ci.yml

name: ci

on:
  push:
    branches: [master, main]
  pull_request:

jobs:
  python:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: astral-sh/setup-uv@v3
        with:
          enable-cache: true
      - run: uv sync --frozen
      - name: ruff format
        run: uv run ruff format --check .
      - name: ruff lint
        run: uv run ruff check .
      - name: ty type-check
        run: uv run ty check funclib tests
      - name: tests + coverage
        run: |
          uv run coverage run -m pytest
          uv run coverage report
      - name: pmat comply
        run: |
          curl -fsSL https://raw.githubusercontent.com/paiml/pmat/master/install.sh | sh || true
          pmat comply check
        continue-on-error: true
      - name: banned tools grep
        # Catches reintroduction of banned toolchains in *executable*
        # locations only — Makefile, pyproject.toml, scripts/. Prose
        # mentions in docs/README are allowed (they document the ban).
        run: |
          ! grep -nE '\b(pip install|pylint|poetry run|pipenv)\b' \
            Makefile pyproject.toml scripts/*.py