Add CI workflow and slim publish.yml to release-only triggers

Author: eli-the-wizard

.github/workflows/ci.yml

@@ -0,0 +1,64 @@
+name: CI
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+  workflow_dispatch:
+
+jobs:
+  lint:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Install uv
+        uses: astral-sh/setup-uv@v5
+        with:
+          enable-cache: true
+
+      - name: Lint
+        run: uv run ruff check
+
+  test:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Install uv
+        uses: astral-sh/setup-uv@v5
+        with:
+          enable-cache: true
+
+      - name: Test (with coverage gate)
+        run: uv run pytest
+
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Install uv
+        uses: astral-sh/setup-uv@v5
+        with:
+          enable-cache: true
+
+      - name: Build sdist and wheel
+        run: uv build
+
+      - name: Validate distribution metadata
+        run: uvx twine check dist/*
+
+      - name: Smoke-test that the wheel installs and imports
+        run: |
+          uv venv /tmp/install-check
+          uv pip install --python /tmp/install-check dist/*.whl
+          /tmp/install-check/bin/python -c "import linear_python_client; print('installed', linear_python_client.__version__)"
+
+  # Live smoke test runs on every push to main (not PRs, to avoid API calls on every review).
+  smoke:
+    needs: [lint, test, build]
+    if: github.event_name == 'push'
+    uses: ./.github/workflows/smoke.yml
+    secrets:
+      LINEAR_API_KEY: ${{ secrets.LINEAR_API_KEY }}

.github/workflows/publish.yml

@@ -1,13 +1,10 @@
 name: Publish
 
+# Runs ONLY when a GitHub Release is published.
+# publish is unconditional here — if this workflow fires, it's always a release.
 on:
-  # Build + verify on every push/PR; publish to PyPI when a GitHub Release is published.
-  push:
-    branches: [main]
-  pull_request:
   release:
     types: [published]
-  workflow_dispatch:
 
 jobs:
   test:
@@ -57,13 +54,11 @@ jobs:
   smoke:
     needs: [test, build]
     uses: ./.github/workflows/smoke.yml
-    if: github.event_name == 'release'
     secrets:
       LINEAR_API_KEY: ${{ secrets.LINEAR_API_KEY }}
 
   publish:
     needs: [test, build, smoke]
-    if: github.event_name == 'release'
     runs-on: ubuntu-latest
     environment:
       name: pypi