refactor: full rewrite with profile support

.editorconfig

@@ -1,11 +1,17 @@
 root = true
 
 [*]
-end_of_line = crlf
+end_of_line = lf
 insert_final_newline = true
 charset = utf-8
 
 indent_size = 4
 indent_style = space
 
 trim_trailing_whitespace = true
+
+[{*.json,*.json5,*.yaml,*.yml}]
+indent_size = 2
+
+[{*.md,*.markdown}]
+trim_trailing_whitespace = false

.github/ISSUE_TEMPLATE/bug_report.yml

@@ -0,0 +1,33 @@
+name: Report a bug
+description: Share when something isn't working as expected
+labels: ["type:bug"]
+body:
+  - type: markdown
+    attributes:
+      value: |
+        Thanks for taking the time to share a bug report!
+  - type: textarea
+    attributes:
+      label: Bug description
+      description: Share a clear and concise description of the bug.
+    validations:
+      required: true
+  - type: textarea
+    attributes:
+      label: Reproducing the issue
+      description: Provide a minimal, reproducible example.
+    validations:
+      required: true
+  - type: textarea
+    attributes:
+      label: Expectations vs. reality
+      description: Give a clear description of what you expected to happen.
+  - type: input
+    attributes:
+      label: Affected version(s)
+      description: Share the version(s) where you observed this bug.
+    validations:
+      required: true
+  - type: textarea
+    attributes:
+      label: Additional context

.github/ISSUE_TEMPLATE/feature_request.yml

@@ -0,0 +1,25 @@
+name: Request a feature
+description: Suggest an improvement or addition to the project
+labels: ['type:feature']
+body:
+  - type: markdown
+    attributes:
+      value: |
+        Thanks for taking the time to request a feature!
+  - type: textarea
+    attributes:
+      label: Related to a problem?
+      description: Is your feature request related to a problem? If so, please describe.
+  - type: textarea
+    attributes:
+      label: Preferred solution
+      description: Give a clear and concise description of what you'd like to see.
+    validations:
+      required: true
+  - type: textarea
+    attributes:
+      label: Alternatives
+      description: Describe any alternatives you've considered.
+  - type: textarea
+    attributes:
+      label: Additional context

.github/labels.yaml

@@ -0,0 +1,17 @@
+# Extends configuration at: https://raw.githubusercontent.com/bsoyka/cookiecutters/main/python-library/default-labels.yaml
+
+- name: 'area:adapter'
+  color: 80cbc4
+  description: 'Related to the REST API adapter layer'
+
+- name: 'area:avatars'
+  color: 80cbc4
+  description: 'Related to avatar URL generation and retrieval'
+
+- name: 'area:models'
+  color: 80cbc4
+  description: 'Related to data models and schemas'
+
+- name: 'area:profiles'
+  color: 80cbc4
+  description: 'Related to profile retrieval'

.github/workflows/publish.yml

@@ -1,26 +1,38 @@
-name: Upload to PyPI
+name: Publishing
 
 on:
-    release:
-        types: [created]
+  release:
+    types: [ published ]
+
+permissions: {}
 
 jobs:
-    publish:
-        runs-on: ubuntu-latest
-
-        steps:
-            - uses: actions/checkout@v2
-            - name: Set up Python
-              uses: actions/setup-python@v2
-              with:
-                  python-version: "3.x"
-            - name: Install dependencies
-              run: |
-                  python -m pip install --upgrade pip
-                  pip install flit
-            - name: Build and publish
-              env:
-                  FLIT_USERNAME: __token__
-                  FLIT_PASSWORD: ${{ secrets.PYPI_PASSWORD }}
-              run: |
-                  flit publish --setup-py
+  publish:
+    name: Upload to PyPI
+
+    runs-on: ubuntu-latest
+
+    environment:
+      name: pypi
+      url: https://pypi.org/project/gravify/
+
+    permissions:
+      contents: read
+      id-token: write
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        with:
+          persist-credentials: false
+
+      - name: Install uv
+        uses: astral-sh/setup-uv@e92bafb6253dcd438e0484186d7669ea7a8ca1cc # v6.4.3
+        with:
+          enable-cache: true
+
+      - name: Build package
+        run: uv build
+
+      - name: Publish to PyPI
+        uses: pypa/gh-action-pypi-publish@76f52bc884231f62b9a034ebfe128415bbaabdfc # v1.12.4

.github/workflows/repo-config.yml

@@ -0,0 +1,28 @@
+name: Repo configuration
+
+on:
+  workflow_dispatch:
+
+permissions: {}
+
+jobs:
+  labels:
+    name: Sync labels
+
+    runs-on: ubuntu-latest
+
+    permissions:
+      issues: write
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        with:
+          persist-credentials: false
+          sparse-checkout: .github/labels.yml
+
+      - uses: EndBug/label-sync@52074158190acb45f3077f9099fea818aa43f97a # v2.3.3
+        with:
+          config-file: |
+            https://raw.githubusercontent.com/bsoyka/cookiecutters/main/python-library/default-labels.yaml
+            .github/labels.yaml

