feat(ci): lint skills, refs and installer drift (#15)

2026-08-20 14:23:19 +01:00
parent cf5518227e
commit 2f092f9ee0
8 changed files with 442 additions and 6 deletions
@@ -12,6 +12,7 @@ claude-md/   # shared instruction fragments — imported by entry files, concate
 entry/       # entry files: ~/.claude/CLAUDE.md and ~/.codex/AGENTS.md
 systemd/     # user timers: weekly review + hour log — one machine only, see below
 bin/link.sh  # bootstrap symlinks + generated AGENTS.md for non-Nix machines
+bin/lint.sh  # every check CI runs — see below
 nix/home.nix # home-manager module for NixOS machines
 flake.nix    # exposes homeModules.default
 ```
@@ -267,6 +268,24 @@ re-read from the API — nothing in it is acted on directly.

 Drop a new `skills/<name>/SKILL.md` (+ optional `scripts/`, `references/`, `assets/`). Commit. Non-Nix: re-run `bin/link.sh`. Nix: rebuild.

+## Lint
+
+`bin/lint.sh` runs what CI runs. Missing tools are skipped with a note; CI sets `LINT_STRICT=1` so a tool absent from the runner fails instead of passing as green.
+
+Generic checks: `shellcheck`, `ruff` (config in `ruff.toml`), `python3 -m compileall`, `jq` on every JSON file, `node --check`, `nix flake check`.
+
+Repo-specific ones live in `bin/lint-repo.py` (stdlib only, no install needed):
+
+- **Skill frontmatter** — `name` matches the directory, names are unique, `description` is non-empty, no unknown keys. A typo'd key is ignored silently by every tool that reads it.
+- **Internal paths** — every `<skills-root>/…` reference, repo-relative path and relative markdown link in a tracked file points at something that exists.
+- **Installer drift** — `bin/link.sh` and `nix/home.nix` install the same set of files. Expected divergences are listed in the script with the reason.
+- **Entry imports** — every `@~/.claude/x.md` in an entry file is something both installers actually create.
+- **Unit paths** — `ExecStart` targets in `systemd/*.service` and `nix/home.nix` exist in the repo.
+
+Vendored skills are excluded from all of it.
+
+`bin/check-vendored.sh` is not part of this — it needs network and runs weekly in its own workflow.
+
 ## Skills

 | skill | what |