name: Run mypy

on:
  push:
    branches:
      - 'master'
    paths:
      - pyproject.toml
      - uv.lock
      - '**/*.py'
      - '.github/workflows/python-mypy.yaml'
  pull_request:
    branches:
      - master
    paths:
      - pyproject.toml
      - uv.lock
      - '**/*.py'
      - '.github/workflows/python-mypy.yaml'

jobs:
  run-mypy:
    runs-on: ubuntu-24.04
    strategy:
      matrix:
        python-version: ["3.13"]
    steps:
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1

      - name: Set up Python ${{ matrix.python-version }}
        uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
        with:
          python-version: ${{ matrix.python-version }}

      - name: Install uv
        uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0
        with:
          version: '0.9.17'

      - name: Install dependencies
        run: |
          uv venv
          uv pip install --group mypy

      - name: Prepare config directory
        run: |
          # The django-stubs plugin imports anthias_server.django_project.settings, which
          # transitively instantiates AnthiasSettings(). On first run that
          # tries to read ~/.anthias/anthias.conf — write a minimal valid
          # one with the section headers AnthiasSettings expects.
          mkdir -p ~/.anthias
          cat > ~/.anthias/anthias.conf <<'CONF'
          [main]
          [viewer]
          [auth_basic]
          CONF

      - name: Run mypy
        run: |
          uv run mypy .