feat:phase-3 clear #6

	name: CI

	on:
	push:
	branches: [main]
	pull_request:
	branches: [main]

	jobs:
	install:
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4
	- uses: oven-sh/setup-bun@v2
	with:
	bun-version: latest
	- name: Cache dependencies
	uses: actions/cache@v4
	with:
	path: ~/.bun/install/cache
	key: ${{ runner.os }}-bun-${{ hashFiles('**/bun.lock') }}
	restore-keys: \|
	${{ runner.os }}-bun-
	- name: Install dependencies
	run: bun install --frozen-lockfile

	type-check:
	needs: install
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4
	- uses: oven-sh/setup-bun@v2
	with:
	bun-version: latest
	- name: Install dependencies
	run: bun install --frozen-lockfile
	- name: Type check
	run: bun run type-check

	test:
	needs: install
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4
	- uses: oven-sh/setup-bun@v2
	with:
	bun-version: latest
	- name: Install dependencies
	run: bun install --frozen-lockfile
	- name: Run tests
	run: bun run test

	security:
	needs: install
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4
	- uses: oven-sh/setup-bun@v2
	with:
	bun-version: latest
	- name: Install dependencies
	run: bun install --frozen-lockfile
	- name: Audit dependencies
	run: bun audit --level moderate

	build:
	needs: [type-check, test]
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4
	- uses: oven-sh/setup-bun@v2
	with:
	bun-version: latest
	- name: Install dependencies
	run: bun install --frozen-lockfile
	- name: Build
	run: bun run build

Provide feedback