ci.yml

# Copyright (c) 2026 Santander Group
# SPDX-License-Identifier: Apache-2.0
#
# Lint + format + type-check + tests + coverage.
# llm_bridge is an installable package (src/ layout). The core has no required
# runtime dependencies; vendor SDKs are optional extras. Tests run fully offline
# against the mock/callable providers and stubbed vendor SDKs.
#
# NOTE: before publishing, verify every action reference is pinned to a 40-char
#       commit SHA (use `pin-github-action`).

name: CI

on:
  push:
    branches: [main, development]
  pull_request:

permissions:
  contents: read

concurrency:
  group: ci-${{ github.ref }}
  cancel-in-progress: true

jobs:
  lint:
    name: Lint & format & type-check
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0  # v7.0.0
      - name: Set up Python
        uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1  # v6.3.0
        with:
          python-version: "3.11"
          cache: pip
      - name: Install dev tooling
        run: |
          python -m pip install --upgrade pip
          pip install -e ".[dev]"
      - name: Ruff
        run: ruff check .
      - name: Black --check
        run: black --check .
      - name: Mypy
        run: mypy src/llm_bridge

  test:
    name: Test (Python ${{ matrix.python-version }})
    runs-on: ubuntu-latest
    strategy:
      fail-fast: false
      matrix:
        python-version: ["3.10", "3.11", "3.12"]
    steps:
      - name: Checkout
        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0  # v7.0.0
      - name: Set up Python ${{ matrix.python-version }}
        uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1  # v6.3.0
        with:
          python-version: ${{ matrix.python-version }}
          cache: pip
      - name: Install package + test tooling
        run: |
          python -m pip install --upgrade pip
          pip install -e ".[dev]"
      - name: Run tests with coverage
        run: pytest --cov=llm_bridge --cov-report=xml --cov-report=term-missing
      - name: Upload coverage to Codecov
        if: matrix.python-version == '3.11'
        uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f  # v7.0.0
        with:
          files: ./coverage.xml
          fail_ci_if_error: false
        env:
          CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}