Add PR CI and make control-plane integration tests skip without a gateway

- Add .github/workflows/ci.yml: ruff + mypy + pytest on push/PR across
  Python 3.11-3.13 (the repo previously only ran checks on release).
- Integration tests skip cleanly when no gateway is on PATH (set
  OTARI_GATEWAY_CMD to run them), so CI is green without a gateway and
  passes with one.
- Register the 'integration' marker; per-file-ignore the subprocess/URL
  audit rules for the test harness.

Part of mozilla-ai/otari#96

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Author: njbrake

.github/workflows/ci.yml

@@ -0,0 +1,37 @@
+name: CI
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+    branches: [main]
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+jobs:
+  test:
+    runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        python-version: ["3.11", "3.12", "3.13"]
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: astral-sh/setup-uv@v6
+        with:
+          python-version: ${{ matrix.python-version }}
+
+      - name: Install dependencies
+        run: uv sync --extra dev
+
+      - name: Lint
+        run: uv run ruff check .
+
+      - name: Type check
+        run: uv run mypy src/
+
+      - name: Test
+        # Integration tests skip automatically when no gateway is on PATH.
+        run: uv run pytest

pyproject.toml

@@ -50,6 +50,9 @@ packages = ["src/otari"]
 [tool.pytest.ini_options]
 testpaths = ["tests"]
 asyncio_mode = "auto"
+markers = [
+    "integration: tests that require a running gateway (skipped if none is available)",
+]
 
 [tool.ruff]
 target-version = "py311"
@@ -61,6 +64,11 @@ extend-exclude = ["src/otari/_control_plane"]
 select = ["E", "F", "I", "N", "W", "UP", "S", "B", "A", "C4", "DTZ", "T10", "ISC", "ICN", "PIE", "PT", "RSE", "RET", "SIM", "TID", "TCH", "ARG", "PLC", "PLE", "PLW", "TRY", "FLY", "PERF", "RUF"]
 ignore = ["S101", "TRY003", "PLW0603"]
 
+[tool.ruff.lint.per-file-ignores]
+# Integration tests spawn the gateway subprocess and poll it over HTTP; the
+# subprocess/URL/temp-file audit rules don't apply to that test harness.
+"tests/integration/*" = ["S603", "S310", "SIM115", "SIM117", "PLC0415", "TC003"]
+
 [tool.ruff.lint.isort]
 known-first-party = ["otari"]
 

tests/integration/test_control_plane_generated.py

@@ -19,14 +19,14 @@
 
 import contextlib
 import os
+import shutil
 import socket
 import subprocess
 import tempfile
 import time
 import urllib.error
 import urllib.request
 from collections.abc import Iterator
-from pathlib import Path
 
 import pytest
 
@@ -65,6 +65,8 @@ def _wait_healthy(base_url: str, timeout: float = 30.0) -> None:
 @pytest.fixture(scope="module")
 def gateway_url() -> Iterator[str]:
     cmd = os.environ.get("OTARI_GATEWAY_CMD", "gateway").split()
+    if shutil.which(cmd[0]) is None:
+        pytest.skip(f"gateway command '{cmd[0]}' not found; set OTARI_GATEWAY_CMD (e.g. pip install the gateway)")
     port = _free_port()
     db_path = tempfile.NamedTemporaryFile(suffix=".db", delete=False).name
     proc = subprocess.Popen(