ci: align ruff tooling and add CI workflow (#6)

* ci: align ruff tooling and add CI workflow

The .pre-commit-config.yaml was pinning ruff v0.5.0 (mid-2024) while
the dev-dep ruff resolved to v0.15.11. The two versions disagree on
isort grouping (newer ruff splits pydantic and openarmature into
separate import groups; v0.5.0 merges them), which caused test files
to ping-pong between forms on every commit cycle.

Bump pre-commit ruff to v0.15.11 to match the dev dep, then run
`ruff check --fix` once to settle the disagreement on the newer
form. Eight test-file imports reordered as a result.

Add `.github/workflows/ci.yml` running:

  - Checkout with submodules (the openarmature-spec submodule carries
    the conformance fixtures)
  - uv sync --frozen
  - ruff check
  - ruff format --check
  - pyright src/ tests/
  - pytest -q

Same checks the pre-commit hook runs locally, now also enforced
server-side so PRs from contributors who haven't installed pre-commit
don't bypass them. Concurrency group cancels in-flight runs on the
same ref.

* ci: add explicit permissions block for least-privilege

Mirrors LunarCommand/openarmature-examples#3: pin GITHUB_TOKEN to
`contents: read`. The workflow only needs to checkout code + the
spec submodule; no writes.

* ci: apply v0.15.11 ordering to files added since rebase base

Post-rebase: ruff v0.15.11 splits pydantic and openarmature into
separate import groups, where v0.5.0 (the version on main when #5
landed) merged them. The bumped pre-commit hook in this branch
applies the new ordering to test files brought in by #5.

* ci: drop explicit Python install, use .python-version

Per PR #6 review: the workflow had `uv python install 3.12` while
.python-version pins 3.14, creating a CI/dev skew where CI could
end up testing a different interpreter than developers run locally.

Drop the explicit install step. uv sync auto-provisions whatever
.python-version pins, keeping CI and dev aligned. requires-python
">=3.12" in pyproject.toml still establishes 3.12 as the floor;
testing the floor specifically is a separate concern (matrix build)
we can add later if needed.

Author: chris-colinsky

.github/workflows/ci.yml

@@ -0,0 +1,51 @@
+name: CI
+
+on:
+  pull_request:
+    branches: [main]
+  push:
+    branches: [main]
+
+# Least-privilege: the workflow only needs to read code (checkout +
+# submodule). No writes anywhere.
+permissions:
+  contents: read
+
+# Cancel in-flight runs on the same ref when a new push lands.
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  test:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          # Conformance fixtures live in the openarmature-spec submodule.
+          submodules: recursive
+
+      - name: Install uv
+        uses: astral-sh/setup-uv@v4
+        with:
+          enable-cache: true
+
+      # No explicit `uv python install` — `uv sync` auto-provisions the
+      # interpreter pinned in `.python-version`, so CI tests the same
+      # version developers run locally.
+
+      - name: Sync deps
+        run: uv sync --frozen
+
+      - name: Lint (ruff check)
+        run: uv run ruff check .
+
+      - name: Format check (ruff format --check)
+        run: uv run ruff format --check .
+
+      - name: Type check (pyright)
+        run: uv run pyright src/ tests/
+
+      - name: Run tests (pytest)
+        run: uv run pytest -q

.pre-commit-config.yaml

@@ -10,7 +10,7 @@ repos:
       - id: check-added-large-files
 
   - repo: https://github.com/astral-sh/ruff-pre-commit
-    rev: v0.5.0
+    rev: v0.15.11
     hooks:
       - id: ruff
         args: [--fix]

tests/conformance/adapter.py

@@ -15,6 +15,8 @@
 from dataclasses import dataclass, field
 from typing import TYPE_CHECKING, Annotated, Any, cast
 
+from pydantic import Field, create_model
+
 from openarmature.graph import (
     END,
     CompiledGraph,
@@ -32,7 +34,6 @@
 )
 from openarmature.graph.events import NodeEvent
 from openarmature.graph.observer import Observer
-from pydantic import Field, create_model
 
 if TYPE_CHECKING:
     from openarmature.graph.observer import _InvocationContext

tests/conformance/test_conformance.py

@@ -12,6 +12,7 @@
 
 import pytest
 import yaml
+
 from openarmature.graph import (
     CompileError,
     NodeException,
@@ -139,15 +140,15 @@ async def test_runtime_fixture(fixture_path: Path) -> None:
         for name, expected_events in expected["observer_events"].items():
             actual = observer_fixtures[name].events
             normalized = [normalize_expected_event(ev) for ev in expected_events]
-            assert (
-                actual == normalized
-            ), f"observer events mismatch for {name!r}: actual={actual}, expected={normalized}"
+            assert actual == normalized, (
+                f"observer events mismatch for {name!r}: actual={actual}, expected={normalized}"
+            )
 
     if "delivery_order" in expected:
         expected_delivery = [(d["observer"], d["step"]) for d in expected["delivery_order"]]
-        assert (
-            delivery == expected_delivery
-        ), f"delivery_order mismatch: actual={delivery}, expected={expected_delivery}"
+        assert delivery == expected_delivery, (
+            f"delivery_order mismatch: actual={delivery}, expected={expected_delivery}"
+        )
 
 
 # ---------------------------------------------------------------------------

tests/unit/test_compile_errors.py

@@ -3,6 +3,7 @@
 from typing import Any
 
 import pytest
+
 from openarmature.graph import (
     END,
     DanglingEdge,

tests/unit/test_generics.py

@@ -11,6 +11,8 @@
 
 from typing import Annotated, Any, assert_type
 
+from pydantic import Field
+
 from openarmature.graph import (
     END,
     CompiledGraph,
@@ -20,7 +22,6 @@
     State,
     append,
 )
-from pydantic import Field
 
 
 class ParentS(State):

tests/unit/test_projection.py

@@ -1,13 +1,14 @@
 """Projection strategy unit coverage: FieldNameMatching + ExplicitMapping."""
 
 import pytest
+from pydantic import Field
+
 from openarmature.graph import (
     ExplicitMapping,
     FieldNameMatching,
     MappingReferencesUndeclaredField,
     State,
 )
-from pydantic import Field
 
 
 class Parent(State):

tests/unit/test_runtime_errors.py

@@ -10,6 +10,8 @@
 from typing import Annotated, Any
 
 import pytest
+from pydantic import Field
+
 from openarmature.graph import (
     END,
     EdgeException,
@@ -20,7 +22,6 @@
     StateValidationError,
     append,
 )
-from pydantic import Field
 
 
 class S(State):

tests/unit/test_state_and_reducers.py

@@ -3,9 +3,10 @@
 from typing import Annotated
 
 import pytest
+from pydantic import Field, ValidationError
+
 from openarmature.graph import END, State, append, last_write_wins, merge
 from openarmature.graph.state import field_reducers, resolve_reducer
-from pydantic import Field, ValidationError
 
 
 class S(State):

tests/unit/test_subgraph.py

@@ -8,6 +8,8 @@
 
 from typing import Annotated, Any
 
+from pydantic import Field
+
 from openarmature.graph import (
     END,
     FieldNameMatching,
@@ -16,7 +18,6 @@
     SubgraphNode,
     append,
 )
-from pydantic import Field
 
 
 class Inner(State):