|
1 | | -# SPDX-License-Identifier: MPL-2.0 |
2 | | -name: RSR Language Policy |
| 1 | +# SPDX-License-Identifier: AGPL-3.0-or-later |
| 2 | +# RSR Anti-Pattern CI Check |
| 3 | +# SPDX-License-Identifier: AGPL-3.0-or-later |
| 4 | +# |
| 5 | +# Enforces: No TypeScript, No Go, No Python (except SaltStack), No npm |
| 6 | +# Allows: ReScript, Deno, WASM, Rust, OCaml, Haskell, Guile/Scheme |
| 7 | + |
| 8 | +name: RSR Anti-Pattern Check |
3 | 9 |
|
4 | 10 | on: |
5 | 11 | push: |
6 | | - branches: [main] |
| 12 | + branches: [main, master, develop] |
7 | 13 | pull_request: |
8 | | - branches: [main] |
| 14 | + branches: [main, master, develop] |
| 15 | + |
9 | 16 |
|
10 | 17 | permissions: read-all |
11 | 18 |
|
12 | 19 | jobs: |
13 | | - check-banned-patterns: |
14 | | - name: Check for banned languages/patterns |
| 20 | + antipattern-check: |
15 | 21 | runs-on: ubuntu-latest |
| 22 | + permissions: |
| 23 | + contents: read |
16 | 24 | steps: |
17 | | - - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4 |
18 | | - |
| 25 | + - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 |
| 26 | + |
19 | 27 | - name: Check for TypeScript |
20 | 28 | run: | |
21 | | - if find . -name "*.ts" -o -name "*.tsx" | grep -v node_modules | grep -q .; then |
22 | | - echo "::error::TypeScript files found! Use ReScript instead (per RSR policy)" |
| 29 | + # Exclude bindings/deno/ - those are Deno FFI files using Deno.dlopen, not plain TypeScript |
| 30 | + # Exclude .d.ts files - those are TypeScript type declarations for ReScript FFI |
| 31 | + TS_FILES=$(find . \( -name "*.ts" -o -name "*.tsx" \) | grep -v node_modules | grep -v 'bindings/deno' | grep -v '\.d\.ts$' || true) |
| 32 | + if [ -n "$TS_FILES" ]; then |
| 33 | + echo "❌ TypeScript files detected - use ReScript instead" |
| 34 | + echo "$TS_FILES" |
23 | 35 | exit 1 |
24 | 36 | fi |
25 | | - echo "✓ No TypeScript files found" |
26 | | - |
| 37 | + echo "✅ No TypeScript files (Deno FFI bindings excluded)" |
| 38 | +
|
27 | 39 | - name: Check for Go |
28 | 40 | run: | |
29 | 41 | if find . -name "*.go" | grep -q .; then |
30 | | - echo "::error::Go files found! Use Rust instead (per RSR policy)" |
| 42 | + echo "❌ Go files detected - use Rust/WASM instead" |
| 43 | + find . -name "*.go" |
31 | 44 | exit 1 |
32 | 45 | fi |
33 | | - echo "✓ No Go files found" |
34 | | - |
35 | | - - name: Check for npm/Node artifacts |
| 46 | + echo "✅ No Go files" |
| 47 | +
|
| 48 | + - name: Check for Python (non-SaltStack) |
36 | 49 | run: | |
37 | | - if [ -f "package-lock.json" ] || [ -d "node_modules" ]; then |
38 | | - echo "::error::npm artifacts found! Use Deno instead (per RSR policy)" |
| 50 | + PY_FILES=$(find . -name "*.py" | grep -v salt | grep -v _states | grep -v _modules | grep -v pillar | grep -v venv | grep -v __pycache__ || true) |
| 51 | + if [ -n "$PY_FILES" ]; then |
| 52 | + echo "❌ Python files detected - only allowed for SaltStack" |
| 53 | + echo "$PY_FILES" |
39 | 54 | exit 1 |
40 | 55 | fi |
41 | | - echo "✓ No npm artifacts found" |
42 | | - |
43 | | - - name: Check for Python (non-SaltStack) |
| 56 | + echo "✅ No non-SaltStack Python files" |
| 57 | +
|
| 58 | + - name: Check for npm lockfiles |
44 | 59 | run: | |
45 | | - banned_py=$(find . -name "*.py" | grep -v -E "(salt|pillar|states|_modules|_states)" | head -1) |
46 | | - if [ -n "$banned_py" ]; then |
47 | | - echo "::error::Python files found outside SaltStack! Use ReScript/Rust (per RSR policy)" |
| 60 | + if [ -f "package-lock.json" ] || [ -f "yarn.lock" ]; then |
| 61 | + echo "❌ npm/yarn lockfile detected - use Deno instead" |
48 | 62 | exit 1 |
49 | 63 | fi |
50 | | - echo "✓ No banned Python files found" |
51 | | - |
52 | | - - name: Check for Makefiles |
| 64 | + echo "✅ No npm lockfiles" |
| 65 | +
|
| 66 | + - name: Check for tsconfig |
53 | 67 | run: | |
54 | | - if [ -f "Makefile" ] || [ -f "makefile" ] || find . -name "*.mk" | grep -q .; then |
55 | | - echo "::error::Makefile found! Use Justfile or Mustfile instead (per RSR policy)" |
| 68 | + if [ -f "tsconfig.json" ]; then |
| 69 | + echo "❌ tsconfig.json detected - use ReScript instead" |
56 | 70 | exit 1 |
57 | 71 | fi |
58 | | - echo "✓ No Makefiles found" |
| 72 | + echo "✅ No tsconfig.json" |
| 73 | +
|
| 74 | + - name: Verify Deno presence (if package.json exists) |
| 75 | + run: | |
| 76 | + if [ -f "package.json" ]; then |
| 77 | + if [ ! -f "deno.json" ] && [ ! -f "deno.jsonc" ]; then |
| 78 | + echo "⚠️ Warning: package.json without deno.json - migration recommended" |
| 79 | + fi |
| 80 | + fi |
| 81 | + echo "✅ Deno configuration check complete" |
| 82 | +
|
| 83 | + - name: Summary |
| 84 | + run: | |
| 85 | + echo "╔════════════════════════════════════════════════════════════╗" |
| 86 | + echo "║ RSR Anti-Pattern Check Passed ✅ ║" |
| 87 | + echo "║ ║" |
| 88 | + echo "║ Allowed: ReScript, Deno, WASM, Rust, OCaml, Haskell, ║" |
| 89 | + echo "║ Guile/Scheme, SaltStack (Python) ║" |
| 90 | + echo "║ ║" |
| 91 | + echo "║ Blocked: TypeScript, Go, npm, Python (non-Salt) ║" |
| 92 | + echo "╚════════════════════════════════════════════════════════════╝" |
0 commit comments