            echo "tag=$TAG" >> "$GITHUB_OUTPUT"
-          fi
+                  if git ls-remote --exit-code --tags origin "refs/tags/$TAG" &>/dev/null; then
+                    echo "Tag $TAG already exists on remote, skipping"
+                    echo "should_release=false" >> "$GITHUB_OUTPUT"
+                  else
+                    echo "should_release=true" >> "$GITHUB_OUTPUT"
+                    echo "tag=$TAG" >> "$GITHUB_OUTPUT"
+                  fi
 
-      - name: Build
-        if: steps.check-release.outputs.should-release == 'true'
-        run: bun run build
+            - name: Detect pre-release
+              id: pre-release
+              if: steps.check-release.outputs.should_release == 'true'
+              run: |
+                  if [ -f ".changeset/pre.json" ]; then
+                    echo "npm_tag=$(jq -r '.tag' .changeset/pre.json)" >> "$GITHUB_OUTPUT"
+                    echo "is_pre=true" >> "$GITHUB_OUTPUT"
+                  else
+                    echo "npm_tag=latest" >> "$GITHUB_OUTPUT"
+                    echo "is_pre=false" >> "$GITHUB_OUTPUT"
+                  fi
 
-      - uses: actions/setup-node@v6
-        if: steps.check-release.outputs.should-release == 'true'
-        with:
-          node-version: lts/*
-          registry-url: https://registry.npmjs.org
+            - name: Build
+              if: steps.check-release.outputs.should_release == 'true'
+              run: bun run build
 
-      - name: Publish to npm
-        if: steps.check-release.outputs.should-release == 'true'
-        run: npm publish --provenance --access public
+            # Node required for npm publish --provenance (OIDC-based trusted publishing)
+            - uses: ./.github/actions/setup-node
+              if: steps.check-release.outputs.should_release == 'true'
 
-      - name: Create GitHub Release
-        if: steps.check-release.outputs.should-release == 'true'
-        run: |
-          TAG="${{ steps.check-release.outputs.tag }}"
-          git tag "$TAG"
-          git push origin "$TAG"
-          gh release create "$TAG" --generate-notes --title "$TAG"
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+            - name: Publish to npm
+              if: steps.check-release.outputs.should_release == 'true'
+              run: npm publish --provenance --tag ${{ steps.pre-release.outputs.npm_tag }}
+
+            - name: Create GitHub Release
+              if: steps.check-release.outputs.should_release == 'true'
+              run: |
+                  TAG="${{ steps.check-release.outputs.tag }}"
+                  FLAGS=(--generate-notes --title "$TAG" --target "${{ github.event.workflow_run.head_sha }}")
+
+                  if [ "${{ steps.pre-release.outputs.is_pre }}" = "true" ]; then
+                    FLAGS+=(--prerelease)
+                  fi
+
+                  gh release create "$TAG" "${FLAGS[@]}"
+              env:
+                  GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}