f1fdf27012
- Repo scaffolding: .gitignore, .env.example, Makefile, docker-compose.yml, README.md, CHANGELOG.md, pre-commit config. - Three-service stack: api (Flask 3), db (postgres:16-alpine), front (nginx serving the Vite bundle). Named volumes metamorph_db + metamorph_evidence. - Backend skeleton: Flask app factory, JSON structured logging on stdout, GET /api/v1/health, multi-stage Dockerfile, pyproject.toml driven by uv, Pydantic Settings with secret guard rails (refuses to boot in non-dev with placeholders), APP_ENV gating. - Frontend skeleton: Vite + React 18 + TypeScript strict + TailwindCSS, RTOps design tokens from tasks/design.md, self-hosted JetBrains Mono / IBM Plex Sans via @fontsource, base UI primitives (Card/Tag/SectionHeader/FlowNode/ Button), home page wired to /api/v1/health. - Engine-agnostic Makefile: auto-detects docker or podman, picks the matching compose driver. Targets: up/down/build/rebuild/dev/lint/fmt/test/migrate/ seed-mitre/print-install-token/e2e/inspect-health. - Playwright suite: e2e/tests/m0-smoke.spec.ts (8 tests) + HTML + JUnit reports + traces on retry. - Docs: tasks/spec.md (finalized after Q&A), tasks/design.md, tasks/todo.md (14 milestones), tasks/testing-m0.md, tasks/lessons.md. DoD: make up + make health + make e2e all pass on podman 5.x (Fedora) and docker. TLS terminated by external reverse proxy (spec §6 NF-network). Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
47 lines
1.3 KiB
YAML
47 lines
1.3 KiB
YAML
# Run `pre-commit install` after cloning. CI should run `pre-commit run --all-files`.
|
|
repos:
|
|
- repo: https://github.com/pre-commit/pre-commit-hooks
|
|
rev: v4.6.0
|
|
hooks:
|
|
- id: trailing-whitespace
|
|
- id: end-of-file-fixer
|
|
- id: check-yaml
|
|
- id: check-json
|
|
- id: check-added-large-files
|
|
args: ["--maxkb=512"]
|
|
- id: detect-private-key
|
|
|
|
# Backend — ruff (lint + format)
|
|
- repo: https://github.com/astral-sh/ruff-pre-commit
|
|
rev: v0.4.10
|
|
hooks:
|
|
- id: ruff
|
|
args: ["--fix"]
|
|
files: ^backend/.*\.py$
|
|
- id: ruff-format
|
|
files: ^backend/.*\.py$
|
|
|
|
# Frontend — eslint + tsc via local hooks (must be run from frontend/)
|
|
- repo: local
|
|
hooks:
|
|
- id: eslint
|
|
name: eslint (frontend)
|
|
entry: bash -c 'cd frontend && npm run lint'
|
|
language: system
|
|
files: ^frontend/.*\.(ts|tsx)$
|
|
pass_filenames: false
|
|
|
|
- id: tsc-noemit
|
|
name: tsc --noEmit (frontend)
|
|
entry: bash -c 'cd frontend && npm run typecheck'
|
|
language: system
|
|
files: ^frontend/.*\.(ts|tsx)$
|
|
pass_filenames: false
|
|
|
|
- id: prettier
|
|
name: prettier --check (frontend)
|
|
entry: bash -c 'cd frontend && npm run format:check'
|
|
language: system
|
|
files: ^frontend/.*\.(ts|tsx|css|json|html)$
|
|
pass_filenames: false
|