lint.yml

name: Lint

# Safe by design: no untrusted user input is interpolated into run commands.
# No github.event.* fields, no PR titles/bodies, no commit messages used.

on:
  push:
    branches: [main]
  pull_request:
    branches: [main]

jobs:
  shellcheck:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - name: Run shellcheck on hooks
        uses: ludeeus/action-shellcheck@master
        with:
          scandir: "./hooks"
          severity: warning
      - name: Run shellcheck on scripts
        uses: ludeeus/action-shellcheck@master
        with:
          scandir: "./scripts"
          severity: warning

  markdown-lint:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - name: Markdown lint
        uses: DavidAnson/markdownlint-cli2-action@v16
        with:
          globs: "**/*.md"
          config: |
            {
              "default": true,
              "MD013": false,
              "MD024": { "siblings_only": true },
              "MD033": false,
              "MD041": false
            }

  validate-plugin-manifest:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - name: Validate plugin.json is valid JSON
        run: |
          jq empty .claude-plugin/plugin.json
          echo "plugin.json is valid JSON"