main.yaml

name: Python CI

on:
  push:
    branches: [main, develop]
  pull_request:
    branches: [main]
  release:
    types: [published]

jobs:
  lint:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4

      - name: Set up Python
        uses: actions/setup-python@v5
        with:
          python-version: "3.12"

      - name: Install lint dependencies
        run: |
          python -m pip install --upgrade pip
          pip install -e .

      - name: Run Ruff linter
        run: ruff check zebra_day tests

      - name: Run Ruff formatter check
        run: ruff format --check zebra_day tests

      - name: Run mypy type checker
        run: mypy zebra_day --ignore-missing-imports

  test:
    strategy:
      fail-fast: false
      matrix:
        os: [ubuntu-latest, macos-latest]
        python-version: ["3.12", "3.13"]
    runs-on: ${{ matrix.os }}
    env:
      ZEBRA_DAY_DEPLOYMENT_CODE: ci
      DEPLOYMENT_CODE: ci
      LSMC_DEPLOYMENT_CODE: ci
      ZEBRA_DAY_SESSION_SECRET: zebra-day-ci-session-secret
      XDG_CONFIG_HOME: ${{ runner.temp }}/zebra-day/config
      XDG_DATA_HOME: ${{ runner.temp }}/zebra-day/data
      XDG_STATE_HOME: ${{ runner.temp }}/zebra-day/state
      XDG_CACHE_HOME: ${{ runner.temp }}/zebra-day/cache

    steps:
      - uses: actions/checkout@v4

      - name: Set up Python ${{ matrix.python-version }}
        uses: actions/setup-python@v5
        with:
          python-version: ${{ matrix.python-version }}

      - name: Install dependencies
        run: |
          python -m pip install --upgrade pip
          pip install -e .

      - name: Prepare explicit CI runtime config
        run: |
          python - <<'PY'
          from pathlib import Path
          from zebra_day.settings import build_default_config_template

          config_dir = Path(__import__("os").environ["XDG_CONFIG_HOME"]) / "zebra_day"
          config_dir.mkdir(parents=True, exist_ok=True)
          (config_dir / "zebra-day-config-ci.yaml").write_bytes(
              build_default_config_template("ci")
          )
          PY

      - name: Install Playwright browsers
        run: |
          if [ "${{ matrix.os }}" = "ubuntu-latest" ]; then
            python -m playwright install --with-deps chromium
          else
            python -m playwright install chromium
          fi

      - name: Smoke test - CLI entry points
        run: |
          zday --help
          zday info

      - name: Smoke test - Core imports
        run: |
          python -c "import zebra_day.client; print('client: OK')"
          python -c "import zebra_day.cli; print('cli: OK')"
          python -c "import zebra_day.paths; print('paths: OK')"
          python -c "from zebra_day.web.app import create_app; print('web.app: OK')"

      - name: Run pytest
        run: pytest --cov=zebra_day --cov-report=xml

      - name: Upload coverage to Codecov
        uses: codecov/codecov-action@v4
        if: matrix.python-version == '3.12' && matrix.os == 'ubuntu-latest'
        with:
          files: ./coverage.xml
          fail_ci_if_error: false

  build:
    runs-on: ubuntu-latest
    needs: [lint, test]

    steps:
      - uses: actions/checkout@v4
        with:
          fetch-depth: 0
          fetch-tags: true
          ref: ${{ github.event_name == 'release' && github.event.release.tag_name || github.ref }}

      - name: Set up Python
        uses: actions/setup-python@v5
        with:
          python-version: "3.12"

      - name: Install build tools
        run: pip install build

      - name: Verify release version
        if: github.event_name == 'release'
        run: |
          python -m pip install setuptools_scm
          version="$(python -c 'from setuptools_scm import get_version; print(get_version())')"
          echo "Resolved version: $version"
          if [[ "$version" == *".dev"* ]]; then
            echo "Refusing to build release from development version: $version" >&2
            exit 1
          fi
          if [[ "$version" != "${{ github.event.release.tag_name }}" ]]; then
            echo "Resolved version $version does not match release tag ${{ github.event.release.tag_name }}" >&2
            exit 1
          fi

      - name: Build package
        run: python -m build

      - name: Upload wheel artifact
        uses: actions/upload-artifact@v4
        with:
          name: zebra_day-wheel
          path: dist/*.whl

  publish:
    runs-on: ubuntu-latest
    needs: build
    if: github.event_name == 'release'

    steps:
      - uses: actions/checkout@v4
        with:
          fetch-depth: 0
          fetch-tags: true
          ref: ${{ github.event.release.tag_name }}

      - name: Set up Python
        uses: actions/setup-python@v5
        with:
          python-version: "3.12"

      - name: Install build tools
        run: pip install build twine

      - name: Verify release version
        run: |
          python -m pip install setuptools_scm
          version="$(python -c 'from setuptools_scm import get_version; print(get_version())')"
          echo "Resolved version: $version"
          if [[ "$version" == *".dev"* ]]; then
            echo "Refusing to publish non-release version: $version" >&2
            exit 1
          fi
          if [[ "$version" != "${{ github.event.release.tag_name }}" ]]; then
            echo "Resolved version $version does not match release tag ${{ github.event.release.tag_name }}" >&2
            exit 1
          fi

      - name: Build package
        run: python -m build

      - name: Publish to PyPI
        env:
          TWINE_USERNAME: __token__
          TWINE_PASSWORD: ${{ secrets.PYPI_API_TOKEN }}
        run: twine upload dist/* --skip-existing