name: CI
# 2026-07-04

on:
  push:
    branches: [main, master]
  pull_request:
    branches: [main, master]

jobs:
  lint:
    runs-on: ubuntu-latest
    steps:
      - name: Install dependencies
        run: |
          python3 -m pip install --upgrade pip
          pip3 install ruff mypy
          pip3 install -e ".[dev]"

      - name: Run ruff
        run: ruff check .

      - name: Run mypy
        run: mypy youtube_tui/

  test:
    runs-on: ubuntu-latest
    steps:
      - name: Install dependencies
        run: |
          python3 -m pip install --upgrade pip
          pip3 install -e ".[dev]"
          pip3 install -r requirements-api.txt

      - name: Run pytest
        run: python3 -m pytest tests/ web/server/tests/ -v --tb=short

  docker-build:
    runs-on: ubuntu-latest
    steps:
      - name: Build Docker image
        run: |
          docker build -t youtube-cli:test --no-cache .

  security:
    runs-on: ubuntu-latest
    steps:
      - name: Run bandit (Python SAST)
        run: |
          pip3 install bandit
          bandit -r youtube_cli/ youtube_tui/ web/server/ -ll

  build-result:
    needs: [lint, test, docker-build, security]
    runs-on: ubuntu-latest
    if: always()
    steps:
      - name: Summary
        run: echo "All CI checks completed"