lint.yml

name: Lint

on:
  push:
    branches: [main]
  pull_request:
    branches: [main]
  workflow_dispatch:

permissions:
  contents: read

concurrency:
  group: lint-${{ github.ref }}
  cancel-in-progress: true

jobs:
  ruff:
    name: ruff check
    runs-on: ubuntu-latest
    steps:
      - name: Checkout repository
        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0

      - name: Set up Python
        uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0
        with:
          python-version: '3.12'
          cache: 'pip'
          cache-dependency-path: pyproject.toml

      - name: Install lint dependencies
        run: |
          python -m pip install --upgrade pip
          pip install "ruff>=0.6.0"

      - name: Run ruff check
        run: ruff check . --output-format=github

      - name: Run ruff format (check only, advisory)
        run: ruff format --check . || echo "Formatter differences present (non-blocking)."
        continue-on-error: true

  mypy:
    name: mypy (advisory)
    runs-on: ubuntu-latest
    steps:
      - name: Checkout repository
        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0

      - name: Set up Python
        uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0
        with:
          python-version: '3.12'
          cache: 'pip'
          cache-dependency-path: pyproject.toml

      - name: Install dependencies
        run: |
          python -m pip install --upgrade pip
          pip install -e ".[dev,blockchain]"

      - name: Run mypy
        # Advisory only: do not block merges while type coverage is being added.
        run: mypy services tools auth blockchain api --no-error-summary || true