name: Static Analysis
on:
  push:
    branches: [main]
  pull_request:
    branches: [main]

permissions:
  contents: read

jobs:
  basedpyright:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - name: "Set up Python"
        uses: actions/setup-python@v5
        with:
          python-version-file: "pyproject.toml"
      - name: Install uv
        uses: astral-sh/setup-uv@v2
        with:
          enable-cache: true
          cache-dependency-glob: "uv.lock"
      - name: Install the project
        run: uv sync --all-extras --dev
      - name: run basedpyright
        run: uv run basedpyright

  issue-gate:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      # The gate runs from `pull_request_target`, where a crash is invisible until
      # a contributor's PR is silently ungated. Check it here instead.
      - run: node .github/scripts/issue-gate.test.js