strix/.github/workflows/ci.yml

name: CI

on:
  pull_request:
  push:
    branches:
      - main
  workflow_dispatch:

permissions:
  contents: read

concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

jobs:
  lint:
    runs-on: ubuntu-latest
    timeout-minutes: 15
    steps:
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1  # v7.0.1
        with:
          persist-credentials: false
      - uses: ./.github/actions/setup-python-env
      - run: uv lock --check
      - run: uv run --frozen ruff check .
      - run: uv run --frozen ruff format --check .
      - run: uv run --frozen mypy strix/
      - run: uv run --frozen bandit -r strix/ -c pyproject.toml

  pytest:
    name: pytest (${{ matrix.python-version }})
    runs-on: ubuntu-latest
    timeout-minutes: 15
    strategy:
      fail-fast: false
      matrix:
        python-version: ['3.12', '3.14']
    steps:
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1  # v7.0.1
        with:
          persist-credentials: false
      - uses: ./.github/actions/setup-python-env
        with:
          python-version: ${{ matrix.python-version }}
      - run: uv run --frozen pytest -q

  tui:
    runs-on: ubuntu-latest
    timeout-minutes: 15
    defaults:
      run:
        working-directory: strix/interface/tui
    steps:
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1  # v7.0.1
        with:
          persist-credentials: false
      - uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e  # v7.0.0
        with:
          go-version-file: strix/interface/tui/go.mod
          cache-dependency-path: strix/interface/tui/go.sum
      - run: test -z "$(gofmt -l .)"
      - run: go vet ./...
      - run: CGO_ENABLED=0 go build -trimpath -o /dev/null ./cmd/strix-tui
      - run: go test -race ./...

  viewer:
    runs-on: ubuntu-latest
    timeout-minutes: 15
    defaults:
      run:
        working-directory: strix/interface/viewer/frontend
    steps:
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1  # v7.0.1
        with:
          persist-credentials: false
      - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1  # v7.1.0
        with:
          node-version: '24'
          cache: npm
          cache-dependency-path: strix/interface/viewer/frontend/package-lock.json
      - run: npm ci --no-audit --no-fund
      - run: npm run build
      - name: Committed viewer bundle matches the build
        run: git -C "$GITHUB_WORKSPACE" diff --exit-code --stat -- strix/interface/viewer/static && test -z "$(git -C "$GITHUB_WORKSPACE" status --porcelain -- strix/interface/viewer/static)"

  wheel:
    runs-on: ubuntu-latest
    timeout-minutes: 15
    steps:
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1  # v7.0.1
        with:
          persist-credentials: false
      - uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e  # v7.0.0
        with:
          go-version-file: strix/interface/tui/go.mod
          cache-dependency-path: strix/interface/tui/go.sum
      - uses: ./.github/actions/setup-python-env
      - run: uv build --wheel
      - name: Wheel ships the TUI sidecar and the viewer bundle
        run: |
          uv run --frozen python - <<'PY'
          import glob, zipfile
          (wheel,) = glob.glob("dist/*.whl")
          names = zipfile.ZipFile(wheel).namelist()
          assert "strix/bin/strix-tui" in names, names
          assert "strix/interface/viewer/static/index.html" in names, names
          assert not any(name.startswith("strix/interface/viewer/frontend/") for name in names)
          assert not any(name.startswith("strix/interface/tui/cmd/") for name in names)
          PY
      - name: Install into a clean environment and run the CLI
        env:
          UV_EXCLUDE_NEWER: 5 days
        run: |
          uv venv --python 3.12 /tmp/strix-smoke
          uv pip install --python /tmp/strix-smoke/bin/python dist/*.whl
          /tmp/strix-smoke/bin/strix --version
          /tmp/strix-smoke/bin/strix --help >/dev/null
      - name: Vertex AI and Bedrock dependencies install with the wheel
        run: /tmp/strix-smoke/bin/python -c "import google.auth.transport.requests, boto3"