Merge branch 'main' into fix/ci-baseline-rot-mechanical

Author: hyperpolymath

.github/scripts/validate-eclexiaiser.py

@@ -0,0 +1,97 @@
+#!/usr/bin/env bash
+# SPDX-License-Identifier: MPL-2.0
+# Copyright (c) 2026 Jonathan D.A. Jewell (hyperpolymath) <j.d.a.jewell@open.ac.uk>
+#
+# validate-eclexiaiser.sh — structural validation for ./eclexiaiser.toml.
+# Bash replacement for the prior Python implementation; Python is wholly
+# outlawed estate-wide (hyperpolymath/standards [Language Policy]) and the
+# governance / Language / package anti-pattern policy gate fails on any
+# in-tree `.py` file. This validator does the same three checks the Python
+# version did, purely via POSIX text tools — no TOML parser dependency.
+#
+# Checks:
+#   1. [project] section has a non-empty `name`
+#   2. At least one `[[functions]]` table is declared
+#   3. Each `[[functions]]` table has a non-empty `name` and `source`
+
+set -euo pipefail
+
+FILE="${1:-eclexiaiser.toml}"
+
+if [ ! -f "$FILE" ]; then
+  echo "ERROR: $FILE not found" >&2
+  exit 1
+fi
+
+# Strip comments + blank lines into a working buffer
+buf=$(sed -E 's/[[:space:]]*#.*$//' "$FILE" | grep -v '^[[:space:]]*$')
+
+# Extract `name` under [project] — the value on the first `name = "..."` line
+# that appears AFTER [project] and BEFORE the next [section] header.
+project_name=$(
+  printf '%s\n' "$buf" \
+    | awk '
+        /^\[project\][[:space:]]*$/ {in_project=1; next}
+        /^\[/                       {in_project=0}
+        in_project && /^[[:space:]]*name[[:space:]]*=/ {
+          sub(/^[^=]*=[[:space:]]*/, "")
+          gsub(/^"|"$/, "")
+          print
+          exit
+        }
+      '
+)
+
+if [ -z "$project_name" ]; then
+  echo "ERROR: project.name is required" >&2
+  exit 1
+fi
+
+# Count [[functions]] tables and validate each one's name + source.
+# Each [[functions]] header opens a table that runs until the next header.
+errors=$(
+  printf '%s\n' "$buf" \
+    | awk '
+        function flush(  ok_name, ok_source) {
+          if (!in_fn) return
+          if (fn_name == "")   print "ERROR: function name cannot be empty"
+          if (fn_source == "") print "ERROR: function `" (fn_name ? fn_name : "<unnamed>") "` has no source path"
+        }
+        /^\[\[functions\]\][[:space:]]*$/ {
+          flush()
+          in_fn = 1
+          fn_count++
+          fn_name = ""
+          fn_source = ""
+          next
+        }
+        /^\[/ { flush(); in_fn = 0; next }
+        in_fn && /^[[:space:]]*name[[:space:]]*=/ {
+          v = $0
+          sub(/^[^=]*=[[:space:]]*/, "", v)
+          gsub(/^"|"$/, "", v)
+          fn_name = v
+        }
+        in_fn && /^[[:space:]]*source[[:space:]]*=/ {
+          v = $0
+          sub(/^[^=]*=[[:space:]]*/, "", v)
+          gsub(/^"|"$/, "", v)
+          fn_source = v
+        }
+        END {
+          flush()
+          if (fn_count == 0) print "ERROR: at least one [[functions]] entry is required"
+          printf "__COUNT__=%d\n", fn_count
+        }
+      '
+)
+
+count=$(printf '%s\n' "$errors" | sed -n 's/^__COUNT__=//p')
+errs=$(printf '%s\n' "$errors" | grep -v '^__COUNT__=' || true)
+
+if [ -n "$errs" ]; then
+  printf '%s\n' "$errs" >&2
+  exit 1
+fi
+
+printf 'Valid: %s (%s function(s))\n' "$project_name" "$count"

.github/scripts/validate-eclexiaiser.sh

@@ -256,10 +256,10 @@ jobs:
 
           echo "has_manifest=true" >> "$GITHUB_OUTPUT"
 
-          # Validate TOML structure using Python 3.11+ tomllib.
-          # Script lives in .github/scripts/ so the YAML block scalar and
-          # Python's indentation rules don't conflict (see that file's header).
-          python3 .github/scripts/validate-eclexiaiser.py || {
+          # Validate TOML structure with a POSIX-shell + awk validator.
+          # Python is wholly outlawed estate-wide (standards Language Policy)
+          # and triggers the governance / package anti-pattern gate.
+          .github/scripts/validate-eclexiaiser.sh ./eclexiaiser.toml || {
             echo "::error file=eclexiaiser.toml::Invalid eclexiaiser.toml — see step output for details"
             exit 1
           }

.github/workflows/dogfood-gate.yml

@@ -57,6 +57,38 @@ pub const HttpMethod = enum(c_int) {
     delete = 3,
 };
 
+// ---------------------------------------------------------------------------
+// GitLab actions (matches Idris2 GitLabAction + actionToInt encoding)
+// ---------------------------------------------------------------------------
+
+/// All GitLab REST/GraphQL actions exposed by this cartridge.
+/// Encoding mirrors `GitlabApiMcp.SafeGit.actionToInt` (0–19).
+/// Declared here so `iseriser abi-verify` can structurally check the
+/// encoding against the Idris2 source; dispatch wiring follows the
+/// same numbering when introduced.
+pub const GitLabAction = enum(c_int) {
+    list_projects = 0,
+    get_project = 1,
+    create_issue = 2,
+    list_issues = 3,
+    get_issue = 4,
+    comment_issue = 5,
+    create_mr = 6,
+    list_mrs = 7,
+    get_mr = 8,
+    merge_mr = 9,
+    list_branches = 10,
+    create_branch = 11,
+    search_code = 12,
+    list_pipelines = 13,
+    get_pipeline = 14,
+    trigger_pipeline = 15,
+    list_releases = 16,
+    create_release = 17,
+    push_mirror = 18,
+    get_file_contents = 19,
+};
+
 // ---------------------------------------------------------------------------
 // Session slots (thread-safe, fixed-size pool)
 // ---------------------------------------------------------------------------

cartridges/gitlab-api-mcp/ffi/gitlab_api_mcp_ffi.zig

@@ -43,6 +43,27 @@ pub const MongodbAction = enum(c_int) {
     list_databases = 15,
 };
 
+/// BSON wire-protocol field type tags. Matches Idris2
+/// `MongodbMcp.SafeDatabase.BsonFieldType` + `bsonFieldTypeToInt`.
+/// Integer codes follow the BSON spec — gaps (6, 11–15, 17) are by
+/// design (reserved / deprecated BSON codes Idris2 does not expose).
+/// Declared here so `iseriser abi-verify` can structurally check the
+/// encoding against the Idris2 source; the wire-protocol encoder will
+/// use these values when introduced.
+pub const BsonFieldType = enum(c_int) {
+    bson_double = 1,
+    bson_string = 2,
+    bson_document = 3,
+    bson_array = 4,
+    bson_binary = 5,
+    bson_object_id = 7,
+    bson_bool = 8,
+    bson_date_time = 9,
+    bson_null = 10,
+    bson_int32 = 16,
+    bson_int64 = 18,
+};
+
 /// Validate a state transition against the proven Idris2 transition graph.
 fn isValidTransition(from: ConnState, to: ConnState) bool {
     return switch (from) {