workflow.yml

name: CI/CD

on:
  push:
    branches: ["**"]
    tags: ["*"]
  pull_request:
    branches: ["**"]

jobs:
  cpp_build_and_test:
    name: Build & Test C++
    runs-on: ubuntu-latest

    steps:
      - name: Checkout repository code
        uses: actions/checkout@v6

      - name: Set up Python
        uses: actions/setup-python@v5
        with:
          python-version: "3.14"

      - name: Install dependencies
        run: |
          sudo apt-get update
          sudo apt-get install -y cmake ninja-build build-essential libopenblas-dev
          pip install numpy

      - name: Configure CMake
        working-directory: cpp
        run: cmake -S . -B build -DCMAKE_BUILD_TYPE=Release -DPython3_EXECUTABLE="$(which python3)"

      - name: Build project
        working-directory: cpp
        run: cmake --build build

      - name: Run unit tests
        working-directory: cpp/build
        run: ctest --output-on-failure

  lint:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v6
      - uses: actions/setup-python@v5
        with:
          python-version: "3.14"
      - run: pip install ruff black
      - run: ruff check sgtlearn/
      - run: black --check sgtlearn/

  python_layer_tests:
    runs-on: ubuntu-latest
    strategy:
      fail-fast: false
      matrix:
        python-version: ["3.11", "3.12", "3.13", "3.14"]
    steps:
      - uses: actions/checkout@v6
      - uses: actions/setup-python@v5
        with:
          python-version: ${{ matrix.python-version }}
      - run: pip install -e ".[dev]"
      - name: Install scikit-learn 1.9+ for exact tree fidelity (3.11+)
        if: matrix.python-version != '3.10'
        run: pip install "scikit-learn>=1.9"
      - run: pytest -v

  build-check:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v6
      - uses: actions/setup-python@v5
        with:
          python-version: "3.14"
      - run: pip install build
      - run: python -m build

  docs:
    name: Build docs
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v6
      - uses: actions/setup-python@v5
        with:
          python-version: "3.12"   # matches .readthedocs.yml
      # nbsphinx renders the tutorial notebooks and shells out to pandoc.
      - run: sudo apt-get update && sudo apt-get install -y pandoc
      - run: pip install -r docs/requirements.txt
      # -W turns Sphinx warnings (broken refs, malformed docstrings) into
      # failures. The native C++ extension is mocked (autodoc_mock_imports),
      # so no compiler/CMake is needed here.
      - run: sphinx-build -W --keep-going -b html docs docs/_build/html

  build_wheels:
    name: Build wheels for ${{ matrix.os }}
    if: startsWith(github.ref, 'refs/tags/v')
    needs: [cpp_build_and_test, lint, python_layer_tests, build-check]
    runs-on: ${{ matrix.os }}
    strategy:
      matrix:
        os: [ubuntu-latest, ubuntu-24.04-arm, windows-latest, windows-11-arm, macos-15-intel, macos-latest]
    steps:
      - uses: actions/checkout@v6
        with:
          submodules: true
          persist-credentials: false

      - name: Build wheels
        uses: pypa/cibuildwheel@v3.4.1
        with:
          extras: uv
        env:
          CIBW_BUILD_FRONTEND: "build[uv]"
          CIBW_BUILD: "cp311-* cp312-* cp313-* cp314-*"
          CIBW_SKIP: "cp36-* cp37-* cp38-* cp39-* cp310-* pp*"

      - uses: actions/upload-artifact@v5
        with:
          name: wheels-${{ matrix.os }}
          path: ./wheelhouse/*.whl

  build_sdist:
    name: Build source distribution
    if: startsWith(github.ref, 'refs/tags/v')
    needs: [cpp_build_and_test, lint, python_layer_tests, build-check]
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v6
        with:
          submodules: true
          persist-credentials: false

      - name: Build sdist
        run: pipx run build --sdist

      - uses: actions/upload-artifact@v5
        with:
          name: sdist
          path: dist/*.tar.gz

  publish-to-testpypi:
    if: startsWith(github.ref, 'refs/tags/v')
    needs: [build_wheels, build_sdist]
    name: Publish Python 🐍 distribution 📦 to TestPyPI
    runs-on: ubuntu-latest
    environment:
      name: testpypi
      url: https://test.pypi.org/p/sgtlearn
    permissions:
      id-token: write
    steps:
      - uses: actions/download-artifact@v5
        with:
          pattern: wheels-*
          merge-multiple: true
          path: dist
      - uses: actions/download-artifact@v5
        with:
          name: sdist
          path: dist
      - uses: pypa/gh-action-pypi-publish@release/v1
        with:
          repository-url: https://test.pypi.org/legacy/
          skip-existing: true
          # Attestations disabled to avoid the Rekor (Sigstore transparency log)
          # outage. Set back to true (or remove this line) once Rekor is healthy.
          # attestations: false

  publish-to-pypi:
    if: startsWith(github.ref, 'refs/tags/v')
    needs: [publish-to-testpypi]
    name: Publish Python 🐍 distribution 📦 to PyPI
    runs-on: ubuntu-latest
    environment:
      name: pypi
      url: https://pypi.org/p/sgtlearn
    permissions:
      id-token: write
    steps:
      - uses: actions/download-artifact@v5
        with:
          pattern: wheels-*
          merge-multiple: true
          path: dist
      - uses: actions/download-artifact@v5
        with:
          name: sdist
          path: dist
      - uses: pypa/gh-action-pypi-publish@release/v1
        with:
          skip-existing: true
          # Attestations disabled to avoid the Rekor (Sigstore transparency log)
          # outage. Set back to true (or remove this line) once Rekor is healthy.
          # attestations: false