CI workflow (realiti4/claude-swap)

name: CI
 
on:
  push:
    branches: [main]
  pull_request:
    branches: [main]
 
concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true
 
jobs:
  test:
    timeout-minutes: 30
    runs-on: latchkey-small
 
    steps:
      - uses: actions/checkout@v4
 
      # uv (not pip) so the PEP 735 dev dependency-group - pytest,
      # pytest-asyncio - installs from the committed lockfile, same as local
      # development.
      - name: Install uv
        uses: astral-sh/setup-uv@v6
        with:
          python-version: '3.12'
 
      - name: Install dependencies
        run: uv sync
 
      - name: Run tests
        run: uv run pytest
 
  test-windows:
    timeout-minutes: 30
    runs-on: windows-latest
 
    steps:
      - uses: actions/checkout@v4
 
      - name: Install uv
        uses: astral-sh/setup-uv@v6
        with:
          python-version: '3.12'
 
      - name: Install dependencies
        run: uv sync
 
      - name: Run tests
        # Includes the TUI tests: the Textual TUI (unlike the old curses one)
        # runs on stock Windows, and this job is the proof.
        run: uv run pytest
 
  macos-keychain:
    timeout-minutes: 30
    runs-on: macos-latest
 
    steps:
      - uses: actions/checkout@v4
 
      - name: Install uv
        uses: astral-sh/setup-uv@v6
        with:
          python-version: '3.12'
 
      - name: Install dependencies
        run: uv sync
 
      - name: Run macOS Keychain tests (contract + real security wrapper)
        # faulthandler dumps every thread's stack if a test exceeds 60s - a
        # `security` call blocking on an invisible SecurityAgent dialog would
        # otherwise hang the job with no clue where. The step timeout is the
        # backstop that actually kills it.
        timeout-minutes: 5
        run: uv run pytest tests/test_macos_keychain_contract.py tests/test_macos_keychain.py -v -o faulthandler_timeout=60