name: license-gate
on: [push, pull_request]
jobs:
  licenses:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: astral-sh/setup-uv@v3
      - run: uv python install 3.11
      - run: uv venv
      # Install ONLY the default runtime tree (+ pip-licenses) - this is what ships.
      # No [fallback]/[harness] extras, so the gate verifies the real install is
      # zero-copyleft. Fails if any GPL/AGPL/LGPL/SSPL dep appears.
      - run: uv pip install -e ".[dev]"
      - run: uv run pip-licenses --fail-on='GPL;AGPL;LGPL;SSPL' --partial-match
