FilesExpand file tree

main

/

code-quality.yml

Copy path

View runs

Blame

More file actions

Blame

More file actions

Latest commit

 

History

History

History

162 lines (144 loc) · 5.17 KB

main

/

code-quality.yml

Copy path

Top

File metadata and controls

• Code
• Blame

162 lines (144 loc) · 5.17 KB

Raw

Copy raw file

Download raw file

Open symbols panel

Edit and raw actions

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47

48

49

50

51

52

53

54

55

56

57

58

59

60

61

62

63

64

65

66

67

68

69

70

71

72

73

74

75

76

77

78

79

80

81

82

83

84

85

86

87

88

89

90

91

92

93

94

95

96

97

98

99

100

101

102

103

104

105

106

107

108

109

110

111

112

113

114

115

116

117

118

119

120

121

122

123

124

125

126

127

128

129

130

131

132

133

134

135

136

137

138

139

140

141

142

143

144

145

146

147

148

149

150

151

152

153

154

155

156

157

158

159

160

161

162

name: Code Quality

on:

pull_request:

branches: [main]

push:

branches: [main]

workflow_dispatch:

# Read-only lint workflow — no writes back to the repo, no deployments.

permissions:

contents: read

jobs:

python-lint:

name: Python (ruff + ty)

runs-on: ubuntu-latest

defaults:

run:

working-directory: plugins/plugin-eval

steps:

- uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4

with:

persist-credentials: false

- name: Install uv

uses: astral-sh/setup-uv@e58605a9b6da7c637471fab8847a5e5a6b8df081 # v5

with:

enable-cache: true

- name: Set up Python

run: uv python install

- name: Sync plugin-eval dev dependencies

run: uv sync --all-extras

- name: ruff check (lint)

# Scope: adapter framework + plugin-eval. yt-design-extractor.py is legacy

# and out of scope for the multi-harness work; not gated.

run: |

uv run ruff check \

../../tools/adapters/ \

../../tools/generate.py \

../../tools/validate_generated.py \

../../tools/doc_gardener.py \

../../tools/tests/ \

src/plugin_eval/

- name: ruff format --check

run: |

uv run ruff format --check \

../../tools/adapters/ \

../../tools/generate.py \

../../tools/validate_generated.py \

../../tools/doc_gardener.py \

../../tools/tests/ \

src/plugin_eval/

- name: ty type-check

run: |

uv run ty check \

../../tools/adapters/ \

../../tools/generate.py \

../../tools/validate_generated.py \

../../tools/doc_gardener.py \

../../tools/tests/ \

src/plugin_eval/

markdown-lint:

name: Markdown (markdownlint-cli2)

runs-on: ubuntu-latest

steps:

- uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4

with:

persist-credentials: false

- name: Set up Node.js

uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4

with:

node-version: '20'

- name: markdownlint

# Lints top-level guides (README, AGENTS, ARCHITECTURE, CLAUDE, per-harness

# setup, CONTRIBUTING) and our authored docs/. Per-plugin READMEs are owned

# by their plugin authors and not lint-gated here — they should be authored

# to spec, but lint enforcement happens at the plugin-author layer, not at

# the framework PR layer.

# Config in .markdownlint.json keeps the ruleset narrow and pragmatic.

uses: DavidAnson/markdownlint-cli2-action@eb5ca3ab411449c66620fe7f1b3c9e10547144b0 # v18

with:

globs: |

*.md

docs/*.md

config: .markdownlint.json

json-lint:

name: JSON / TOML / YAML syntax

runs-on: ubuntu-latest

steps:

- uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4

with:

persist-credentials: false

- name: Install uv

uses: astral-sh/setup-uv@e58605a9b6da7c637471fab8847a5e5a6b8df081 # v5

with:

enable-cache: true

- name: Set up Python

run: uv python install 3.12

- name: Validate every JSON file

run: |

set -e

shopt -s globstar nullglob

failed=0

for f in **/*.json; do

# Skip generated trees and node_modules

case "$f" in

.codex/*|.cursor/*|.cursor-plugin/*|.opencode/*|node_modules/*|skills/*|agents/*|commands/*) continue ;;

esac

if ! uv run python -m json.tool "$f" > /dev/null 2>&1; then

echo "::error file=$f::invalid JSON"

failed=1

fi

done

exit $failed

- name: Validate every TOML file

run: |

set -e

shopt -s globstar nullglob

failed=0

for f in **/*.toml; do

case "$f" in

.codex/*|.cursor/*|.cursor-plugin/*|.opencode/*|node_modules/*|commands/*) continue ;;

esac

if ! uv run python -c "import tomllib, sys; tomllib.loads(open(sys.argv[1]).read())" "$f" 2>/dev/null; then

echo "::error file=$f::invalid TOML"

failed=1

fi

done

exit $failed

- name: Validate every YAML file

run: |

set -e

shopt -s globstar nullglob

failed=0

for f in **/*.yml **/*.yaml; do

case "$f" in

.codex/*|.cursor/*|.cursor-plugin/*|.opencode/*|node_modules/*) continue ;;

esac

# Use safe_load_all to handle multi-document YAML (e.g. Kubernetes manifests

# with `---` document separators — valid YAML, but safe_load only reads the

# first doc and would mis-flag the file as invalid).

if ! uv run --with pyyaml python -c "import yaml, sys; list(yaml.safe_load_all(open(sys.argv[1]).read()))" "$f" 2>/dev/null; then

echo "::error file=$f::invalid YAML"

failed=1

fi

done

exit $failed