pr_code_changes.yaml

# Workflow that runs on code changes to a pull request.

name: Code changes
on:
  pull_request:
    paths:
      - src/**
      - tests/**
      - scripts/**
      - .github/**
      - changelog.d/**
      - pyproject.toml
      - uv.lock
      - src/policyengine/data/bundle/manifest.json
  workflow_dispatch:

concurrency:
  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.run_id }}
  cancel-in-progress: ${{ github.event_name == 'pull_request' }}

jobs:
  check-changelog:
    name: Check changelog fragment
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v6
        with:
          fetch-depth: 0
      - name: Install towncrier
        run: pip install towncrier
      - name: Check for changelog fragment
        run: .github/check-changelog.sh
  Lint:
    runs-on: ubuntu-latest
    steps:
        - uses: actions/checkout@v6
        - name: Install ruff
          run: pip install ruff

        - name: Run ruff format check
          run: ruff format --check .

        - name: Run ruff check
          run: ruff check .
  Mypy:
    runs-on: ubuntu-latest
    steps:
        - uses: actions/checkout@v6
        - name: Install uv
          uses: astral-sh/setup-uv@v8.1.0
          with:
              version: "0.12.14"
        - name: Set up Python
          uses: actions/setup-python@v6
          with:
              python-version: '3.13'
        - name: Install package
          run: uv pip install -e .[dev] --system
        - name: Run mypy (informational)
          run: mypy src/policyengine || echo "mypy found errors (non-blocking until codebase is clean)"
  Python-Compat:
    name: Install + smoke-import (py${{ matrix.python-version }})
    runs-on: ubuntu-latest
    strategy:
      fail-fast: false
      matrix:
        python-version: ["3.11", "3.12", "3.13", "3.14"]
    steps:
      - uses: actions/checkout@v6
      - name: Set up Python ${{ matrix.python-version }}
        uses: actions/setup-python@v6
        with:
          python-version: ${{ matrix.python-version }}
          allow-prereleases: true
      - name: Install uv
        uses: astral-sh/setup-uv@v8.1.0
        with:
          version: "0.12.14"
      - name: Install package (no country-model extras)
        run: uv pip install --system .
      - name: Smoke-import core modules
        run: python -c "import policyengine; from policyengine.core import Dataset, Policy, Simulation; from policyengine.outputs import aggregate, poverty, inequality; print('import OK')"
  BundleVerification:
    name: Verify release inputs and bundle packages
    # Private manifest credentials are available only to trusted repository PRs.
    if: github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository
    runs-on: ubuntu-latest
    env:
      POLICYENGINE_SKIP_COUNTRY_IMPORTS: "1"
    steps:
      - uses: actions/checkout@v6
      - name: Install uv
        uses: astral-sh/setup-uv@v8.1.0
        with:
          version: "0.12.14"
      - name: Set up Python
        uses: actions/setup-python@v6
        with:
          python-version: '3.13'
      - name: Install package for TRACE verification
        run: uv pip install -e . h5py --system
      - name: Check reviewed release inputs
        env:
          HUGGING_FACE_TOKEN: ${{ secrets.HUGGING_FACE_TOKEN }}
        run: |
          if [[ -z "${HUGGING_FACE_TOKEN:-}" ]]; then
            echo "::error::Full private release verification requires HUGGING_FACE_TOKEN"
            exit 1
          fi
          python scripts/check_release_credentials.py
          python scripts/bundle.py check --published-spm --include-tros --strict-tros
          python scripts/release_lock.py
      - name: Install bundle package scaffold
        run: |
          uv pip install -e ".[models]" --system
          python - <<'PY'
          import subprocess
          import sys

          from policyengine import bundle

          requirements = [
              requirement
              for requirement in bundle.bundle_install_requirements(
                  countries=["us", "uk"]
              )
              if not requirement.startswith("policyengine==")
          ]
          subprocess.check_call(
              [sys.executable, "-m", "pip", "install", *requirements]
          )
          PY
      - name: Check installed package consistency
        run: python -m pip check
      - name: Verify bundle packages
        run: policyengine bundle verify --country us --country uk --packages-only --json
  Test:
    runs-on: ubuntu-latest
    strategy:
      fail-fast: false
      matrix:
        python-version: ['3.11', '3.12', '3.13', '3.14']
    steps:
        - name: Checkout repo
          uses: actions/checkout@v6
        - name: Install uv
          uses: astral-sh/setup-uv@v8.1.0
          with:
              version: "0.12.14"

        - name: Set up Python
          uses: actions/setup-python@v6
          with:
              python-version: ${{ matrix.python-version }}
              allow-prereleases: true

        - name: Install package
          run: uv pip install -e .[dev] --system
        - name: Install policyengine
          run: uv pip install policyengine --system
        - name: Run tests with coverage
          run: make test
          env:
            HUGGING_FACE_TOKEN: ${{ secrets.HUGGING_FACE_TOKEN }}