provisioning-core/.pre-commit-config.yaml

177 lines
7 KiB
YAML
Raw Normal View History

# Pre-commit Framework Configuration
# Generated by dev-system/ci
# Configures git pre-commit hooks for Rust projects
repos:
# ============================================================================
# Rust Hooks (COMMENTED OUT - Not used in this repo)
# ============================================================================
# - repo: local
# hooks:
# - id: rust-fmt
# name: Rust formatting (cargo +nightly fmt)
# entry: bash -c 'cargo +nightly fmt --all -- --check'
# language: system
# types: [rust]
# pass_filenames: false
# stages: [pre-commit]
#
# - id: rust-clippy
# name: Rust linting (cargo clippy)
# entry: bash -c 'cargo clippy --all-targets -- -D warnings'
# language: system
# types: [rust]
# pass_filenames: false
# stages: [pre-commit]
#
# - id: rust-test
# name: Rust tests
# entry: bash -c 'cargo test --workspace'
# language: system
# types: [rust]
# pass_filenames: false
# stages: [pre-push]
#
# - id: cargo-deny
# name: Cargo deny (licenses & advisories)
# entry: bash -c 'cargo deny check licenses advisories'
# language: system
# pass_filenames: false
# stages: [pre-push]
# ============================================================================
# Nushell Hooks (ACTIVE)
# ============================================================================
- repo: local
hooks:
- id: nushell-check
name: Nushell validation (nu --ide-check)
entry: >-
bash -c 'for f in $(git diff --cached --name-only --diff-filter=ACM | grep "\.nu$"); do
echo "Checking: $f"; nu --ide-check 100 "$f" || exit 1; done'
language: system
types: [file]
files: \.nu$
pass_filenames: false
stages: [pre-commit]
# ============================================================================
# Nickel Hooks (ACTIVE)
# ============================================================================
- repo: local
hooks:
- id: nickel-typecheck
name: Nickel type checking
entry: >-
bash -c 'export NICKEL_IMPORT_PATH="../:."; for f in $(git diff --cached --name-only --diff-filter=ACM | grep "\.ncl$"); do
echo "Checking: $f"; nickel typecheck "$f" || exit 1; done'
language: system
types: [file]
files: \.ncl$
pass_filenames: false
stages: [pre-commit]
# ============================================================================
# Bash Hooks (optional - enable if using Bash)
# ============================================================================
# - repo: local
# hooks:
# - id: shellcheck
# name: Shellcheck (bash linting)
# entry: shellcheck
# language: system
# types: [shell]
# stages: [commit]
#
# - id: shfmt
# name: Shell script formatting
# entry: bash -c 'shfmt -i 2 -d'
# language: system
# types: [shell]
# stages: [commit]
# ============================================================================
# Markdown Hooks (ACTIVE)
# ============================================================================
- repo: local
hooks:
- id: markdownlint
name: Markdown linting (markdownlint-cli2)
entry: markdownlint-cli2
language: system
types: [markdown]
stages: [pre-commit]
# CRITICAL: markdownlint-cli2 MD040 only checks opening fences for language.
# It does NOT catch malformed closing fences (e.g., ```plaintext) - CommonMark violation.
# This hook is ESSENTIAL to prevent malformed closing fences from entering the repo.
# See: .markdownlint-cli2.jsonc line 22-24 for details.
- id: check-malformed-fences
name: Check malformed closing fences (CommonMark)
entry: bash -c 'cd .. && nu scripts/check-malformed-fences.nu $(git diff --cached --name-only --diff-filter=ACM | grep "\.md$" | grep -v ".coder/" | grep -v ".claude/" | grep -v "old_config/" | tr "\n" " ")'
language: system
types: [markdown]
pass_filenames: false
stages: [pre-commit]
exclude: ^\.coder/|^\.claude/|^old_config/
# ============================================================================
# General Pre-commit Hooks
# ============================================================================
- repo: https://github.com/pre-commit/pre-commit-hooks
rev: v4.5.0
hooks:
- id: check-added-large-files
args: ['--maxkb=1000']
- id: check-case-conflict
- id: check-merge-conflict
- id: check-toml
# - id: check-yaml
# exclude: ^\.woodpecker/
- id: end-of-file-fixer
exclude: ^(\.coder/|\.wrks/|\.claude/)
- id: trailing-whitespace
exclude: \.md$|^(\.coder/|\.wrks/|\.claude/)
- id: mixed-line-ending
exclude: ^(\.coder/|\.wrks/|\.claude/)
# ============================================================================
# ADR-026 nulib structural constraints (M6)
# ============================================================================
- repo: local
hooks:
- id: nulib-no-relative-imports-new-tree
name: "ADR-026: no relative imports in new nulib layers"
entry: bash -c 'found=$(git diff --cached --name-only | grep "nulib/(cli|orchestration|platform|domain|tools|primitives|extensions)/" | xargs grep -l "^use \.\." 2>/dev/null); [ -z "$found" ] && exit 0; echo "Relative imports found in new tree:"; echo "$found"; exit 1'
language: system
pass_filenames: false
stages: [pre-commit]
- id: nulib-single-nickel-export
name: "ADR-026: ^nickel export only in tools/nickel/process.nu"
entry: bash -c 'found=$(git diff --cached --name-only | grep "nulib/.*\.nu$" | grep -v "nulib/tools/nickel/process.nu" | xargs grep -l "\\^nickel export" 2>/dev/null); [ -z "$found" ] && exit 0; echo "^nickel export outside tools/nickel/process.nu:"; echo "$found"; exit 1'
language: system
pass_filenames: false
stages: [pre-commit]
- id: nulib-no-surrealdb
name: "ADR-026: no surrealdb calls in nulib"
entry: bash -c 'found=$(git diff --cached --name-only | grep "nulib/.*\.nu$" | xargs grep -l "surrealdb\|surreal\b" 2>/dev/null); [ -z "$found" ] && exit 0; echo "surrealdb in nulib:"; echo "$found"; exit 1'
language: system
pass_filenames: false
stages: [pre-commit]
- id: nulib-no-star-imports-new-tree
name: "ADR-026: no star imports (use X *) in new nulib layers"
entry: bash -c 'found=$(git diff --cached --name-only | grep "nulib/(cli|orchestration|platform|domain|tools|primitives|extensions)/.*\.nu$" | xargs grep -lP "^use \S+ \*$" 2>/dev/null | grep -v "mod\.nu"); [ -z "$found" ] && exit 0; echo "Star imports in new tree (outside mod.nu):"; echo "$found"; exit 1'
language: system
pass_filenames: false
stages: [pre-commit]