ci(cd): fix invalid job-level if; move secret/PR checks into steps fo… #37

	name: CI

	on:
	push:
	branches: [ main, master ]
	pull_request:
	branches: [ main, master ]

	jobs:
	build:
	runs-on: ubuntu-latest

	steps:
	- name: Checkout
	uses: actions/checkout@v4
	with:
	fetch-depth: 0

	# Linear history enforcement removed per project policy.

	- name: Set up Python 3.11
	uses: actions/setup-python@v5
	with:
	python-version: '3.11'

	- name: Cache pip
	uses: actions/cache@v4
	with:
	path: ~/.cache/pip
	key: ${{ runner.os }}-pip-${{ hashFiles('*/requirements.txt') }}
	restore-keys: \|
	${{ runner.os }}-pip-

	- name: Install dependencies
	run: \|
	python -m pip install --upgrade pip
	pip install -r requirements.txt -r requirements-dev.txt

	- name: Lint - black
	run: black --check .

	- name: Lint - isort
	run: isort --profile black --check-only .

	- name: Lint - flake8
	run: flake8 .

	- name: Type check - mypy
	run: mypy --ignore-missing-imports .

	- name: Run tests (CLI only)
	env:
	PYTHONPATH: .
	run: python -m pytest -q tests --cov=edgeflowc --cov-report=xml --cov-fail-under=90

	- name: Generate coverage badge
	run: genbadge coverage -i coverage.xml -o coverage.svg

	- name: Upload coverage badge artifact
	uses: actions/upload-artifact@v4
	with:
	name: coverage-badge
	path: coverage.svg

Provide feedback