ci.yml

name: CI

on:
  push:
    branches: [main]
  pull_request:
    branches: [main]

jobs:
  test:
    runs-on: macos-latest

    steps:
      - uses: actions/checkout@v4
      - uses: astral-sh/setup-uv@v5
        with:
          python-version: "3.11"

      - name: Install dependencies
        run: uv sync --all-extras

      - name: Lint
        run: uv run ruff check src/ tests/

      - name: Type check
        run: uv run mypy src/gemstack

      - name: Test
        run: uv run pytest --cov=src/gemstack --cov-report=xml

      - name: Dependency audit
        run: uv run pip-audit --ignore-vuln CVE-2026-3219 --skip-editable

  build:
    runs-on: ubuntu-latest
    needs: [test]
    steps:
      - uses: actions/checkout@v4
        with:
          fetch-depth: 0  # Full history needed for hatch-vcs

      - uses: astral-sh/setup-uv@v5
        with:
          python-version: "3.11"

      - name: Build package
        run: uv build

      - uses: actions/upload-artifact@v4
        with:
          name: dist
          path: dist/