orbit-knowledge-graph/lefthook.yml at main · gitlabhq/orbit-knowledge-graph · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
glob_matcher: doublestar

output:
  - summary
  - failure
  - execution_out

commit-msg:
  jobs:
    - name: commitlint
      run: mise exec -- npx --yes -p @commitlint/config-conventional -p @commitlint/cli commitlint --edit {1}

pre-push:
  parallel: true
  jobs:
    - name: clippy
      run: mise run lint:code
      glob: "**/*.rs"

pre-commit:
  parallel: true
  jobs:
    - name: fmt
      run: mise run lint:fmt
      glob: "**/*.rs"
    - name: newlines
      run: mise run lint:newlines
      glob: "**/*.{rs,md,yml,yaml,toml,astro,js,ts,json,mdx,vue,rb,css,mjs}"
    # Advisory/non-blocking: narration lint prints warnings but must not block
    # the commit. The script exits non-zero on findings; `|| true` absorbs that
    # exit at the config level so lefthook treats the job as passed. (Lefthook
    # has no per-job allow_failure primitive — this is the standard workaround.)
    # To promote to a blocking gate, remove `|| true`.
    - name: narration
      run: ./scripts/comment-guard/check-narration.sh {staged_files} || true
      glob: "**/*.rs"
    - name: agent-file-sync
      run: diff AGENTS.md CLAUDE.md
      glob:
        - "AGENTS.md"
        - "CLAUDE.md"
    - name: orbit-skill-docs-sync
      run: diff docs/source/remote/queries/query-language.md skills/orbit/references/query_language.md
      glob:
        - "docs/source/remote/queries/query-language.md"
        - "skills/orbit/references/query_language.md"
    - name: rust-toolchain-sync
      run: mise run toolchain:check
      glob:
        - "mise.toml"
        - "rust-toolchain.toml"
    - name: skill-version-bump
      run: bash ./scripts/check-skill-version-bump.sh
      glob: "skills/**/*"
    - name: prompt-version-bump
      run: bash ./scripts/check-prompt-version-bump.sh
      glob: "config/prompts/**/*.yml"
    - name: ontology-schema
      run: mise run ontology:validate
      glob: "fixtures/ontology/**/*.yaml"
    - name: pinned-version-check
      run: bash ./scripts/check-pinned-version.sh
      glob:
        - "crates/query-engine/formatters/src/**/*.rs"
        - "crates/query-engine/compiler/src/input.rs"
        - "crates/query-engine/compiler/src/passes/validate.rs"
        - "config/schemas/query_response.json"
        - "config/schemas/graph_query.schema.json"
    - name: metrics-catalog-check
      run: mise run metrics:catalog:check
      glob:
        - "crates/orbit-observability/**/*.rs"
        - "crates/xtask/src/metrics_catalog.rs"
        - "crates/orbit-observability/orbit-dashboards/gkg-metrics.json"
    - name: query-language-docs-check
      run: mise run docs:query-language:check
      glob:
        - "config/ontology/**/*.yaml"
        - "crates/xtask/src/query_docs.rs"
        - "crates/ontology/src/lib.rs"
        - "docs/source/remote/queries/query-language.md"
        - "skills/orbit/references/query_language.md"
    - name: secrets-detection
      run: .lefthook/gitleaks.sh pre-commit