ci.yml

name: CI

on:
  push:
    branches: [ main, testing ]
  pull_request:
    branches: [ main ]
  schedule:
    # Daily 06:00 UTC — picks up new black/ruff/mypy releases without waiting for a push.
    - cron: '0 6 * * *'
  workflow_dispatch:

jobs:
  test:
    runs-on: ubuntu-latest
    strategy:
      matrix:
        python-version: ["3.12", "3.13", "3.14"]

    steps:
    - uses: actions/checkout@v4

    - name: Set up Python ${{ matrix.python-version }}
      uses: actions/setup-python@v5
      with:
        python-version: ${{ matrix.python-version }}

    - name: Install uv
      run: pip install uv

    - name: Install dependencies
      run: uv pip install --system -r requirements.txt

    - name: Install Qt runtime dependencies
      run: |
        sudo apt-get update -q
        sudo apt-get install -y libgl1 libegl1 libxkbcommon-x11-0

    - name: Run tests
      env:
        QT_QPA_PLATFORM: offscreen
      run: pytest tests/ -v --cov=src --cov-report=xml --cov-fail-under=80

    - name: Upload coverage to Codecov
      uses: codecov/codecov-action@v4
      with:
        file: ./coverage.xml
        flags: unittests
        fail_ci_if_error: false

  lint:
    runs-on: ubuntu-latest

    steps:
    - uses: actions/checkout@v4

    # Track-latest lint tooling: setup-uv (SHA-pinned for supply-chain safety) installs the
    # freshest black/isort/mypy on every run. Daily cron + cache bypass on schedule means
    # upstream formatting changes are absorbed in one commit instead of festering until the
    # next push fails.
    - uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0
      with:
        python-version: "3.13"

    - name: Install latest linting tools
      env:
        # Scheduled runs bypass the cache so a fresh resolve hits PyPI for new releases.
        UV_CACHE_DIR: ${{ github.event_name == 'schedule' && runner.temp || '/home/runner/.cache/uv' }}
      run: |
        uv tool install --upgrade black
        uv tool install --upgrade isort
        # mypy needs project deps on its sys.path to resolve imports, so install them into
        # mypy's isolated tool env via --with-requirements.
        uv tool install --upgrade --with-requirements requirements.txt mypy

    - name: Check formatting with black
      run: uv tool run black --check src/ tests/

    - name: Check import sorting with isort
      run: uv tool run isort --check-only src/ tests/

    - name: Type check with mypy
      run: uv tool run mypy src/