name: CI

on:
  push:
    branches: [main, dev]
  pull_request:
    branches: [main, dev]

permissions:
  contents: read

env:
  FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: "true"

jobs:
  lint:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
      - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
        with:
          python-version: "3.13"
      - run: pip install ruff
      - run: ruff check src/ tests/
      - run: ruff format --check src/ tests/

  test:
    strategy:
      fail-fast: false
      matrix:
        python-version: ["3.10", "3.11", "3.12", "3.13"]
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
      - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
        with:
          python-version: ${{ matrix.python-version }}
      - run: |
          python -m pip install --upgrade pip
          pip install -e ".[dev]"
      # tests/e2e build a wheel + clean venv per the dedicated e2e-wheel.yml
      # workflow — they are not part of the fast unit lane.
      - run: coverage run -m pytest -v --tb=short --rootdir=. --ignore=tests/e2e

  standards:
    name: seedgo-audit
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
        with:
          # Full history: the README-freshness check reads `git log` to find the
          # last commit touching each branch's .py. A shallow (depth-1) checkout
          # makes every file look born at HEAD, so every README false-fails as
          # "stale". Full history makes CI match a local audit exactly.
          fetch-depth: 0
      - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
        with:
          python-version: "3.13"
      - run: |
          python -m pip install --upgrade pip
          # Install the `memory` extra (numpy/chromadb/fastembed) alongside dev:
          # the diagnostics standard runs pyright over every branch, and memory's
          # handlers import chromadb/numpy. Without these deps installed, pyright
          # reports them as unresolved imports (reportMissingImports=error) and
          # memory scores <100 — a false failure from a missing CI dep, not a code
          # defect. Installing the declared extra lets pyright resolve them so the
          # audit measures real type-correctness (and matches a local audit).
          pip install -e ".[dev,memory]"
      - name: Run seedgo standards audit
        run: python .github/scripts/seedgo_audit.py

  coverage:
    name: coverage
    needs: [test]
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
      - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
        with:
          python-version: "3.13"
      - run: |
          python -m pip install --upgrade pip
          pip install -e ".[dev]"
      - run: coverage run -m pytest --rootdir=. --ignore=tests/e2e
      - run: coverage xml
      - uses: codecov/codecov-action@e79a6962e0d4c0c17b229090214935d2e33f8354 # v6.0.1
        with:
          files: ./coverage.xml
          fail_ci_if_error: false