Makefile

# make verify reproduces the full merge-blocking gate set locally, byte for
# byte with CI: ci.yml runs this exact target, and release.yml re-runs it at
# the tagged commit before anything publishes. Run it before opening a PR.
.PHONY: verify sync lint format typecheck test audit clean

verify: sync lint format typecheck test audit
	@echo "make verify: all gates passed."

sync:
	uv sync --frozen

lint:
	uv run ruff check .

format:
	uv run ruff format --check .

typecheck:
	uv run mypy

test:
	uv run pytest --cov --cov-report=term-missing

# Dependency vulnerability audit over the locked environment. The project has
# zero runtime dependencies, so this audits the locked dev toolchain; the
# local package itself is not on PyPI and is reported as skipped, not failed.
audit:
	uv run pip-audit

clean:
	rm -rf .coverage .pytest_cache .mypy_cache .ruff_cache dist build