.github/workflows/test.yml

@@ -1,55 +1,128 @@
-name: Test with pytest
+name: Tests
 
-on: [push, pull_request]
+on:
+  push:
+    branches: [ "main" ]
+  pull_request:
+    branches: [ "main" ]
+
+permissions: {}
 
 jobs:
-    test:
-        runs-on: ${{ matrix.os }}
-
-        strategy:
-            fail-fast: false
-            matrix:
-                python-version: ["3.6", "3.7", "3.8", "3.9", "3.10"]
-                os: [ubuntu-latest, macOS-latest, windows-latest]
-
-        steps:
-            - uses: actions/checkout@v2
-            - name: Set up Python ${{ matrix.python-version }}
-              uses: actions/setup-python@v2
-              with:
-                  python-version: ${{ matrix.python-version }}
-            - name: Install dependencies
-              run: |
-                  python -m pip install --upgrade pip
-                  pip install flit pytest
-            - name: Install module
-              run: |
-                  flit install
-            - name: Run tests
-              run: |
-                  pytest
-
-    coverage:
-        runs-on: ubuntu-latest
-
-        steps:
-            - uses: actions/checkout@v2
-            - name: Set up Python ${{ matrix.python-version }}
-              uses: actions/setup-python@v2
-              with:
-                  python-version: ${{ matrix.python-version }}
-            - name: Install dependencies
-              run: |
-                  python -m pip install --upgrade pip
-                  pip install flit pytest coverage
-            - name: Install module
-              run: |
-                  flit install
-            - name: Run tests
-              run: |
-                  coverage run -m pytest
-                  coverage xml
-            - name: Upload coverage to Codecov
-              uses: codecov/codecov-action@v2
-              with:
-                  verbose: true
+  test:
+    name: Run pytest
+
+    runs-on: ubuntu-latest
+
+    permissions:
+      contents: read
+
+    strategy:
+      fail-fast: false
+      matrix:
+        python-version: [ "3.10", "3.11", "3.12", "3.13" ]
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        with:
+          persist-credentials: false
+
+      - name: Install uv
+        uses: astral-sh/setup-uv@e92bafb6253dcd438e0484186d7669ea7a8ca1cc # v6.4.3
+        with:
+          python-version: "${{ matrix.python-version }}"
+          enable-cache: true
+
+      - name: Install just
+        uses: extractions/setup-just@e33e0265a09d6d736e2ee1e0eb685ef1de4669ff # v3.0.0
+
+      - name: Run tests
+        run: just test ${TEST_ENV}
+        env:
+          TEST_ENV: "${{ matrix.python-version }}"
+
+  coverage:
+    name: Generate coverage report
+
+    runs-on: ubuntu-latest
+
+    permissions:
+      contents: read
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        with:
+          persist-credentials: false
+
+      - name: Install uv
+        uses: astral-sh/setup-uv@e92bafb6253dcd438e0484186d7669ea7a8ca1cc # v6.4.3
+        with:
+          enable-cache: true
+
+      - name: Install just
+        uses: extractions/setup-just@e33e0265a09d6d736e2ee1e0eb685ef1de4669ff # v3.0.0
+
+      - name: Run tests and generate coverage report
+        run: |
+          just coverage
+        env:
+          GRAVATAR_KEY: "${{ secrets.GRAVATAR_KEY }}"
+
+      - name: Upload results to Codecov
+        uses: codecov/codecov-action@18283e04ce6e62d37312384ff67231eb8fd56d24 # v5.4.3
+        with:
+          token: "${{ secrets.CODECOV_TOKEN }}"
+
+  type:
+    name: Run type checks
+
+    runs-on: ubuntu-latest
+
+    permissions:
+      contents: read
+
+    strategy:
+      fail-fast: false
+      matrix:
+        python-version: [ "3.10", "3.11", "3.12", "3.13" ]
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        with:
+          persist-credentials: false
+
+      - name: Install uv
+        uses: astral-sh/setup-uv@e92bafb6253dcd438e0484186d7669ea7a8ca1cc # v6.4.3
+        with:
+          python-version: "${{ matrix.python-version }}"
+          enable-cache: true
+
+      - name: Install just
+        uses: extractions/setup-just@e33e0265a09d6d736e2ee1e0eb685ef1de4669ff # v3.0.0
+
+      - name: Run mypy
+        run: just typing
+
+  zizmor:
+    name: Analyze GitHub Actions
+
+    runs-on: ubuntu-latest
+
+    permissions:
+      actions: read
+      contents: read
+      security-events: write
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        with:
+          persist-credentials: false
+
+      - name: Run zizmor
+        uses: zizmorcore/zizmor-action@f52a838cfabf134edcbaa7c8b3677dde20045018 # v0.1.1
+        with:
+          persona: 'auditor'