Adding pipeline v1.3.0

Author: pdudotdev

.github/workflows/ci.yml

@@ -0,0 +1,59 @@
+name: CI
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+    branches: [main]
+
+jobs:
+  lint:
+    name: Lint (ruff)
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: astral-sh/ruff-action@v3
+        with:
+          args: "check"
+
+  type-check:
+    name: Type check (pyright)
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
+        with:
+          python-version: "3.12"
+          cache: "pip"
+      - name: Install dependencies
+        run: pip install -r requirements.txt
+      - name: Run pyright on input_models/
+        run: pyright
+
+  test:
+    name: Tests
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
+        with:
+          python-version: "3.12"
+          cache: "pip"
+      - name: Install dependencies
+        run: pip install -r requirements.txt
+      - name: Run mock test suites
+        run: pytest testing/mock/ -v --tb=short --timeout=30
+
+  coverage:
+    name: Coverage
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
+        with:
+          python-version: "3.12"
+          cache: "pip"
+      - name: Install dependencies
+        run: pip install -r requirements.txt
+      - name: Run tests with coverage
+        run: pytest testing/mock/ --cov=. --cov-report=term-missing --timeout=30

.gitignore

@@ -6,6 +6,7 @@ __pycache__/
 dist/
 build/
 .pytest_cache/
+.coverage
 *.log
 logs/
 data/

cli/dblcheck.py

@@ -33,17 +33,20 @@
 import logging
 
 from core.logging_config import setup_logging
+
 setup_logging()
 log = logging.getLogger("dblcheck.cli")
 
 from validation.assertions import AssertionResult
 from validation.derivation import derive_assertions
-from validation.evaluator  import evaluate
-from validation.report     import format_text, format_run_dict
+from validation.evaluator import evaluate
+from validation.report import format_run_dict, format_text
+
 # collector transitively imports core.inventory/netbox/vault/settings at module
 # scope; suppress the resulting INFO logs (startup banner shows the same info).
 logging.getLogger("dblcheck").setLevel(logging.WARNING)
-from validation.collector  import collect_state
+from validation.collector import collect_state
+
 logging.getLogger("dblcheck").setLevel(logging.INFO)
 
 # ── Data directory paths ──────────────────────────────────────────────────────
@@ -272,8 +275,8 @@ def _build_parser() -> argparse.ArgumentParser:
 
 
 async def _run(args) -> int:
-    from core.settings import USERNAME, PASSWORD
     from core.inventory import devices, inventory_source
+    from core.settings import PASSWORD, USERNAME
     from core.vault import credential_source
 
     def _fail(msg: str) -> None:

core/__init__.py

@@ -1,2 +1,3 @@
 from dotenv import load_dotenv
+
 load_dotenv()

core/logging_config.py

@@ -12,7 +12,6 @@
 import os
 from datetime import datetime, timezone
 
-
 # Standard LogRecord attributes that should NOT be forwarded as extra JSON fields.
 _STANDARD_ATTRS = frozenset({
     "args", "created", "exc_info", "exc_text", "filename", "funcName",

dashboard/ws_bridge.py

@@ -26,7 +26,8 @@
 import urllib.parse
 from pathlib import Path
 
-from websockets.asyncio.server import serve, broadcast as ws_broadcast
+from websockets.asyncio.server import broadcast as ws_broadcast
+from websockets.asyncio.server import serve
 from websockets.datastructures import Headers
 from websockets.http11 import Response
 
@@ -51,6 +52,7 @@
 # Stored in Vault at dblcheck/dashboard key "token", or DASHBOARD_TOKEN env var.
 sys.path.insert(0, str(PROJECT_DIR))
 from core.vault import get_secret as _get_secret
+
 _DASHBOARD_TOKEN: str = _get_secret("dblcheck/dashboard", "token",
                                      fallback_env="DASHBOARD_TOKEN", quiet=True) or ""
 

deploy/dblcheck_daemon.py

@@ -13,7 +13,7 @@
 import logging
 import os
 import sys
-from datetime import datetime, timezone, timedelta
+from datetime import datetime, timedelta, timezone
 from pathlib import Path
 
 _PROJECT_ROOT = Path(__file__).resolve().parent.parent
@@ -22,6 +22,7 @@
 _STATE_FILE = _PROJECT_ROOT / "data" / "dashboard_state.json"
 
 from core.logging_config import setup_logging
+
 setup_logging()
 
 log = logging.getLogger("dblcheck.daemon")
@@ -146,9 +147,14 @@ async def _validation_loop() -> None:
 async def _bridge() -> None:
     """Run the WebSocket dashboard bridge."""
     from websockets.asyncio.server import serve
+
     from dashboard.ws_bridge import (
-        ws_handler, _http_handler, watch_state_file, PORT, HOST,
+        HOST,
+        PORT,
+        _http_handler,
         register_stop_callback,
+        watch_state_file,
+        ws_handler,
     )
     register_stop_callback(request_stop)
     log.info("Dashboard bridge starting on port %d", PORT)

input_models/models.py

@@ -6,8 +6,8 @@
 import json
 import re
 from typing import Literal
-from pydantic import BaseModel, Field, field_validator, model_validator
 
+from pydantic import BaseModel, Field, field_validator, model_validator
 
 # Compiled patterns for parameter validation
 _VRF_RE    = re.compile(r'^[a-zA-Z0-9_-]{1,32}$')

lab_configs/populate_netbox.py

@@ -18,8 +18,8 @@
 
 sys.path.insert(0, os.path.dirname(os.path.dirname(os.path.abspath(__file__))))
 
-from dotenv import load_dotenv
 import pynetbox
+from dotenv import load_dotenv
 
 from core.vault import get_secret
 

pyproject.toml

@@ -0,0 +1,35 @@
+[tool.ruff]
+line-length = 120
+target-version = "py312"
+
+[tool.ruff.lint]
+select = [
+    "E",   # pycodestyle errors — style violations (indentation, whitespace, line length)
+    "F",   # pyflakes — logic errors (undefined names, unused imports, redefined variables)
+    "W",   # pycodestyle warnings — less severe style issues (trailing whitespace, blank lines)
+    "I",   # isort — import ordering and grouping
+]
+
+[tool.ruff.lint.per-file-ignores]
+"testing/**" = ["E501"]  # Allow long lines in test files (embedded CLI output fixtures)
+
+# Entry-point files insert the project root into sys.path before importing project
+# modules — imports after sys.path manipulation are intentional (E402).
+"cli/dblcheck.py"           = ["E402", "E501"]  # sys.path insert + long diagnostic strings
+"server/MCPServer.py"       = ["E402"]
+"deploy/dblcheck_daemon.py" = ["E402"]
+"dashboard/ws_bridge.py"    = ["E402"]
+"testing/live/**"           = ["E402"]  # Live test files also manipulate sys.path
+"testing/mock/unit/test_vault.py"       = ["E402"]  # Loads real vault module via importlib
+"testing/mock/unit/test_jira_client.py" = ["E402"]  # Loads real jira module via importlib
+
+# Long lines in platform command maps and tool error messages are unavoidable —
+# breaking these strings across lines harms readability.
+"platforms/platform_map.py" = ["E501"]
+"tools/**"                  = ["E501"]
+
+
+[tool.pyright]
+include = ["input_models"]
+pythonVersion = "3.12"
+typeCheckingMode = "basic"