code-quality.yml

name: Code quality

on:
  push:
    branches: [main]
    tags: ["v*"]
  pull_request:

concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

permissions:
  contents: read

jobs:
  quality:
    runs-on: ubuntu-latest
    timeout-minutes: 15
    strategy:
      fail-fast: false
      matrix:
        python-version: ["3.12", "3.13", "3.14"]

    steps:
      - name: Check out repository
        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7

      - name: Set up Python
        uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6
        with:
          python-version: ${{ matrix.python-version }}
          cache: "pip"

      # The provider extras are installed so strict mypy can resolve the SDK
      # type modules the adapters use under TYPE_CHECKING. Drop the extras
      # here if you delete the model-provider layer.
      - name: Install package
        run: python -m pip install -e ".[dev,anthropic,openai]"

      - name: Run environment check
        run: python scripts/check-env.py

      # `make shell` only syntax-checks the template's single-use generator
      # scripts when they are present, so this step becomes a no-op once they
      # have been removed from a project generated from the template.
      - name: Check shell syntax
        run: make shell

      - name: Run Ruff lint
        run: ruff check .

      - name: Run Ruff format check
        run: ruff format --check .

      - name: Run mypy
        run: mypy

      - name: Run OKF docs check
        run: python scripts/check-okf-docs.py