EXP: setup a tangled pipeline

.tangled/workflows/verify.yml

@@ -0,0 +1,45 @@
+# Mirror of .github/workflows/verify.yml for Tangled Spindles
+# Docs: https://docs.tangled.org/spindles#pipelines
+#
+# Prerequisites:
+#   - Add secret "HURL_api_token" in repository Settings → Pipelines → Secrets.
+#     Tangled injects secrets as environment variables by name at run time.
+
+when:
+  # Manual trigger only, matching workflow_dispatch
+  - event: ["push", "manual"]
+    branch: ["main"]
+
+engine: "nixery"
+
+# Clone defaults are fine:
+#   skip: false, depth: 1, submodules: false
+
+dependencies:
+  nixpkgs:
+    - hurl
+
+steps:
+  - name: "Run hurl tests"
+    command: "hurl --test --report-tap verification.tap test/prod.hurl"
+    # HURL_api_token is injected from repository secrets (configured separately).
+
+  - name: "Show TAP summary"
+    command: |
+      echo "=== TAP Test Results ==="
+      if [ -f verification.tap ]; then
+        passed=$(grep -c '^ok' verification.tap || true)
+        failed=$(grep -c '^not ok' verification.tap || true)
+        total=$((passed + failed))
+        echo "Total: $total | Passed: $passed | Failed: $failed"
+        echo ""
+        cat verification.tap
+        if [ "$failed" -gt 0 ]; then
+          echo ""
+          echo ":: FAILURES DETECTED ::"
+          exit 1
+        fi
+      else
+        echo "ERROR: verification.tap not found"
+        exit 1
+      fi