build.yml

name: build

on:
  push:
    branches: [main]
  pull_request:

jobs:
  build:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4

      - uses: actions/setup-python@v5
        with:
          python-version: "3.x"   # stdlib only — no pip install needed

      # Build the DB from the COMMITTED seeds. Deliberately does NOT run
      # tools/fetch_*.py, which hit external networks (GitHub raw, etc.) and
      # would make CI flaky / rate-limited. Refreshing from upstream stays a
      # local action.
      - name: Build database from seeds
        run: python3 build_dict.py --no-export

      # Prove the doc/diagram/badge generators still run end to end.
      - name: Regenerate data model + coverage badge
        run: python3 tools/gen_diagram.py

      # Rebuild the UI / governance projection from the committed datadict.
      - name: Build UI projection
        run: python3 tools/build_ui_dict.py

      # Assert semantic invariants (not git-diff byte-identity, which is noisy
      # because of timestamps in the DB and the report's generated-date line).
      - name: Verify invariants
        run: python3 tools/ci_check.py