ci(platform): enforce uipath.platform layering with import-linter

Add an import-linter layers contract over uipath.platform, enforced as a
CI step in the lint-uipath-platform job. The contract statically forbids
import cycles and upward imports between domain packages — the class of
bug behind the 0.1.89 identity/common incident (#1787). Type-checking
imports are excluded; the contract is exhaustive so new subpackages must
be assigned a layer explicitly.

The contract is intentionally committed without ignores: lint-imports
fails at this commit on the pre-existing upward imports from
common/interrupt_models.py, fixed in the next commit.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

Author: andreiancuta-uipath

.github/workflows/lint-packages.yml

@@ -139,6 +139,11 @@ jobs:
         working-directory: packages/uipath-platform
         run: uv run ruff format --check .
 
+      - name: Check import contracts
+        if: steps.check.outputs.skip != 'true'
+        working-directory: packages/uipath-platform
+        run: uv run lint-imports
+
   lint-uipath:
     name: Lint uipath
     needs: detect-changed-packages

.gitignore

@@ -28,6 +28,7 @@ wheels/
 
 .cache/*
 .cache
+.import_linter_cache/
 site
 
 

packages/uipath-platform/CLAUDE.md

@@ -17,6 +17,7 @@ pytest tests/services/test_assets_service.py  # Single test file
 ruff check .                  # Lint
 ruff format --check .         # Format check
 mypy src tests                # Type check
+uv run lint-imports           # Import-graph layering contract
 ```
 
 No justfile exists for this package — run commands directly.

packages/uipath-platform/pyproject.toml

@@ -47,6 +47,7 @@ dev = [
   "pytest-cov>=4.1.0",
   "pytest-mock>=3.11.1",
   "pre-commit>=4.1.0",
+  "import-linter>=2.0",
 ]
 
 [tool.hatch.build.targets.wheel]
@@ -126,6 +127,25 @@ exclude_lines = [
   "@(abc\\.)?abstractmethod",
 ]
 
+[tool.importlinter]
+root_package = "uipath.platform"
+exclude_type_checking_imports = true
+
+[[tool.importlinter.contracts]]
+id = "platform-layers"
+name = "uipath.platform layered architecture"
+type = "layers"
+containers = ["uipath.platform"]
+exhaustive = true
+layers = [
+    "_uipath : guardrails : resume_triggers",
+    "agenthub : automation_ops : automation_tracker : connections : context_grounding : entities : external_applications : governance : memory : pii_detection : portal : resource_catalog : semantic_proxy",
+    "orchestrator",
+    "action_center : attachments : chat : documents : identity",
+    "common",
+    "constants : errors",
+]
+
 [tool.uv]
 exclude-newer = "2 days"