ci.yml

name: CI

on:
  push:
    branches: [main]
  pull_request:

jobs:
  test:
    name: lint · typecheck · unit · eval-mock
    runs-on: ubuntu-latest
    timeout-minutes: 15
    steps:
      - uses: actions/checkout@v4

      - uses: actions/setup-python@v5
        with:
          python-version: "3.11"
          cache: pip

      - name: Install dependencies
        run: |
          python -m pip install --upgrade pip
          pip install -r apps/api/requirements.txt
          pip install pytest pytest-cov ruff mypy pip-audit

      - name: Lint
        run: ruff check tests packages apps/api/packages apps/api/main.py apps/api/routers scripts

      - name: Type check
        run: mypy packages/tools packages/evals tests --ignore-missing-imports --follow-imports=skip

      - name: Unit tests
        run: PYTHONPATH=. pytest -q --tb=short

      - name: Eval gate (mock without LangSmith key)
        run: PYTHONPATH=. python scripts/run_evals.py

      - name: Dependency audit
        continue-on-error: true
        run: pip-audit -r apps/api/requirements-vercel.txt